Patent attributes
Described is a technology by existing IP address blacklist data associated are accessed to statistically determine which IP addresses in the range are spam-related IP addresses. If enough are identified, the rest of the range's IP addresses are considered as likely being spam-related addresses. The entire range may be then added to a range weighted blacklist used to detect spam. Before adding the range to the range weighted blacklist, the addresses may be further processed against known good traffic data and/or safe list data to determine whether an exception exists that indicates a good sender. If there is an exception, the range is not added to the range weighted blacklist; the range may be shrunk and re-processed until added to the weighted blacklist or until the size is too small.
