Is ASN information useful? - SpamAssassin

This is a discussion on Is ASN information useful? - SpamAssassin ; Has anyone determined if ASN information is useful in determining if a message is/is not spam?...

+ Reply to Thread
Results 1 to 6 of 6

Thread: Is ASN information useful?

  1. Is ASN information useful?

    Has anyone determined if ASN information is useful in determining if a
    message is/is not spam?


  2. RE: Is ASN information useful?

    > -----Original Message-----
    > From: Marc Perkel [mailto:marc@perkel.com]
    > Sent: Monday, July 14, 2008 3:55 PM
    > To: users@spamassassin.apache.org
    > Subject: Is ASN information useful?
    >
    > Has anyone determined if ASN information is useful in determining if a
    > message is/is not spam?


    Apparently someone thinks so...

    http://spamlinks.net/filter-bl.htm#asn

    http://www.uoregon.edu/~joe/one-pager-asn.pdf


  3. Re: Is ASN information useful?



    Marc Perkel schrieb:
    > Has anyone determined if ASN information is useful in determining if a
    > message is/is not spam?


    Unfortunately, it does not seem to be *that* useful:
    http://matthias.leisi.net/archives/1...come-from.html

    -- Matthias


  4. Re: Is ASN information useful?

    On Monday 14 July 2008 2:55 pm, Marc Perkel wrote:
    > Has anyone determined if ASN information is useful in determining if a
    > message is/is not spam?

    Don't know about useful this is, but I can get a report any time of guilty
    ASN's from the SpamTools scripts I run. Below is the top 10 spamming ASN's on
    my box from last year:

    Report date: Thu Apr 24 21:08:43 CDT 2008
    Total spams: 22541
    Total ASNs: 2500

    Rank Cum % Pct Spams ASN Description
    ---- ------ ---- ----- ----- -------------
    1 8.6% 8.6% 1946 unk Unknown
    2 13.3% 4.7% 1063 -
    3 17.9% 4.5% 1016 3561 SAVVIS - Savvis
    4 20.1% 2.3% 510 4766 KIXS-AS-KR Korea Telecom
    5 22.2% 2.1% 464 9318 HANARO-AS Hanaro Telecom Inc.
    6 24.1% 2.0% 442 4134 CHINANET-BACKBONE No.31,Jin-rong Street
    7 25.5% 1.4% 313 8075 MICROSOFT-CORP---MSN-AS-BLOCK - Microsoft
    Corp
    8 26.9% 1.4% 309 17858 KRNIC-ASBLOCK-AP KRNIC
    9 28.0% 1.1% 255 286 KPN KPN Internet Backbone AS
    10 29.1% 1.1% 246 12956 TELEFONICA Telefonica Backbone Autonomous
    System

    I have a total of 3074 ASN entries for last year.

    So far this year the top 10 are:

    Report date: Mon Jul 14 17:58:09 CDT 2008
    Total spams: 3320
    Total ASNs: 723

    Rank Cum % Pct Spams ASN Description
    ---- ------ ---- ----- ----- -------------
    1 8.3% 8.3% 276 -
    2 13.4% 5.1% 169 9318 HANARO-AS Hanaro Telecom Inc.
    3 18.2% 4.8% 158 17586 NARASPEEDNET-AS-KR Nara Cable TV Inc
    4 21.1% 3.0% 98 3215 AS3215 AS3215 France Telecom - Orange
    5 23.5% 2.4% 79 15169 GOOGLE - Google Inc.
    5 25.9% 2.4% 79 17858 KRNIC-ASBLOCK-AP KRNIC
    7 28.1% 2.2% 73 9121 TTNET TTnet Autonomous System
    8 29.5% 1.4% 46 14037 AS-RVB-1 - RackVibe LLC
    9 30.8% 1.4% 45 5617 TPNET Polish Telecom's commercial IP
    network
    10 31.9% 1.1% 36 4134 CHINANET-BACKBONE No.31,Jin-rong Street
    10 33.0% 1.1% 36 19262 VZGNI-TRANSIT - Verizon Internet Services
    Inc.

    --
    Chris
    KeyID 0xE372A7DA98E6705C

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.9 (GNU/Linux)

    iEYEABECAAYFAkh79S0ACgkQ43Kn2pjmcFz/tgCfU02z5AVvtZanXxg3Rml3PSmD
    x4MAoIN+oXNOZOkKa/Csxu1t8ok423Nw
    =9ZQI
    -----END PGP SIGNATURE-----


  5. Re: Is ASN information useful?



    Matthias Leisi wrote:
    >
    >
    > Marc Perkel schrieb:
    >> Has anyone determined if ASN information is useful in determining if
    >> a message is/is not spam?

    >
    > Unfortunately, it does not seem to be *that* useful:
    > http://matthias.leisi.net/archives/1...come-from.html
    >
    >
    > -- Matthias
    >


    Is there any ASNs that are 100% good for whitelisting?


  6. Re: Is ASN information useful?

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1



    Marc Perkel schrieb:

    |> Unfortunately, it does not seem to be *that* useful:
    |>
    http://matthias.leisi.net/archives/1...come-from.html
    |
    | Is there any ASNs that are 100% good for whitelisting?

    There may or may not be -- I do not have enough data to make such a
    decision. Based on circumstancial evidence, I believe there are some
    "100% good" ASNs (ie, with proper policies etc). However, in order to
    reach a decision on an ASN level, one would need to aggregate individual
    IP address reputation within the ASN -- which makes the whole exercise
    kind of moot.

    - -- Matthias
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.4.6 (Darwin)

    iD8DBQFIfN8SxbHw2nyi/okRAvZNAKCOzylEMZsdvgZ1D0EJT75wmv+H7gCgzMQo
    ZF9ParZeN9+Gyyf+Fy8x5f4=
    =QVBd
    -----END PGP SIGNATURE-----


+ Reply to Thread