Yeah, here's one just now:
ASSP headers:
X-Assp-ID: assp.necomm.com 42649-14857
X-Assp-Session: 7FEF7921F358 (mail 1)
X-Assp-Envelope-From: fatimataabcde30ha...@yahoo.com
X-Assp-Intended-For: jtar...@necomm.com
X-Assp-Version: 2.6.1(18028) on assp.necomm.com
X-Assp-Delay: not delayed (77.238.178.146 in whitebox (PBWhite));
26 Nov 2018 09:30:49 -0500
X-Assp-Message-Score: -12 (77.238.178.0 in griplist (0.17))
X-Assp-Message-Score: 10 (Suspicious IP-Country IE (YAHOO-INC))
X-Assp-Message-Score: -15 (In Penalty White Box)
X-Assp-Message-Score: 55 (Bayesian Probability: 1.00000)
X-Assp-IP-Score: 55 (Bayesian Probability: 1.00000)
X-Assp-Spam-Prob: 1.00000
X-Assp-Spam-Level: ********
And logfiles:
Nov-26-18 09:30:49 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com Message-Score: added
-12 for 77.238.178.0 in griplist<http://10.1.1.97:55555/#griplist> (0.17),
total score for this message is now -12
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com Message-Score: added 10
for Suspicious IP-Country IE (YAHOO-INC), total score for this message is now -2
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com [scoring] SenderBase --
Suspicious IP-Country IE (YAHOO-INC)
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com Message-Score: added
-15 (pbwValencePB<http://10.1.1.97:55555/#pbwValencePB>) for In Penalty White
Box, total score for this message is now -17
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com HMM-Check has given
less than 4 results - using monitoring mode only
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com HMM Check [monitoring]
- Prob: 0.00000 => ham - answer/query relation: 2% of 42
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com Bayesian Check
[scoring] - Prob: 1.00000 => spam - answer/query relation: 44% of 45
Nov-26-18 09:30:50 42649-14857 [Worker_3] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com Message-Score: added 55
for Bayesian Probability: 1.00000, total score for this message is now 38
Nov-26-18 09:30:50 42649-14857 [Worker_3] [MessageOK] 77.238.178.146
<fatimataabcde30ha...@yahoo.com> to: jtar...@necomm.com message ok [Dearest
One] -> okmail/--284042.eml
-----Original Message-----
From: Doug Lytle [mailto:supp...@drdos.info]
Sent: Monday, November 26, 2018 10:44
To: For Users of ASSP <assp-user@lists.sourceforge.net>
Subject: Re: [Assp-user] recent lots of spam from yahoo and gmail
>>> Lots of phishing mail from those two domains in the last few months and
>>> ASAP isn’t stopping them.
>>> Any thoughts or how to kill it?
Log entries, platform and version would be useful,
Doug
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net<mailto:Assp-user@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/assp-user
_______________________________________________
Assp-user mailing list
Assp-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-user
