Theo,
How did you get these useful stats ? Custom made script extracting data out of the
logs ? Maybe you could share part of it so I could run it against my spam holding
mbox..... I always love to see stats on anything :)
I am using postfix + procmail + SA 2.50. All spam detected mail is saved to a spam
holding mbox
How do I get from the mbox file what the SMTP HELO message was from the sender ?
I know that SA does check on it, but I could not find this information in my mbox file.
Regards,
Stephane
So my spamtraps have been getting a ton of these "Copy any DVD to CD"
spams. Each address is getting 2 of the message from different From
addresses. I haven't been inconvenienced by them, but they just tick
me off so I thought I'd share some stats:
307 spams between Fri, 7 Mar 2003 22:47:45 and Sat, 8 Mar 2003 13:13:37
307 caught by SpamAssassin ;)
305 claim (SMTP HELO) to be "mail.com", 2 claim to be "computer"
297 have reverse DNS lookups, 21 "may be forged", 10 have no reverse DNS lookup
it looks like most of them are cable modems or dsl of some form
Top 10:
24 pcp02890723pcs.catonv01.md.comcast.net
22 c66.169.175.153.ts46v-14.otn-g2.ftwrth.tx.charter.com
16 pcp02767638pcs.ftmyer01.fl.comcast.net
14 pcp02795480pcs.roylok01.mi.comcast.net
12 jc-24-158-103-222.chartertn.net
10 aq63.montanavision.com
10 12-224-91-222.client.attbi.com
10 12-211-49-60.client.attbi.com
8 pcp02296028pcs.sarast01.fl.comcast.net
8 [218.65.17.182]
Domain stats:
95 comcast.net
63 attbi.com
33 rr.com
31 charter.com
13 chartertn.net
10 montanavision.com
7 rcn.com
6 net.tw
4 sprintbbd.net
3 swbell.net
3 dsl-verizon.net
2 net.ve
2 interbusiness.it
2 charterwv.net
1 wideopenwest.com
1 videotron.ca
1 telus.net
1 pacbell.net
1 net.br
1 knology.net
1 gabn.net
1 frontiernet.net
1 ameritech.net
Countries of server sending me the spam:
283 United States
8 China
6 Taiwan, Province of China
3 Venezuela
2 N/A
2 Italy
1 Pakistan
1 Canada
1 Brazil
--
Randomly Generated Tagline:
You tell 'em cabbage, You've got the head.
att0ygqh.dat
Description: Binary data
