Spam Origins


This graph shows the geographic origins of spam, according to IP addresses of senders. On the world map, the size of the country  markers corresponds to the amount of spam sent from this location. The bar chart on the right is a list of the top twenty countries, sending spam.
Point your mouse at a country to see what percent of spam comes from it.

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days

Threat level


The threat level reflects current developments in the world of spam. It is Tumbleweed's Message Protection Lab assessment of the severity of the threat posed by inbound email traffic with Green meaning there are no events that warrant immediate action, Orange - an event has occurred that leads Tumbleweed's Message Protection Lab to believe  there is heightened activity, and Red - there's an extremely high level of activity, that poses a sizable threat to enterprises.

Update Period: Real Time

Spam Volume Index


The Spam Volume Index shows the volume change (percentage) in spam messages received by Tumbleweed’s Message Protection Lab. The first data point is taken to be a hundred percent and every consecutive value is derived by  comparing it to this first data point.

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Spam by Content


Content Category Definitions:

Adult
E-mails that are pornographic, sexual, or shocking in content, or advertise products, services, or Web sites which are pornographic or adult-oriented (even if the message itself contains no obscene language, pornographic images, etc.)

Stock
These are e-mails using a different financial fraud scheme, the most popular of them being the “pump-and-dump” stock scheme.

Scam
E-mail attempting to scam, con or mislead the recipient. Messages receiving this classification include phishing, advanced-fee fraud messages, and other attempts at identity theft, direct or indirect money extraction (Nigerian, etc.)

Health
E-mail offering or advertising different medications, med-related products and related services (cheap pharmacies, etc.)

Financial
Offers, related to various money services – investment opportunities, credit reports, loans, etc.

Replica products
All kinds of duplicates of luxury goods – watches, luggage, jewelry.

Technology
Spam offering various kinds of software products at a very low price.

Education/Job Offering
All offers related to easily achieving various educational certificates, as well as job offerings.

Non-English
Russian, Chinese, Korean, Thai, Spanish, Portuguese, Turkish, German, French, etc.

Multiple Categories
Includes spam messages that fit more than one category of those specified above (for example, an adult message that attempts to scam the recipient, etc.)


Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Image type


This graph shows the types of image file formats used in image spam messages.

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Spam Message size


Text spam messages are significantly smaller than image spam messages and messages with attachments. This graph shows how average spam message size changes over a period of time, compared to the message sizes of text and image spam, as well as spam with attachments (such as PDF spam, Excel spam, etc.)

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Spam subjects

Top ten of spam messages by ‘Subject:’ field.
Note: Only exact matches are considered, i.e. “Thanks, for your greeting card” and “Thanks for your greeting card” will be counted separately.

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Dark traffic


The chart shows a breakdown of connections rejected by Tumbleweed Email products because of DHA, DoS, DNSBL or General Defense.

 DHA - Directory Harvest Attack
 DoS - Denial of Service attack
 DNSBL - DNS Black List
 General Defense [GD] - SMTP Errors or Suspicious SMTP Client Controls on the connecting client.

Update period: Every Day at 1am Pacific Time
Time Scale: Last Seven Days or Last Thirty Days

Inbound threats



Inbound traffic is split into the following categories:
 
Junk – Unsolicited email advertising or Spam
Bulk – Newsletters, Broadcasts, Alerts, etc.
Legitimate – Valid email messages
Virus – Messages containig a virus

Update period: Every Day at 1am Pacific Time.
Time Scale: Last Seven Days or Last Thirty Days