1) Create a spamcop account at http://www.spamcop.net/w3m?action=ispsignupform, once you get your password mailed to you, login to the account.
2) Request reports by clicking on “request reports” http://www.spamcop.net/mcgi?action=reqroute. Spamcop takes most formats of IP addresses that people normally use.
3) Reports will come in aggregate and look like:
IP_Address Start/Length Trap User Mole Simp Comments
RDNS
10.10.10.41 Oct 16 18h/20 51 0 0 0 delisted manually, blocklisted
mx3.client.com
10.10.10.42 Nov 5 18h/0 1 0 0 0
mx4.client.com.
— Key to Columns —
IP Address: The numeric address.
Start: The first date (within the past week) that spam was
reported to have originated from the IP address.
Length: The duration of the incident in # of days
Trap: Messages received at traps.
User: Messages reported by registered users.
Mole: Messages reported by registered users who prefer to remain
anonymous.
Simp: Simple reports – messages submitted by unregistered users.
Comments: Notes reflect blocking-list status and issue-resolved status.
RDNS: Reverse dns name of ip address (must pass forward and reverse)