A friend just sent me this email: ============================ I found a great resource last night for sources of SPAM. www.senderbase.com I was doing some research last night on where SPAM was coming from on my server. It is so easy now since I put the Spam assassin engine on the server. I still get some spam, maybe about 20-30 a day. So I started reviewing logs about a month ago for this stuff and recognized some trends, domains and IPs. So I did a little Google.com research and found that site. Sure enough the domain I was looking for was listed in the home page, sending almost 87 million message a day. The company listed for the IP addresses is WholesaleBandwidth, Inc. They do not even have a real web site.
Any way they give you a quick way to export all the known IPs for that block for your IP filter. I did theirs and a few others last night, I now have a list of about 2500 IPs that I block. This morning I had a much different inbox! Only 2 SPAMs, normally I have 7-12. I also checked my logs and they are smaller than they normally would be at 7 AM, except the one listing the blocked IPs. I only picked the blocks I found to send only spam. I went through and reviewed hundreds of entries in the logs for these IPs and they were all SPAMs. So I thought I would pass it along to help you out. I did some analysis over the weekend on my Anti Spam logs and actual SMTP logs and found that roughly 2/3 of all messages sent to the server were scored as SPAM. After blocking these sources, I will see how that ratio changes this week. ============================ Shalom Ya'll Amnon Nissan Deltaforce 919-852-2121 http://www.deltaforce.net Host, Computers 2K3 on 850 The Buzz (AM 850) in Raleigh NC Sundays 8-10am http://www.850thebuzz.com/compute.html MV stuff are at: http://www.deltaforce.net/deuce/ http://www.ncmvpa.com ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
