<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Sat Jan 24 19:40:02 2015
# stats since Thu Jan  1 00:09:01 2015
3902	b.barracudacentral.org
1288	zen.spamhaus.org
346	hostkarma.junkemailfilter.com
83	in-addr.arpa
8	dnsbl.sorbs.net
51	genericPTR
0	BlackList
# 5678	total rejects
#
324	WhiteList
10288	Passed
  SpamCannibal additions
# last update Sat Jan 24 19:20:01 2015
# stats since Thu Jan  1 00:18:01 2015
942	zen.spamhaus.org
201	hostkarma.junkemailfilter.com
66	bl.spamcannibal.org
32	in-addr.arpa
20	b.barracudacentral.org
3	dnsbl.sorbs.net
0	bogons.cymru.com
11	genericPTR
0	BlackList
# 1275	total rejects
#
72	WhiteList
391	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sat Jan 24 19:07:58 2015
# stats since Thu Jan  1 00:09:01 2015
3927	b.barracudacentral.org
640	zen.spamhaus.org
240	hostkarma.junkemailfilter.com
88	in-addr.arpa
2	dnsbl.sorbs.net
35	genericPTR
0	BlackList
# 4932	total rejects
#
0	WhiteList
3722	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sat Jan 24 18:51:22 2015
# stats since Thu Jan  1 00:18:01 2015
536	b.barracudacentral.org
515	zen.spamhaus.org
117	hostkarma.junkemailfilter.com
76	bl.spamcannibal.org
19	in-addr.arpa
2	dnsbl.sorbs.net
0	bogons.cymru.com
8	genericPTR
0	BlackList
# 1273	total rejects
#
53	WhiteList
631	Passed
  mimedefang/spamassassin disposition
# last update Sat Jan 24 19:01:26 2015
# stats since Thu Jan  1 01:02:58 2015
153	spamassassin
95	invalid_recip
1	2 bogus_helo
# 249	total rejects
#
2930	Passed
  mimedefang/spamassassin disposition
# last update Thu Jan 15 22:23:01 2015
# stats since Thu Jan 15 22:23:01 2015
1	bogus_helo
# 1	total rejects
#

yesterday: 712 messages, 206 passed, 22 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
1585 1600 2112 1197 282 298 0 375 349 352 359 600 819 728 563 373 423 227 603 531 1945 1933 2037 1556 1124 815 538 536 512 712

































































































oldest ... good messages passed ... newest
39 50 80 67 62 107 0 29 85 36 116 114 131 190 192 108 78 50 142 156 141 166 126 68 80 124 161 193 185 206












































































oldest ... moderator rejects ... newest
7 0 26 13 6 32 0 4 16 0 23 17 19 18 8 12 21 11 20 14 22 30 23 9 10 34 27 24 29 22




















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME