I have found that when I combine some rules where I detect a notquit and
they are hitting my fake high IP addresses or some other spammer only
tricks that I can basically identify all spam bots on the first attempt.
Here's a list of 600,000 IP addresses of virus infected computers that
have tried to spam me in the last 3 days.
http://iplist.junkemailfilter.com/virus.txt