<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Sun May 26 02:10:01 2013
# stats since Wed May  1 00:09:02 2013
11573	b.barracudacentral.org
1122	zen.spamhaus.org
186	in-addr.arpa
176	hostkarma.junkemailfilter.com
14	dnsbl.sorbs.net
90	genericPTR
0	BlackList
# 13161	total rejects
#
370	WhiteList
4620	Passed
  SpamCannibal additions
# last update Sun May 26 01:20:01 2013
# stats since Wed May  1 00:18:02 2013
4463	b.barracudacentral.org
357	zen.spamhaus.org
90	bl.spamcannibal.org
58	in-addr.arpa
39	hostkarma.junkemailfilter.com
5	dnsbl.sorbs.net
0	bogons.cymru.com
25	genericPTR
0	BlackList
# 5037	total rejects
#
93	WhiteList
124	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun May 26 02:08:55 2013
# stats since Wed May  1 00:09:02 2013
7778	b.barracudacentral.org
658	zen.spamhaus.org
257	in-addr.arpa
220	hostkarma.junkemailfilter.com
12	dnsbl.sorbs.net
2	genericPTR
0	BlackList
# 8927	total rejects
#
51	WhiteList
5363	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun May 26 01:22:21 2013
# stats since Wed May  1 00:18:02 2013
4262	zen.spamhaus.org
407	hostkarma.junkemailfilter.com
151	b.barracudacentral.org
91	bl.spamcannibal.org
68	in-addr.arpa
6	dnsbl.sorbs.net
0	bogons.cymru.com
0	BlackList
# 4985	total rejects
#
601	WhiteList
138	Passed
  mimedefang/spamassassin disposition
# last update Sat May 25 22:56:54 2013
# stats since Wed May  1 00:18:31 2013
320	invalid_recip
141	spamassassin
1	message/partial
# 462	total rejects
#
3273	Passed
  mimedefang/spamassassin disposition
# last update Thu May 23 20:06:16 2013
# stats since Fri May  3 14:15:01 2013
3	bogus_helo
# 3	total rejects
#
2	Passed

yesterday: 864 messages, 83 passed, 9 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
780 557 525 740 0 632 1049 767 451 660 826 965 738 732 662 705 782 941 1030 1185 1232 1151 854 928 1309 1343 1394 1259 1234 864


































































































oldest ... good messages passed ... newest
151 67 58 127 0 154 245 147 83 98 101 148 153 135 149 106 53 146 123 127 151 153 67 63 150 184 179 183 126 83
















































































oldest ... moderator rejects ... newest
20 18 0 31 0 29 20 12 8 0 22 15 8 9 8 7 0 27 16 12 30 13 7 4 19 20 10 10 9 9















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME