We have a domain that we host that seems to be a spam magnet.  I went through our spam quarantine and added to our honeypots list most of the to email addresses from that domain that don't really exist that seem to be tried a lot by what appear to be zombie machines.  I was very careful to ensure that none of the addresses actually do exist as I could see how that could turn into a complete disaster if you're not too careful with the honeypots list.

I added those addresses around 1AM this morning and already have a list of about 50 bad IP's.  This is awsome!

Thanks for adding that feature guys.

Maybe this has been said before, and i apologise if so,  but how about extending the honeypot with a keyword list, with the use of 'subject:'.

I suggest this because certain emails, with certain subject title are easily recognisable as beeing spam.

Instant blacklisting of the sending ip's might proove useful, but could also be too drastic, thoughts anyone?