<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Tue Sep 30 08:40:05 2014
# stats since Mon Sep  1 00:09:02 2014
5206	zen.spamhaus.org
1465	in-addr.arpa
1240	b.barracudacentral.org
329	hostkarma.junkemailfilter.com
28	dnsbl.sorbs.net
127	genericPTR
1	BlackList
# 8396	total rejects
#
1971	WhiteList
33399	Passed
  SpamCannibal additions
# last update Tue Sep 30 08:20:02 2014
# stats since Mon Sep  1 00:18:01 2014
1451	zen.spamhaus.org
286	hostkarma.junkemailfilter.com
171	bl.spamcannibal.org
72	in-addr.arpa
47	b.barracudacentral.org
5	dnsbl.sorbs.net
0	bogons.cymru.com
19	genericPTR
0	BlackList
# 2051	total rejects
#
106	WhiteList
1910	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Sep 30 08:48:25 2014
# stats since Mon Sep  1 00:09:02 2014
3801	b.barracudacentral.org
2251	in-addr.arpa
1411	zen.spamhaus.org
358	hostkarma.junkemailfilter.com
22	dnsbl.sorbs.net
140	genericPTR
1	BlackList
# 7984	total rejects
#
8	WhiteList
4924	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Sep 30 08:22:23 2014
# stats since Mon Sep  1 00:18:04 2014
1469	zen.spamhaus.org
240	hostkarma.junkemailfilter.com
160	bl.spamcannibal.org
137	b.barracudacentral.org
43	in-addr.arpa
4	dnsbl.sorbs.net
0	bogons.cymru.com
14	genericPTR
0	BlackList
# 2067	total rejects
#
3	WhiteList
2892	Passed
  mimedefang/spamassassin disposition
# last update Tue Sep 30 08:46:36 2014
# stats since Mon Sep  1 00:15:12 2014
268	invalid_recip
191	spamassassin
21	virus
# 480	total rejects
#
3332	Passed
  mimedefang/spamassassin disposition
# last update Sat Sep 27 20:06:30 2014
# stats since Wed Sep  3 03:06:36 2014
84	bogus_helo
1	virus
# 85	total rejects
#
6	Passed

yesterday: 671 messages, 131 passed, 18 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
0 1892 1292 1612 2437 1574 1178 447 853 1084 3535 4516 8593 4693 3536 1064 904 793 720 780 466 533 806 742 806 1082 603 629 455 671






































































































oldest ... good messages passed ... newest
0 114 123 145 113 128 87 65 105 144 209 172 93 142 89 120 149 205 141 86 59 57 149 124 56 65 101 42 87 131













































































oldest ... moderator rejects ... newest
0 19 22 22 18 17 7 6 17 0 36 0 16 17 7 25 12 22 16 12 11 9 18 29 0 0 27 0 22 18


















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME