On Tue, 28 Jun 2022, Cy wrote:
It's not exactly machine learning, but it does help identify where the spam is coming from, and which pure innocent soul you can kick in the jubblies for giving your address to spammers.
Using whois for the IP address in the topmost Received from: line identifies the ISP. It also provides an abuse@ address (most of the time). And the IP address can be added to a cidr file which is checked in a 'check_client_access cidr file. Rich
