Re: Loads of recent low-scoring snowshoe spam

2019-09-26 Thread John Hardin
On Thu, 26 Sep 2019, Amir Caspi wrote: On Sep 26, 2019, at 10:18 AM, John Hardin wrote: Some of those are following a pattern I've recently noticed - fairly obviously bogus spamvertising domain URLs with some .gov URLs thrown in as well. I'm assuming that's an attempt to leverage naïve

Re: Loads of recent low-scoring snowshoe spam

2019-09-26 Thread Amir Caspi
On Sep 26, 2019, at 10:18 AM, John Hardin wrote: > > Some of those are following a pattern I've recently noticed - fairly > obviously bogus spamvertising domain URLs with some .gov URLs thrown in as > well. I'm assuming that's an attempt to leverage naïve domain whitelisting. > One has a

Re: Loads of recent low-scoring snowshoe spam

2019-09-26 Thread John Hardin
On Wed, 25 Sep 2019, Amir Caspi wrote: Just a few (of many) spamples here: https://pastebin.com/wRFBSCEZ https://pastebin.com/FUdFEdhT https://pastebin.com/LkqSEdAh Some of those are following a pattern I've recently noticed - fairly obviously bogus spamvertising domain URLs with some .gov

Loads of recent low-scoring snowshoe spam

2019-09-25 Thread Amir Caspi
Hi all, In recent weeks, my server has been getting hit with tons of snowshoe spam. Much of it is not getting filtered because even when it hits Bayes, it doesn't hit basically any other rules, and therefore is scoring just below 5 points. (Much of it hits only BAYES_50 and is therefore