New Spam Record

As I described in a previous post when talking about spam countermeasures on one of our servers, misbehaving mail senders are locked down using fail2ban for a certain amount of time.

Today, we got two new records in our internal spammer high score:

Banned services with Fail2Ban:                          Bans:Unbans<br /> Exim4:                                                  [243:241]<br /> 202.109.98.37 (chipolbrok.com.cn)                       9:10<br /> 122.55.96.50 (122.55.96.50.pldt.net)                    7:8

Those two hosts in China and the Phillipines have been behaving most rowdily so far.

And, in addition, I cannot verify that the spam situation improved after one of the major botnet control hosters was taken down. Quite the contrary. We saw a small decrease for a few days but the average number of spam/malware per day that someone is trying to load off at our server has more than doubled compared to the situation two, three weeks ago. 🙁

comments

comments powered by Disqus