Top ten (message IDs changed to protect the spamtraps). Note these were when scanning with mass-check, so no network tests.
[craig@belphegore masses]$ sort -rn +1 spam.log |head -10 Y 51 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY,FORGED_YAHOO_RCVD,SUBJ_HAS_UNIQ_ID Y 50 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,VERY_SUSP_CC_RECIPS,MSG_ID_ADDED_BY_MTA_2,MAY_BE_FORGED,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 50 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,YOUR_INCOME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 50 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,YOUR_INCOME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY,MISSING_HEADERS Y 50 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,YOUR_INCOME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 49 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY,SUBJ_HAS_UNIQ_ID Y 48 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,MAY_BE_FORGED,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 48 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,MAY_BE_FORGED,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 47 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> SUBJ_HAS_SPACES,MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY Y 47 /home/craig/spams/spamtrap.mbox:<[EMAIL PROTECTED]> MSG_ID_ADDED_BY_MTA_2,NO_REAL_NAME,EARN_PER_WEEK,FOR_FREE,MONEY_MAKING,WORK_AT_HOME,GUARANTEE,PARA_A_2_C_OF_1618,REPLY_REMOVE_SUBJECT,REMOVE_SUBJ,OPT_IN,SECTION_301,SENT_IN_COMPLIANCE,LINES_OF_YELLING,LINES_OF_YELLING_2,LINES_OF_YELLING_3,SUPERLONG_LINE,ASCII_FORM_ENTRY,MISSING_HEADERS On Thu, 2002-04-04 at 02:34, Olivier Nicole wrote: > On one month worth of spam, here are the highest hits: > > 30.4 > 30.8 > 30.9 > 31.2 > 39.5 > 55.8 > > The 39.5 triggered the following tests: SUBJ_ALL_CAPS, NO_REAL_NAME, > ADVERT_CODE, SUBJ_HAS_SPACES, TO_MALFORMED, PLING, FROM_ENDS_IN_NUMS, > INVALID_DATE_TZ_ABSURD, SMTPD_IN_RCVD, VIAGRA, CLICK_BELOW, > CASHCASHCASH, EXCUSE_3, HTML_WITH_BGCOLOR, NUMERIC_HTTP_ADDR, > MAILTO_WITH_SUBJ, MAILTO_LINK, A_HREF_TO_REMOVE, FREQ_SPAM_PHRASE, > RAZOR_CHECK, SPAM_PHRASES_020, CTYPE_JUST_HTML, FORGED_HOTMAIL_RCVD, > RCVD_IN_ORBS, RCVD_IN_ORBZ, RCVD_IN_RFCI, SUBJ_HAS_UNIQ_ID > > The 55.8 was when I posted the French translation of the describe > messages (it is not legitimate then). > > Olivier > > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
