<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Mon Apr 21 07:40:02 2014
# stats since Tue Apr  1 00:09:01 2014
3536	b.barracudacentral.org
1634	zen.spamhaus.org
224	hostkarma.junkemailfilter.com
89	in-addr.arpa
12	dnsbl.sorbs.net
78	genericPTR
0	BlackList
# 5573	total rejects
#
292	WhiteList
10130	Passed
  SpamCannibal additions
# last update Sun Apr 20 00:20:01 2014
# stats since Tue Apr  1 00:18:01 2014
1133	zen.spamhaus.org
156	hostkarma.junkemailfilter.com
87	bl.spamcannibal.org
39	in-addr.arpa
24	b.barracudacentral.org
4	dnsbl.sorbs.net
0	bogons.cymru.com
9	genericPTR
0	BlackList
# 1452	total rejects
#
40	WhiteList
70	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Mon Apr 21 07:38:24 2014
# stats since Tue Apr  1 00:09:03 2014
3567	b.barracudacentral.org
639	zen.spamhaus.org
176	hostkarma.junkemailfilter.com
108	in-addr.arpa
5	dnsbl.sorbs.net
50	genericPTR
0	BlackList
# 4545	total rejects
#
18	WhiteList
3112	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sat Apr 19 22:39:16 2014
# stats since Tue Apr  1 00:18:01 2014
1119	zen.spamhaus.org
113	hostkarma.junkemailfilter.com
94	bl.spamcannibal.org
65	b.barracudacentral.org
30	in-addr.arpa
3	dnsbl.sorbs.net
0	bogons.cymru.com
6	genericPTR
0	BlackList
# 1430	total rejects
#
1	WhiteList
79	Passed
  mimedefang/spamassassin disposition
# last update Mon Apr 21 07:33:38 2014
# stats since Tue Apr  1 00:37:53 2014
178	spamassassin
114	invalid_recip
4	virus
# 296	total rejects
#
2494	Passed
  mimedefang/spamassassin disposition

yesterday: 452 messages, 105 passed, 3 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
346 674 2059 1721 1772 940 635 438 366 0 626 538 423 376 341 434 704 568 643 570 602 334 362 699 1254 3499 2626 2076 683 452































































































oldest ... good messages passed ... newest
77 50 202 133 155 183 168 63 60 0 152 164 117 94 86 80 209 133 136 119 80 57 90 161 173 140 168 135 91 105













































































oldest ... moderator rejects ... newest
0 0 47 20 22 12 11 9 0 0 13 0 24 23 7 15 22 8 32 18 26 16 0 35 20 25 11 19 0 3

















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME