<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Wed Jul 23 02:20:04 2014
# stats since Tue Jul  1 00:09:03 2014
4482	b.barracudacentral.org
1756	zen.spamhaus.org
202	hostkarma.junkemailfilter.com
119	in-addr.arpa
14	dnsbl.sorbs.net
76	genericPTR
0	BlackList
# 6649	total rejects
#
408	WhiteList
18224	Passed
  SpamCannibal additions
# last update Wed Jul 23 02:20:01 2014
# stats since Tue Jul  1 00:18:01 2014
1230	hostkarma.junkemailfilter.com
512	zen.spamhaus.org
72	bl.spamcannibal.org
60	in-addr.arpa
18	b.barracudacentral.org
3	dnsbl.sorbs.net
0	bogons.cymru.com
12	genericPTR
0	BlackList
# 1907	total rejects
#
59	WhiteList
82	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Wed Jul 23 02:22:58 2014
# stats since Tue Jul  1 00:09:08 2014
4687	b.barracudacentral.org
736	zen.spamhaus.org
156	hostkarma.junkemailfilter.com
123	in-addr.arpa
12	dnsbl.sorbs.net
73	genericPTR
0	BlackList
# 5787	total rejects
#
36	WhiteList
2928	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Wed Jul 23 02:18:04 2014
# stats since Tue Jul  1 00:18:01 2014
1451	zen.spamhaus.org
230	hostkarma.junkemailfilter.com
87	bl.spamcannibal.org
62	b.barracudacentral.org
58	in-addr.arpa
2	dnsbl.sorbs.net
0	bogons.cymru.com
0	BlackList
# 1890	total rejects
#
2	WhiteList
57	Passed
  mimedefang/spamassassin disposition
# last update Wed Jul 23 02:23:32 2014
# stats since Tue Jul  1 00:12:06 2014
159	spamassassin
126	invalid_recip
12	virus
2	bogus_helo
# 299	total rejects
#
2123	Passed
  mimedefang/spamassassin disposition

yesterday: 779 messages, 133 passed, 29 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
728 2241 3911 2518 1790 450 330 0 549 531 559 400 390 465 1348 4270 5900 4428 2482 435 352 583 663 539 585 804 551 342 850 779

































































































oldest ... good messages passed ... newest
97 94 102 105 120 66 64 0 82 112 72 92 56 41 116 110 145 113 93 66 48 132 149 105 105 126 60 51 140 133










































































oldest ... moderator rejects ... newest
120 0 40 31 9 26 12 0 10 22 4 29 0 16 0 22 43 25 12 29 0 27 22 13 21 23 10 0 34 29





















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME