2013-11-05

1) Create a spamcop account at http://www.spamcop.net/w3m?action=ispsignupform, once you get your password mailed to you, login to the account.

2) Request reports by clicking on “request reports” http://www.spamcop.net/mcgi?action=reqroute. Spamcop takes most formats of IP addresses that people normally use.

3) Reports will come in aggregate and look like:

 IP_Address Start/Length Trap User Mole Simp Comments

RDNS

10.10.10.41 Oct 16 18h/20   51    0    0    0 delisted manually, blocklisted
mx3.client.com

10.10.10.42 Nov  5 18h/0    1    0    0    0
mx4.client.com.

– Key to Columns –

IP Address:  The numeric address.

Start:       The first date (within the past week) that spam was

reported to have originated from the IP address.

Length:      The duration of the incident in # of days

Trap:        Messages received at traps.

User:        Messages reported by registered users.

Mole:        Messages reported by registered users who prefer to remain

anonymous.

Simp:        Simple reports – messages submitted by unregistered users.

Comments:    Notes reflect blocking-list status and issue-resolved status.

RDNS:        Reverse dns name of ip address (must pass forward and reverse)

 

Show more