Jason Haar wrote:
Hi there
I just got a one-line piece of spam with a ipaddress-based URL.
Probably pointing at some auto infect your Windows PC app.
Anyway, it got a score of 0.1 out of 5 when it came in. 4 hours later
it had showed up in several RBLs and the score was pushed up to 4.9.
On Wed, 16 Jan 2008, Matt Kettler wrote:
Yes. In fact, IP based URLs occur more commonly in nonspam than spam.
Matt, yes this is correct, however in this particular case nonspam is
perhaps a bit broad. It's been my experience that these almost always
occur in mass marketing ham, not
Matt Kettler wrote:
Yes. In fact, IP based URLs occur more commonly in nonspam than spam.
STATISTICS-set0.txt:OVERALLSPAM% HAM% S/ORANK SCORE
NAME
STATISTICS-set0.txt: 0.395 0.3920 0.40010.495 0.420.10
NORMAL_HTTP_TO_IP
Note the S/O of 0.42 means that 42%
Matt Kettler wrote:
Yes. In fact, IP based URLs occur more commonly in nonspam than spam.
Chip M. wrote:
Matt, yes this is correct, however in this particular case nonspam is
perhaps a bit broad. It's been my experience that these almost always
occur in mass marketing ham, not
In my (limited) experience, nonspam IP-based URLs almost always have
paths after the IP address, whereas a *lot* of spam just points to the
IP address.
Does this match anyone else's experience?
I've never run a masscheck to see, it would be interesting. Trying to think
about what I've seen
Hi there
I just got a one-line piece of spam with a ipaddress-based URL. Probably
pointing at some auto infect your Windows PC app.
Anyway, it got a score of 0.1 out of 5 when it came in. 4 hours later it
had showed up in several RBLs and the score was pushed up to 4.9.
My question is that
