What GBUdb Learns

Each IP is represented by three pieces of information. These are a type flag, an integer count of bad encounters, and an integer count of good encounters.

In general, the type flag allows for gross classifications of each IP and the good and bad counters provide for fine details.

The good and bad counters combine to provide a pair of statistical values. These are the probability figure which represents how likely a message is to be "spam" or "ham", and the confidence figure which represents how much current data we have to support the probability assessment. Each counter is a 15 bit integer with a range from 0 to 32767.