On 21 April 2016 at 09:43:53, Paul Smith 
(p...@pscs.co.uk(mailto:p...@pscs.co.uk)) wrote:
> It would be great if limited information was available without rate  
> limiting - eg registration date and registrar ID and possibly a  
> data-quality indicator. That would help a lot with spam reduction.  


Spamhaus has an http API which’ll return the info you want as a JSON string.

<https://[redacted]/domain/spamhaus.org>

{"status":"ok","score":"-106","registrar":"Gandi SAS 
(R42-LROR)","date_created":"1999-10-01","first_seen":"2009-07-17 
21:42:22","last_seen":"2016-04-20 
00:04:44","spamtrap_hits":"yes","anon_whois":"no","ip":[{"ip":"38.229.70.29","last_seen":"2011-12-19
 13:31:15"},{"ip":"72.52.14.56","last_seen":"2014-01-20 
19:09:04"},{"ip":"104.20.24.40","last_seen":"2016-04-20 
00:04:45"},{"ip":"104.20.25.40","last_seen":"2016-04-20 
00:04:45"},{"ip":"141.101.123.93","last_seen":"2015-03-19 
10:33:41"},{"ip":"145.97.20.167","last_seen":"2014-01-08 
16:15:59"},{"ip":"154.35.129.66","last_seen":"2011-12-28 
15:30:15"},{"ip":"154.35.160.11","last_seen":"2013-03-18 
22:43:25"},{"ip":"157.56.178.135","last_seen":"2013-06-29 
12:05:55"},{"ip":"190.93.240.93","last_seen":"2015-03-19 
10:33:41"},{"ip":"190.93.241.93","last_seen":"2015-03-19 
10:33:41"},{"ip":"190.93.242.93","last_seen":"2015-03-19 
10:33:41"},{"ip":"190.93.243.93","last_seen":"2015-03-19 
10:33:41"},{"ip":"190.93.248.56","last_seen":"2013-05-12 
04:20:43"},{"ip":"190.93.248.140","last_seen":"2013-04-03 
00:03:32"},{"ip":"190.93.249.56","last_seen":"2013-05-12 
04:20:43"},{"ip":"190.93.249.140","last_seen":"2013-04-03 
00:03:32"},{"ip":"190.93.250.15","last_seen":"2015-01-09 
23:03:38"},{"ip":"190.93.250.83","last_seen":"2013-09-28 
02:35:51"},{"ip":"190.93.251.15","last_seen":"2015-01-09 
23:03:38"},{"ip":"190.93.251.83","last_seen":"2013-09-28 
02:35:51"},{"ip":"190.93.252.13","last_seen":"2013-07-14 
16:41:01"},{"ip":"190.93.252.86","last_seen":"2014-11-18 
06:38:51"},{"ip":"190.93.253.13","last_seen":"2013-07-14 
16:41:01"},{"ip":"190.93.253.86","last_seen":"2014-11-18 
06:38:51"},{"ip":"192.42.118.103","last_seen":"2014-06-26 
01:00:57"},{"ip":"192.42.118.104","last_seen":"2016-04-20 
00:04:45"},{"ip":"192.150.94.202","last_seen":"2012-06-20 
09:32:19"},{"ip":"213.171.194.34","last_seen":"2012-01-03 17:10:18"}]}

Most fields should be self explanatory. For “score” the smaller the number the 
better. Positive numbers are bad and if high enough, results in a listing in 
Spamhaus’ DBL. The “ip” array is returning a list of IPs seen sending for the 
domain.

As a mail receiver, how you roll that into your environment is left as an 
exercise for you.

If you want more info, I’ve been a lurker here for a while or you can 
communicate with me directly at my work address <fors...@spamteq.com>. So yes, 
I work at Spamhaus Technology Ltd and am not a disinterested party.

HTH

Simon

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to