CPC H04L 63/126 (2013.01) [G06F 16/9558 (2019.01); G06F 16/9566 (2019.01); H04L 51/212 (2022.05); H04L 51/224 (2022.05); H04L 63/06 (2013.01); H04L 63/08 (2013.01); H04L 67/306 (2013.01); H04L 67/535 (2022.05); H04L 67/54 (2022.05); H04L 63/123 (2013.01)] | 11 Claims |
1. A method, comprising:
querying a database to retrieve an identity of a subscriber associated with an IP address of an attempted transmission of an identified electronic mail message, and a sending rate profile associated with the identity;
updating the sending rate profile to include the attempted transmission, wherein the sending rate profile stores a blocked status flag indicating a current blocked status of the subscriber and one or more sending rate thresholds to apply to the sending rate profile when the identified electronic mail message is detected;
determining, via the updated sending rate profile, that the subscriber has attempted to transmit a predefined number of electronic mail messages over a predefined period of time and has exceeded the one or more sending rate thresholds; and
injecting a first blocking packet into an upstream electronic mail data stream and a second blocking packet to block the identified electronic mail message based on the one or more sending rate thresholds having been exceeded.
|