Kamaraju Kusumanchi wrote: > On Monday 08 January 2007 14:13, Russell L. Harris wrote: > >> So, before I preach about the dangers of spyware and zombies to my >> buddies using Window$, how can I be certain that my own Debian machine >> has not been compromised and has not become a zombie? Is there a >> simple test which I can run on a weekly basis? >> > > You can use senderbase statistics to see if there is a huge increase in > email activity from the IP address under consideration. > > For example, if you visit > > http://www.senderbase.org/search?searchString=204.13.69.220 > > It says that on average the machine sends 10^2.9 emails per day. In the > last 30 days, it sent 10^3.6 emails per day. Last day (ie yesterday) it > sent 10^4.9 emails. The trend clearly indiciates that there has been an > increase in email activity which might correlate with the machine being a > zombie.
I've noticed it tends to really, really highball the figures for really small sites. For example, it shows a magnitude of 2.0 for the last day, but I know for a fact only two messages were sent yesterday, which shouldn't even get me to 0.1 magnitude. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
