I've been blacklisting subnets via my firewall. I've been watching the patterns on IPs from spam and when I start seeing a rash of spam from the same subnet I go to senderbase and check it out. If I see a ton of DNS entries that are obvious spammers then I know that ISP is friendly to spammers and I block their entire subnet. Over the course of the last couple of days I've seen about a 600% reduction in spam just by block the offending subnets (about 8 in the last few days). Apparently more spammers are being forced to work through an ISP rather than infected computers.
_____ From: [email protected] [mailto:[email protected]] On Behalf Of Brian Thomforde Sent: Thursday, April 03, 2014 9:43 AM To: [email protected] Subject: [MBF]Sudden bunch of spam This morning I'm getting a bunch of spam from Germany, it's like Declude and Sniffer are shut off. Anyone else have this issue this morning? Brian Thomforde <http://www.truckdriver.com/> http://www.truckdriver.com "Smarter Drivers...Better Jobs" Providing excellence in Internet recruiting since 1996 763-444-8998 x201
