Mystery Spam

Discuss here all what concerns the MailCleaner anti-spam efficiency, share your rulesets and tips for SpamAssassin !

Moderators: Pascal, mentor, FlorianB, bourgeois

User avatar
CCGTECH
Posts: 92
Joined: Thu Apr 25, 2013 4:59 am
How did you hear about Mailcleaner: open source community
Location: West Hollywood, CA

Mystery Spam

Postby CCGTECH » Thu Apr 02, 2015 9:45 pm

Okay, this is crazy. The incoming spool has hundreds of these spam messages. Can someone shed some light on this behavior? Is anyone else having this problem?
Attachments
spam7.jpg
spam7.jpg (204.96 KiB) Viewed 3640 times
charlesd
Posts: 23
Joined: Thu Jan 23, 2014 8:39 pm
How did you hear about Mailcleaner: recommended on a random forum post

Re: Mystery Spam

Postby charlesd » Fri Apr 03, 2015 8:56 pm

Given the null From address, I would guess they're bounces. Not sure why they made it into the spool since they the NDR should be generated during the SMTP transaction before they get into the incoming spool.
User avatar
CCGTECH
Posts: 92
Joined: Thu Apr 25, 2013 4:59 am
How did you hear about Mailcleaner: open source community
Location: West Hollywood, CA

Re: Mystery Spam

Postby CCGTECH » Mon Apr 06, 2015 11:13 am

yeah, very strange. I was hoping someone from MC crew could describe the behavior. Anyhow, I was able to combat the spam by monitoring the connections and blocking entire spammer controlled subnets.

This is my list thus far and seems to be working very well.

107.182.137.0/24
142.0.195.0/21
157.55.0.0/24
157.55.234.0/24
174.47.100.0/24
178.216.242.0/20
181.119.207.0/24
185.44.107.0/24
193.188.255.0/24
198.20.78.0/24
198.59.98.0/24
198.59.123.0/20
198.159.180.0/24
199.91.52.0/23
199.122.125.0/24
206.82.200.0/24
207.66.3.0/24
207.188.132.0/23
207.200.40.0/24
207.66.25.0/24
207.66.3.0/24
207.66.58.0/24
207.66.66.0/24
208.123.118.0/24
208.123.122.0/24
208.88.154.0/24
209.172.40.211
37.143.114.0/24
46.30.151.0/24
5.149.128.0/21
5.175.175.0/17
5.175.99.0/24
5.231.28.0/24
5.231.248.0/24
66.231.88.239
66.55.116.44
66.22.159.238
69.22.177.0/24
69.64.28.0/24
74.121.52.28
89.167.206.0/24
91.222.207.0/24
91.244.120.0/24
91.247.76.0/24
94.103.174.0/24
23.95.24.201
217.174.152.111
146.0.78.120
207.66.112.0/24
96.46.177.0/24
173.233.131.0/24
173.237.63.0/24
173.233.158.0/24
104.144.164.0/24
204.74.244.0/24
204.74.246.0/24
204.74.247.0/24
138.128.6.0/24
94.73.19.0/24
94.73.39.0/24
138.128.4.0/24
207.188.187.0/24
94.73.37.0/24
173.0.157.0/24
207.66.103.0/24
207.66.88.0/24
94.73.38.0/24
206.206.183.0/24
207.66.93.0/24
66.172.86.0/24
66.172.89.0/24
207.66.34.0/24
173.233.139.0/24
199.204.46.0/24
94.73.40.0/24
199.168.138.0/24
104.144.162.0/24
173.237.6.0/24
94.73.46.0/24
170.130.76.0/24
198.59.185.0/24
198.41.96.0/24
207.188.180.0/24
173.233.140.0/24
104.144.169.0/24
207.66.97.0/24
104.144.172.0/24
94.73.41.0/24
103.255.220.0/24
207.188.181.0/24
104.243.24.0/24
104.144.161.0/24
206.206.168.0/24
104.144.163.0/24
104.243.27.0/24
104.144.168.0/24
104.245.25.0/24
104.243.25.0/24
206.206.175.0/24
207.188.174.0/24
23.250.106.0/24
104.144.170.0/24
207.66.80.0/24
195.230.22.0/24
23.229.35.0/24
104.144.165.0/24
23.229.73.0/24
104.243.26.0/24
104.144.166.0/24
104.243.19.0/24
104.144.171.0/24
69.4.81.0/24
104.243.29.0/24
104.144.174.0/24
104.243.22.0/24
69.4.80.0/24
104.243.30.0/24
69.4.91.0/24
69.58.0.0/24
69.58.7.0/24
69.4.92.0/24
69.4.94.0/24
202.69.241.0/24
216.246.109.0/24
162.248.7.0/24
172.246.241.0/24
192.228.107.0/24
198.52.235.0/24
63.223.69.0/24
178.156.217.0/24
198.52.128.0/24
165.254.153.0/24
162.144.117.0/24
190.103.240.0/24
63.223.72.0/24
5.255.95.0/24
200.147.34.0/24
113.190.168.0/24
198.210.56.0/24
23.244.34.0/24
85.239.149.0/24
89.42.132.0/24
104.152.222.0/24
208.98.26.0/24
108.61.142.236
23.247.12.0/24
198.144.185.0/24
82.192.81.0/24
203.33.88.0/24
46.166.189.0/24
58.251.146.0/24
192.210.204.108
201.77.112.0/24

Return to “Filter efficiency”

Who is online

Users browsing this forum: No registered users and 2 guests