<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Fri Oct 31 06:50:04 2014
# stats since Wed Oct  1 00:09:02 2014
6685	b.barracudacentral.org
2093	zen.spamhaus.org
971	hostkarma.junkemailfilter.com
176	in-addr.arpa
19	dnsbl.sorbs.net
128	genericPTR
0	BlackList
# 10072	total rejects
#
1756	WhiteList
18557	Passed
  SpamCannibal additions
# last update Fri Oct 31 06:20:01 2014
# stats since Wed Oct  1 00:18:01 2014
2108	hostkarma.junkemailfilter.com
871	zen.spamhaus.org
109	bl.spamcannibal.org
60	in-addr.arpa
32	b.barracudacentral.org
6	dnsbl.sorbs.net
0	bogons.cymru.com
28	genericPTR
0	BlackList
# 3214	total rejects
#
124	WhiteList
2981	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Fri Oct 31 06:57:00 2014
# stats since Wed Oct  1 00:09:02 2014
6736	b.barracudacentral.org
1133	zen.spamhaus.org
330	in-addr.arpa
315	hostkarma.junkemailfilter.com
26	dnsbl.sorbs.net
59	genericPTR
0	BlackList
# 8599	total rejects
#
0	WhiteList
4249	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Fri Oct 31 06:13:49 2014
# stats since Wed Oct  1 00:18:03 2014
2592	b.barracudacentral.org
398	zen.spamhaus.org
121	bl.spamcannibal.org
102	hostkarma.junkemailfilter.com
25	in-addr.arpa
5	dnsbl.sorbs.net
0	bogons.cymru.com
9	genericPTR
0	BlackList
# 3252	total rejects
#
7	WhiteList
3764	Passed
  mimedefang/spamassassin disposition
# last update Fri Oct 31 06:50:56 2014
# stats since Wed Oct  1 00:18:21 2014
220	invalid_recip
209	spamassassin
18	2 bogus_helo
7	virus
1	suspicious_chars
# 455	total rejects
#
2946	Passed
  mimedefang/spamassassin disposition
V8
T1413396458
K0
N0
P480640
F8bs
$_mail225-28.mail.alibaba.com [42.156.225.28]
$rESMTP
$smail225-28.mail.alibaba.com
${daemon_flags}
${if_addr}173.13.169.225
S
rRFC822; michael@bizsystems.com
RPFD:
H?P?Return-Path: 
H??Received: from mail225-28.mail.alibaba.com (mail225-28.mail.alibaba.com [42.156.225.28])
	by mail3.bizsystems.net (8.13.4/8.13.4) with ESMTP id s9FI7Z4R007711
	for ; Wed, 15 Oct 2014 11:07:38 -0700
H??Received: from channel05.hst.xyi.crm.xyi.aliyun.com(10.233.254.179)
          by smtp.aliyun-inc.com(127.0.0.1);
          Thu, 16 Oct 2014 02:07:26 +0800
H??Date: Thu, 16 Oct 2014 02:07:26 +0800 (CST)
H??From: "Alibaba.com Trade Alert" 
H??Reply-To: crm.cn@service.alibaba.com
H??To: michael@bizsystems.com
H??Message-ID: <1395225319.21577659.1413396446365.JavaMail.admin@channel05.hst.xyi.crm.alidc.net>
H??Subject: =?UTF-8?Q?Michael,_check_out_the_new_arrivals_on_hard_drive_=E2=80=A6?=
H??MIME-Version: 1.0
H??Content-Type: text/html; charset=UTF-8
H??Content-Disposition: inline
H??Content-Transfer-Encoding: 8bit
H??X-Scanned-By: MIMEDefang 2.67 on 173.13.169.225
.

yesterday: 2122 messages, 147 passed, 11 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
647 817 2036 1694 1778 1967 1241 810 784 665 735 430 668 700 642 677 667 808 607 733 1375 1643 1684 1382 854 500 2534 3002 2769 2122







































































































oldest ... good messages passed ... newest
127 91 91 68 57 96 110 130 89 78 82 91 117 101 121 122 108 58 58 68 118 127 137 91 95 70 103 120 105 147











































































oldest ... moderator rejects ... newest
0 0 48 15 8 25 2 38 27 15 10 13 0 0 56 19 0 0 0 0 0 51 0 17 78 22 17 20 16 11
















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME