Mailing List SIMS@mail.stalker.com Message #15400
From: Charles Mangin <OPTION8@option8.com>
Subject: Re: SIMS 2006 statistics
Date: Fri, 12 Jan 2007 10:16:37 -0500
To: <site@tedcrane.com>
X-Mailer: Apple Mail (2.752.2)
basically, what i did was a textwrangler search of my logs for 2006 for the names of the blacklists i am currently using, so the numbers for zen are just since zen was introduced in november. the numbers for sbl-xbl are in the "other" but here's what sbl-xbl came up with:

sbl-rbl.spamhaus.org 170,808

zen.spamhaus.org 28379

Does this include its predecessor, sbl-xbl?
Or is that listed under "other blacklists"?

internal blacklist 254825

Are you interested in sharing this?

sure. here goes:

a lot of these are out of date, incomplete, or covered by one or more RBLs now, but until i have reason to remove them from my internal list, i don't. hence the length. mostly what i've done is gone through the spam that i still get and found several that are from the same IP range, and looked those up with arin.net/whois and blocked the /16 or /24 that's relevant. those that are commented out are mostly because i've inadvertently blocked one or more legitimate mails to/from that range.


127.0.0.2-127.0.0.5 ; covers RBLs - .6 is SBLs spamtraps, and too easily abused

; 127.0.0.6 ; ? sorbs false positives ?

127.0.0.7-127.0.0.255 ; covers RBLs
127.1.0.1-127.1.0.31 ; covers RBLs
10.0.0.0-10.255.255.255; spoofed nonroutable IPs

; APNIC can kiss my ass.
;202.0.0.0 - 203.255.255.255
203.177.202.0 - 203.177.202.255
218.0.0.0 - 222.255.255.255
210.0.0.0 - 211.255.255.255

124.0.0.0 - 124.255.255.255 ; apnic

215.0.0.0 - 215.255.255.255; DOD spoofed IPs

200.0.0.0 - 200.255.255.255; latin america.
201.0.0.0 - 201.255.255.255; more latin america...


12.156.128.0 - 12.156.135.255; at&t worldnet
12.190.120.160 - 12.190.120.191
24.129.128.0 - 24.129.191.255; road runner road runner...
24.189.80.0-24.189.87.255; optonline dynamic IPs
24.229.0.0 - 24.229.255.255; mexxico
24.64.0.0 - 24.71.255.255; shaw comm.
41.0.0.0 - 41.255.255.255
61.0.0.0 - 61.255.255.255
60.0.0.0 - 60.255.255.255
59.0.0.0 - 59.255.255.255
58.0.0.0 - 58.255.255.255
62.194.0.0 - 62.195.255.255; netherlands lottery scammer
62.215.16.0 -  62.215.31.255; kuwait
62.234.0.0 - 62.234.127.255; wanadoo cable
62.251.203.64 - 62.251.203.127; morrocco
62.78.180.0 - 62.78.195.255; helsinki
63.196.122.192-63.196.122.199
64.123.147.0 - 64.123.147.255; sbc/ada business computers
64.144.0.0 - 64.145.255.255; dsl net dynamic IPs
65.184.0.0 - 65.191.255.255; more roadrunner
66.50.0.0 - 66.50.255.255
65.24.0.0 - 65.27.255.255; roadrunner dynamic IPs
66.108.0.0 - 66.108.255.255; roadrunner NYC
66.120.0.0 - 66.127.255.255; pacbell
66.126.132.0 - 66.126.135.255; pacbell
66.209.128.0 - 66.209.143.255; com net inc, ohio
66.249.192.0-66.249.207.255; telefonica central america
66.72.0.0-66.73.255.255; dialups
66.74.0.0 - 66.75.255.255; more roadrunner
68.192.0.0 - 68.199.255.255; cablevision
68.200.0.0 - 68.207.255.255; roadrunner houston, residential
68.248.0.0 - 68.252.255.255; habeas forgers
68.88.0.0 - 68.93.255.255; SBC internet
69.11.128.0 - 69.11.255.255; waltadams.com
69.200.0.0 - 69.207.255.255; road runner
70.112.0.0 - 70.121.111.255; more roadrunner
70.184.64.0 - 70.184.71.255; CBS?
70.32.0.0 - 70.40.255.255; adelhpia cable
70.48.0.0 - 70.54.255.255; canada
72.36.128.0 - 72.36.223.255 ; layered technology
74.128.0.0 - 74.143.255.255
80.122.169.0 - 80.122.174.255
80.128.0.0 - 80.146.159.255; more DT
80.172.0.0 - 80.172.255.255; via network dsl, portugal
80.200.0.0 - 80.200.255.255; skynet ADSL
80.221.0.0 - 80.221.255.255; sonera dsl
80.230.128.0 - 80.230.151.255
80.48.0.0 - 80.55.255.255; polish telecom
80.59.0.0 - 80.59.255.255; spain
80.97.192.0 - 80.97.255.255; romanian telecom

81.0.0.0 - 81.255.255.255; RIPE 'unspecified'
81.84.54.0 - 81.84.69.255; portugese
82.76.0.0 - 82.79.255.255
82.131.165.0 - 82.131.165.255; invitel honduras
82.158.138.0 - 82.159.127.255; barcelona dsl
82.166.0.0 - 82.166.255.255; israeli spammers
82.177.25.0 - 82.177.25.255; martel poland
82.182.184.0 - 82.182.184.255; sweden
82.201.224.0 - 82.201.255.255; egyptian dsl (afrinic)
82.208.181.0 - 82.208.181.255; astral telecom bucharest
82.212.8.0 - 82.212.8.255; germany
82.224.0.0 - 82.255.255.255; french ISP
82.104.0.0 - 82.107.255.255

82.163.128.0 - 82.163.255.255 ; uk dsl
82.75.0.0 - 82.75.83.255 ; netherlands
82.194.34.0 - 82.194.34.255 ; RIPE
83.91.128.0 - 83.91.191.255 ; denmark
84.254.195.0 - 84.254.195.255
86.108.105.0 - 86.108.105.255
86.108.116.0 - 86.108.116.255 ; jordan
86.108.70.0 - 86.108.70.255; jordan
86.194.17.0 - 86.194.17.255 ; france
87.78.0.0 - 87.78.255.255 ; koln germany
88.247.0.0 - 88.247.79.255 ; RIPE
89.56.0.0 - 89.56.255.255 ; german freenet
89.57.128.0 - 89.57.255.255 ; german freenet



83.103.143.0 - 83.103.143.63; romania
83.204.117.0 - 83.204.117.255; wanadoo FR
83.88.64.0 - 83.88.127.255; dsl in denmark
84.120.0.0 - 84.123.255.255; ONO spain
84.13.0.0 - 84.13.127.255; opal dsl uk
84.9.164.0 - 84.9.167.255; bulldog DSL
84.9.64.0  - 84.9.95.255; british dynamic
85.141.128.0 - 85.141.255.255
85.176.0.0 - 85.182.127.255; german dsl
85.206.128.0 - 85.206.129.255; lithuania
85.234.197.0 - 85.234.197.255; more lithuania
87.68.36.0 - 87.68.47.255
89.53.128.0 - 89.53.191.255
125.0.0.0 - 125.255.255.255 ; APNIC
; 128.192.19.100; compromised server at UGA. heh.
134.215.0.0-134.215.255.255; dsl ?
138.8.0.0 - 138.8.255.255; goldman sachs???
145.236.0.0 - 145.236.255.255; budapest. i'm sensing a pattern...
150.19.0.0 - 150.19.255.255; habeas, apnic...
156.17.0.0 - 156.17.255.255; polish ebay scammer
162.33.0.0 - 162.33.255.255
167.192.0.0 - 167.200.255.255; state of georgia?
169.208.0.0 - 169.223.255.255; APNIC
172.128.0.0 - 172.211.255.255; AOL dynamic IPs - nothing legit ever comes from these
190.0.0.0 - 190.255.255.255; latin america/caribbean
189.0.0.0 - 189.255.255.255 ; latin america
195.250.220.0 - 195.250.220.255 ; slovenia
196.200.192.0 - 196.200.207.255 ; africa
196.217.0.0 - 196.217.127.255 ; moroccan dsl
193.77.174.0 - 193.77.174.255; slovenia
194.165.112.0 - 194.165.116.255; more slovenia
194.209.73.0 - 194.209.73.255; switzerland
195.229.199.96 - 195.229.199.111; dubai
195.97.0.0 - 195.97.127.255 ; hellas online
196.204.0.0 - 196.204.255.255; africa
196.206.0.0 - 196.206.255.255; africa
200.24.80.0-200.24.87.0
202.180.128.0 - 202.180.159.255
202.133.32.0 - 202.133.47.255; krestar pakistan.
202.134.144.0 - 202.134.191.255;mumbai
202.141.0.0 - 202.141.159.255; india educational
202.57.128.0 - 202.57.191.255; bankok.
202.63.192.0 - 202.63.223.255; healthfirs spammers
202.77.181.0 - 202.77.181.255 ; outblaze
203.118.64.0 - 203.118.127.255; thailand
203.130.224.0 - 203.130.255.255; indonesia
203.150.128.0 - 203.150.255.255; thailand
203.175.64.0 - 203.175.79.255; oh look. pakistan.
203.199.0.0-203.199.255.255
203.217.0.0 - 203.217.31.255; emailmarketingmasters.com
204.210.0.0 - 204.210.255.255; more roadrunner IPs
205.238.192.0 - 205.238.255.255
206.126.80.0 - 206.126.87.255; inter.net canada
206.40.96.0 - 206.40.127.255; lakefield telecom
207.44.176.12; bogus virus warnings
207.164.80.0 - 207.164.83.255
208.177.44.0 - 208.177.47.255
209.168.224.0 - 209.168.224.255; rm greene
209.45.0.0 - 209.45.1.255; peru?
210.186.96.0 - 210.186.127.255; more malaysia
210.186.96.0 - 210.186.127.255; tmnet malaysia
210.248.0.0 - 210.255.255.255; more japanese
210.5.80.0 - 210.5.83.255; philipines small biz dsl
211.216.0.0 - 211.225.255.255
211.172.0.0 - 211.199.255.255
211.158.80.0 - 211.158.87.255; more apnic
211.158.96.0 - 211.158.127.255; chinese hackers
212.227.126.128 - 212.227.126.255; german relays
212.50.160.0 - 212.50.191.255; UK 'gouranga'
212.95.188.160 - 212.95.188.191; bulgarian internet club
212.98.176.0 - 212.98.177.255 ; belarus
213.189.64.0 - 213.189.68.255 ; kuwait
213.116.248.0 - 213.116.255.255 ; uunet europe
213.182.96.0 - 213.182.103.255; german dialup
213.208.104.0 - 213.208.104.255; uk dynamic dsl
213.213.192.0 - 213.213.255.254; belgium again
213.228.180.0 - 213.228.180.255; portugese dsl
213.238.254.0 - 213.238.254.255; Brf Frogardarna (sweden)
213.65.0.0 - 213.65.255.255; more telia
213.67.0.0 - 213.67.255.255; telia
213.75.160.0 - 213.75.191.255; netherlands
216.136.17.0 - 216.136.17.255
216.59.224.0 - 216.59.255.255; golden triangle ontario
217.19.16.128 - 217.19.16.191; netherlands
217.224.0.0 - 217.237.161.47; deutsche telekom
217.224.0.0 - 217.237.161.47; even more
217.80.0.0 - 217.89.31.255; more DT
218.104.100.0-218.104.100.127
218.111.0.0 - 218.111.255.255; malaysia dsl




Charles Mangin
Option8: Making Macs happy since 1999.
option8@option8.com | http://www.option8consulting.com
919.368.7167





Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster