Index

NAME
SYNOPSIS
DESCRIPTION
API

NAME

Net::SenderBase::Results - Results of a senderbase query

SYNOPSIS

  print "Results for: ", $results->ip, "\n",
        "Monthly Average Magnitude: ", 
           $results->ip_monthly_magnitude, "\n",
        "Daily Average Magnitude: ",
           $results->ip_daily_magnitude, "\n";

DESCRIPTION

This module is a read-only results object, giving you access to the results of a senderbase query. The only way to construct one of these objects is from a query.

API

Some of the items here are future enhancements to senderbase that are not yet implemented. See http://www.senderbase.org/dnsresponses.html for further details.

`ip`

Returns the IP address you queried.

`raw_data`

Returns the raw data for the query, as returned by senderbase.

`version_number`

The senderbase version number. Supports upgrade path to future versions of SenderBase DNS responses

`org_name`

Organization Name - An entity controlling a group of mail servers and one or many domains

`org_daily_magnitude`

A measure of message volume calculated using a log scale with a base of 10. The maximum theoretical value of the scale is set to 10 (100% of the world's message vol.)

`org_monthly_magnitude`

Same as Response org_daily_magnitude, except based on monthly percentages instead of daily percentages.

`org_id`

10 digit unique numeric identifier for an organization.

`org_category`

Category of organization (e.g, ISP, Airline, News, Adult, Commercial Bank, etc). Assigned by IronPort, using external sources like OneSource where appropriate.

`org_first_message`

Date as standard UNIX time format (seconds since epoch). (New, high-volume organizations may be suspicious)

`org_domains_count`

# of domains closely associated with this organization

`org_ip_controlled_count`

# of IP's an organization controls

`org_ip_used_count`

Every IP we track in SenderBase that has sent mail and is closely associated with this org

`org_fortune_1000`

Either "Y" or "N".

F1000 = less likely to be spam.

`hostname`

hostname (just the part preceeding the domain name, e.g., "smtp." in the case of "smtp.ironport.com")

`domain_name`

`hostname_matches_ip`

Do a reverse then forward DNS lookup. If successful, then "Y", otherwise "N".

`domain_daily_magnitude`

Same as org_daily_magnitude, except based on domains.

`domain_monthly_magnitude`

Same as org_monthly_magnitude, except based on domains.

`domain_first_message`

Date of the first message from this domain. Date is in standard unix time format, i.e. number of seconds since the epoch.

`domain_rating`

IronPort's editorial opinion on the quality of mail sent by a domain (Uses scale of AAA, AA, A, similar to credit rating services)

`ip_daily_magnitude`

Same as org_daily_magnitude, except based on IPs.

`ip_monthly_magnitude`

Same as org_monthly_magnitude, except based on IPs.

`ip_average_magnitude`

The average magnitude for this IP since SenderBase began tracking volumes.

`ip_30_day_volume_percent`

The last 30 days of volume as a percentage of total historical volume.

`ip_in_bonded_sender`

"Y" if the IP address is in bonded sender, otherwise "N". Also returns "Y+" on some occasions - no idea why ;-)

`ip_cidr_range`

The CIDR range associated with this IP in whois.

`ip_blacklist_score`

# positive blacklist responses / # blacklists tracked by SenderBase

`ip_city`

The city associated with this IP

`ip_state`

The US state associated with this IP

`ip_postal_code`

The postal code associated with this IP

`ip_country`

The country associated with this IP

`ip_longitude`

The longitude associated with this IP

`ip_latitude`

The latitude associated with this IP