Instructions | Production Version | Beta Version | Old Versions | Procmail Recipes | Spam Data Files

The SpamBouncer

Spam Data Files
Last Updated 4/16/2006

You can download the current spam data files from the SpamBouncer here separately. The SpamBouncer domains lists are in plain text format, one domain per line. The SpamBouncer IP lists are in CIDR format, one per line. The other data files are in text format or standalone Procmail recipes that you can drop into your own spam filtering setup and then reference using Procmail.

Most of this data is offered as .tar.gz archive files. If you need another format, please let me know and I will try to provide it.

NOTE: The data files are taken from the SpamBouncer, SpamBouncer users with the current release already have these files in their ${SBDIR}.

  Download Links Description
Phish Data
(4/16/2006)
* Domains and IPs The SpamBouncer's current list of domains and IPs owned and/or operated by phishers. The phish domains list contains only domains that belong to phishers and are used for nothing else. Even though these domains are usually deactivated quickly, they also have no legitimate use. The IPs list contains only IPs seen within the past two months, since phish web sites that use IPs are usually hosted on a compromised server and tend to be taken down relatively quickly compared to other types of spam havens.
Current Spam Data
(4/16/2006)
* Domains
*IPs
The SpamBouncer's spam domains and spam IPs for the last three months.
All Spam Data
(4/16/2006)
* Domains
*IPs
The SpamBouncer's complete set of spam domains and spam IPs.
Mainsleaze, Opt-Out, and Spammy ISP Data
(4/16/2006)
* Domains
*IPs
The SpamBouncer's complete set of domains and IPs from otherwise legitimate companies that spam, ESPs that spam, and ISPs with severe spam problems. (Should not be used to block in a production environment, but can be used by a scoring filter.)
Drop-Box Email Addresses
(4/16/2006)
* Standard
*Procmail 3.22 Fix
*ASCII Text
The SpamBouncer's list of drop-box email addresses, email addresses a spammer provides in the message body of a spam so that his victims can contact him. A lot of spammers use email addresses at free email providers or other large, commercial email providers which have many legitimate users and which you do not want to block. This filter targets only email addresses that belong to spammers.
Spam Haven Phone Numbers
(4/16/2006)
* Standard
*Procmail 3.22 Fix
The SpamBouncer's list of spam haven phone numbers, phone numbers a spammer provides in the message body of a spam so that his victims can contact him. Russian spammers, in particular, often use phone numbers rather than drop-box email addresses or web sites as contact points.
Spam Haven URLs
(4/16/2006)
* Standard
*Procmail 3.22 Fix
*ASCII Text
The SpamBouncer's list of spam haven URLs and phish URLs. This list contains URLs at free web hosting sites, large, commercial sites, and on trojaned or compromised computers. Spammers put these URLs in the message body of a spam so that victims can get in contact. This list contains URLs that belong to spammers/phishers only, and should have no false positives.
Email Virus Filters
(12/16/2005)
* Standard
*Procmail 3.22 Fix
The email virus filters from the SpamBouncer. These are useful for detecting and dumping virus emails, especially when there is yet another outbreak of the Virus of the Day. <sigh> Follow the instructions at the top of the file to use them. WARNING! These are NOT general-purpose virus filters and do not replace a good, up-to-date AntiVirus program on your workstation, especially for Windows users!
Non-Spam Data
(12/22/2005)
* Domains
*IPs
The SpamBouncer's complete set of domains and IPs from non-spamming companies. (Used for whitelisting, email source verification, etc.)