Re: Corpus of Spam/Ham headers(Source IP) for research

[Reindl Harald]

Am 29.06.2016 um 12:59 schrieb Antony Stone:

On Wednesday 29 June 2016 at 12:42:02, Reindl Harald wrote:

Am 29.06.2016 um 12:35 schrieb Olivier:

Reindl Harald <h.rei...@thelounge.net> writes:

he asked *exactly the same* with "dataset of source IP addresses of
emails received" but for a ton of relations you just need that IP and a
PTR combined with whois lookup to get relations one would not want to be
public

Your milleage may vary, but provided you have a large enough number of
users and you manage to send the corpus anonymously, all information you
give is that somewhere on Internet, a mail server did receive messages
from google.com and from hotmail.com and lists.oetiker.ch and also
gtzq.com sent you some spam.

forget the big ones - just filter them out and look at the small ones
where PTR/Sender is from the same domain, connect it to your destination
domains which are easily to find out and voila you have
comapny-to-company relations by looking at the business

All of this is assuming the original poster asked for the emails as well.

He didn't - he asked for a list of IP addresses - well, two lists, one of ham
and one of spam.  He didn't ask for any information about the emails
themselves at all.

I quote from his original request

i quoted that by myself as you can see

i don't need any more than the IP to get the maildomain in case of companies using their own small-business-server with no other domains you underestimate the combination "ip from host xyz sent ham to one of my customers" combined with easy to find customer domains as possible targets

signature.asc
Description: OpenPGP digital signature