Botnet spam detection and filtration on the source machine

A device, comprising:

• botnet spam detection technology (BSDT) logic, coupled to a first computer system, the BSDT logic to:
• determine that a packet attempting to be sent from the first computer system comprises at least a portion of a human communication message that can contain spam;
• compute a difference in time value by comparing a packet origination time value in a time stamp within the packet and a second time value of a most recent activity from at least one human input device coupled to the first computer system, the most recent activity from the at least one human input device corresponding to the at least one human input device relaying data into the first computer system in response to operation of the human input device by a human;
• increment a spam counter when the difference in time value is greater than a threshold difference in time value;
• and
• disallow the packet to be sent to a location external to the first computer system if the spam counter exceeds a spam outbound threshold value.