<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Tue Mar  9 16:50:18 2010
# stats since Mon Feb  1 00:09:02 2010
22408	hostkarma.junkemailfilter.com
4158	in-addr.arpa
3415	zen.spamhaus.org
936	b.barracudacentral.org
71	dnsbl.sorbs.net
6	dnsbl.njabl.org
2	list.dsbl.org
0	bogons.cymru.com
0	dnsbl.tqmcube.com
19	genericPTR
2	BlackList
# 31017	total rejects
#
1163	WhiteList
17995	Passed

  SpamCannibal additions
# last update Tue Mar  9 16:20:01 2010
# stats since Mon Mar  1 10:52:15 2010
4637	hostkarma.junkemailfilter.com
519	zen.spamhaus.org
39	in-addr.arpa
32	dnsbl.sorbs.net
31	bl.spamcannibal.org
17	b.barracudacentral.org
0	bogons.cymru.com
0	dnsbl.njabl.org
0	dnsbl.tqmcube.com
0	list.dsbl.org
8	genericPTR
0	BlackList
# 5283	total rejects
#
45	WhiteList
131	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Mar  9 16:53:33 2010
# stats since Mon Mar  1 00:09:01 2010
2395	zen.spamhaus.org
362	hostkarma.junkemailfilter.com
254	in-addr.arpa
93	b.barracudacentral.org
8	dnsbl.njabl.org
5	dnsbl.sorbs.net
0	bogons.cymru.com
0	dnsbl.tqmcube.com
0	list.dsbl.org
42	genericPTR
0	BlackList
# 3159	total rejects
#
12	WhiteList
8359	Passed

  MTA queries (Net::DNSBL::MultiDaemon)
# last update Tue Mar  9 16:01:39 2010
# stats since Mon Mar  1 10:52:45 2010
4592	hostkarma.junkemailfilter.com
307	b.barracudacentral.org
263	zen.spamhaus.org
39	in-addr.arpa
29	bl.spamcannibal.org
7	dnsbl.sorbs.net
0	bogons.cymru.com
0	dnsbl.njabl.org
0	dnsbl.tqmcube.com
0	list.dsbl.org
7	genericPTR
0	BlackList
# 5244	total rejects
#
197	WhiteList
1255	Passed

  mimedefang/spamassassin disposition
# last update Tue Mar  9 16:53:37 2010
# stats since Mon Mar  1 00:11:43 2010
181	spamassassin
33	dynamic_IP
21	invalid_recip
1	bogus_helo
# 236	total rejects
#
1150	Passed

  mimedefang/spamassassin disposition
# last update Mon Mar  8 12:16:39 2010
# stats since Mon Mar  1 10:53:50 2010
10	bogus_helo
5	dynamic_IP
# 15	total rejects
#
1	Passed


yesterday: 2027 messages, 153 passed, 23 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
2354 2515 2141 1816 1776 1799 1754 2132 2348 2080 1930 2083 2125 3160 1509 3741 3522 2915 2264 2253 1589 1790 142 1863 2059 1820 2580 1864 1977 2027























































































































oldest ... good messages passed ... newest
85 149 137 150 139 108 115 100 120 129 126 137 126 88 32 126 87 185 160 144 122 0 47 136 187 133 119 72 77 153

















































































oldest ... moderator rejects ... newest
0 44 80 22 17 23 15 0 30 41 25 20 25 8 0 30 18 22 23 25 12 0 0 17 24 25 25 17 3 23





















































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME