Re: Scans are way up, attacks are down??

["lsi" <stuart () cyberdelix net>]

Hi Chris,

A msg is counted as spam if it contains a line which starts with

X-RBL-Warning: 

...which is of course the headerline inserted by the RBL anti-spam 
network.

Home-based spammers aren't likely to be on the RBL, are they?

Stuart

On 27 Aug 2003 at 9:52, Chris Paul wrote:

Date sent:              Wed, 27 Aug 2003 09:52:44 -0700
From:                   Chris Paul <chris.paul () rexconsulting net>
To:                     stuart () cyberdelix net
Copies to:              honeypots () securityfocus com
Subject:                Re: Scans are way up, attacks are down??

> On Wed, 27 Aug 2003 09:45:42 +0100
> "lsi" <stuart () cyberdelix net> wrote:
>
> > John, 
> >
> > What I noticed is that as the SoBig virus went up, the number of spams I received went down. 
> >
> > See chart here: http://cyberdelix.net/media/spamtrak.gif
> >
> > The lowest dip is August 15, 3 days before Sobig. 
> >
> > Does this mean BOFH's stop spamming because they are configuring their viruses??? 
>
>
> Perhaps some of the home-spammers got hit with the virus. Easily could explain part of it. Depends on what you mean 
> by spam.
>
> CP
>
>
>
> -- 
> Chris Paul
> Rex Consulting - Messaging and Security Solutions
> +1 831.338.7712
> Key fingerprint = 588A 289C ADE2 08F9 050B  D2A0 DDA4 331D C61B DFD1


-- 
Stuart Udall
stuart () cyberdelix net - http://www.cyberdelix.net/
..revolution through evolution

want to make some cash? check out http://cyberdelix.net/affiliates.htm