<= HOME
East MX STATS West MX STATS
Spam Statistics - DNSBL Hits - explanation
  SpamCannibal additions
# last update Sun Dec 21 22:50:01 2014
# stats since Mon Dec  1 00:09:01 2014
5512	b.barracudacentral.org
841	in-addr.arpa
735	zen.spamhaus.org
273	hostkarma.junkemailfilter.com
18	dnsbl.sorbs.net
60	genericPTR
0	BlackList
# 7439	total rejects
#
478	WhiteList
12706	Passed
  SpamCannibal additions
# last update Sun Dec 21 22:20:01 2014
# stats since Mon Dec  1 00:18:01 2014
1227	zen.spamhaus.org
441	hostkarma.junkemailfilter.com
98	bl.spamcannibal.org
68	in-addr.arpa
21	b.barracudacentral.org
11	dnsbl.sorbs.net
0	bogons.cymru.com
17	genericPTR
0	BlackList
# 1883	total rejects
#
77	WhiteList
169	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun Dec 21 22:55:28 2014
# stats since Mon Dec  1 00:09:03 2014
5547	b.barracudacentral.org
596	zen.spamhaus.org
247	hostkarma.junkemailfilter.com
85	in-addr.arpa
5	dnsbl.sorbs.net
30	genericPTR
0	BlackList
# 6510	total rejects
#
0	WhiteList
3874	Passed
  MTA queries (Net::DNSBL::MultiDaemon)
# last update Sun Dec 21 21:40:10 2014
# stats since Mon Dec  1 00:18:01 2014
1592	zen.spamhaus.org
116	bl.spamcannibal.org
94	hostkarma.junkemailfilter.com
70	b.barracudacentral.org
6	in-addr.arpa
3	dnsbl.sorbs.net
0	bogons.cymru.com
14	genericPTR
0	BlackList
# 1895	total rejects
#
15	WhiteList
214	Passed
  mimedefang/spamassassin disposition
# last update Sun Dec 21 22:55:58 2014
# stats since Mon Dec  1 00:22:32 2014
117	spamassassin
97	invalid_recip
17	virus
4	2 bogus_helo
# 235	total rejects
#
3017	Passed
  mimedefang/spamassassin disposition
# last update Mon Dec 15 04:56:20 2014
# stats since Sat Dec  6 12:12:32 2014
7	bogus_helo
# 7	total rejects
#

yesterday: 569 messages, 64 passed, 7 moderator rejects (tarpit)
oldest ... messages per day, mostly spam ... newest
2166 1190 430 785 2243 2173 2081 1236 611 0 660 762 1347 940 1112 1867 1144 914 731 856 997 1841 1706 2017 2036 1167 966 675 480 569







































































































oldest ... good messages passed ... newest
161 125 94 152 147 173 128 81 45 0 93 215 274 216 139 87 103 135 193 195 322 135 70 75 141 177 117 99 151 64















































































oldest ... moderator rejects ... newest
14 15 11 22 25 16 29 19 0 0 14 25 21 26 14 5 11 13 24 18 19 20 11 11 11 16 17 0 38 7























































Spam Statistics Explained

SpamCannibal additions - are the count of IP addresses that have been registered by the SpamCannibal daemon the FIRST TIME they are seen as they reach the application layer (mail daemon) and subsequently entered into the tarpit by the cron job that generates these counts (SC additions). Multiple connections from the same IP address are not counted. WhiteList and Passed counts are for each message that is transported to the application level (mail daemon) on a repeating basis. Counts shown for various DNSBL, BlackList, and CountryCode entries represent only the first contact from a single IP address. Once an IP is entered into the tarpit, it is not possible for it to reach the application level and be counted since the connection to that host is blocked at the IP socket transport level.

MTA queries - are similar to above except that it is possible for some rejected IP addresses to be counted multiple times between the time of first contact and the time the cron job runs the script for SpamCannibal additions. There is a count for each rDNS query made by the local MTA. For example, if the spam/virus host sends a burst of messages during this time window, then each message will be counted as it reaches the application layer. Once the IP address has been added to the SpamCannibal tarpit, it is no longer possible for the application layer to see or count connection attempts for a host.

mimedefang - spamassassin disposition - these messages are further filtered at this site by mimedefang and spamassassin to tag/remove suspicious messages that have not been removed by virtue of listing in a public DNSBL or the SpamCannibal database. The disposition is shown in the last table. bad_hostname, bogus_hello, dynamic_IP, and invalid_recip messages are refused (bounced) by the MTA. All other counted dispositions are forwarded to the SPAM account for inspection and possible manual addition to the SpamCannibal database. Messages not intercepted by filtering are delivered to the designated receipient.

Note: additional messages may be rejected by the MTA's (sendmail) built-in checks and anti-relay provisions, therefore not all messages marked as Passed in mimedefang/spamassassin disposition are necessarily delivered to a receipient.

-----------
<= HOME