On 2022-06-29 15:14, Marc wrote:
Today I decided to spend some time getting all the ip's[1] (these are
all /24 thus you have to add 164.215.103.1-164.215.103.255) of
serverion, who is sending out constant stream of crap. I thought about
posting it here so you do not need to do this work. If you do some
random checks, you can see this looks weird[2]. Do as you please with
this info.
my pregreet list in postfix
101.36.96.0/19 as135377 #UCloud Information Technology HK Limited
103.125.188.0/22 as135905 #Vietnam Posts and Telecommunications Group
106.75.0.0/17 as4808 #China Unicom
106.75.128.0/20 as58466 #ChinaNet Guangdong Province Network
106.75.148.0/23 as58466 #ChinaNet Guangdong Province Network
106.75.160.0/19 as58466 #ChinaNet Guangdong Province Network
106.75.208.0/20 as17621 #China Unicom Shanghai Network
106.75.224.0/19 as4812 #China Telecom Group
113.31.96.0/19 as17621 #China Unicom Shanghai Network
117.50.0.0/16 as4808 #China Unicom
118.193.32.0/20 as135377 #UCloud Information Technology HK Limited
119.194.0.0/16 as4766 #Korea Telecom
124.88.0.0/13 as4837 #China Unicom
136.144.41.0/24 as211252 #Delis LLC
143.110.128.0/17 as14061 #DigitalOcean LLC
143.198.0.0/16 as14061 #DigitalOcean LLC
147.78.47.0/24 as209588 #FlyServers S.A.
152.32.128.0/18 as135377 #UCloud Information Technology HK Limited
152.32.234.0/23 as135377 #UCloud Information Technology HK Limited
154.89.5.0/24 as141167 #AgotoZ HK Limited
159.89.0.0/16 as14061 #DigitalOcean LLC
165.154.0.0/17 as135377 #UCloud Information Technology HK Limited
165.227.0.0/16 as14061 #DigitalOcean LLC
167.172.0.0/16 as14061 #DigitalOcean LLC
168.121.44.0/22 as27843 #Optical Technologies S.A.C.
172.104.128.0/18 as63949 #Linode LLC
172.105.0.0/16 as63949 #Linode LLC
175.198.128.0/17 as4766 #Korea Telecom
178.32.0.0/15 as16276 #OVH SAS
178.73.208.0/21 as42708 #GleSYS AB
18.204.0.0/14 as14618 #Amazon.com Inc.
183.136.224.0/21 as58461 #No.288 Fu-chun Road
185.142.236.0/24 as174 #Cogent Communications
185.156.72.0/24 as61432 #TOV Vaiz Partner
185.239.242.0/23 as399471 #Serverion LLC
190.195.0.0/16 as7303 #Latin American and Caribbean IP address Regional
Registry
192.241.128.0/17 as14061 #DigitalOcean LLC
193.142.146.0/23 as208046 #MAXIMILIAN KUTZNER TRADING AS HOSTSLICK
193.169.255.0/24 as213010 #GigaHostingServices OU
193.233.176.0/20 as400377 #Serverion LLC
193.46.254.0/23 as47890 #Unmanaged Ltd
193.56.29.0/24 as210228 #Web Hosted Group Ltd
194.165.16.0/23 as48721 #FlyServers S.A.
194.31.98.0/24 as213035 #Des Capital B.V.
195.133.18.0/24 as211252 #Delis LLC
198.199.64.0/18 as14061 #DigitalOcean LLC
2.56.56.0/22 as399471 #Serverion LLC
2.57.122.0/24 as48090 #Pptechnology Limited
202.102.128.0/18 as4659 #CHINA169-CN CNCGROUP Old Jitong IP Network
206.72.192.0/20 as19318 #InterServer Inc
208.100.0.0/19 as32748 #SteadFast
212.192.241.0/24 as211252 #Delis LLC
212.192.244.0/22 as399471 #Serverion LLC
212.193.30.0/24 as211252 #Delis LLC
212.70.149.0/24 as204428 #SS-NET
221.152.0.0/14 as4766 #Korea Telecom
223.70.0.0/15 as56048 #China Mobile Communicaitons Corporation
23.184.48.0/24 as206607 #Nexus Bytes LLC
31.210.20.0/23 as211252 #Delis LLC
35.168.0.0/13 as14618 #Amazon.com Inc.
37.0.10.0/23 as211252 #Delis LLC
37.0.15.0/24 as399471 #Serverion LLC
37.0.8.0/24 as211252 #Delis LLC
37.49.225.0/24 as212370 #Peenq.nl
44.192.0.0/11 as14618 #Amazon.com Inc.
45.134.23.0/24 as399471 #Serverion LLC
45.137.20.0/22 as51447 #RootLayer Web Services Ltd.
45.148.10.0/24 as48090 #Pptechnology Limited
45.227.254.0/24 as267784 #FlyServers S.A.
5.188.206.0/24 as200391 #Krez 999 EOOD
5.34.204.0/24 as15828 #BLUE DIAMOND NETWORK CO. LTD.
5.34.205.0/24 as58142 #Samaneh Sama Pishro Persian Communications and
Information Development Company PJS
5.34.207.0/24 as15828 #BLUE DIAMOND NETWORK CO. LTD.
50.31.20.0/22 as32748 #SteadFast
52.54.0.0/15 as14618 #Amazon.com Inc.
54.160.0.0/13 as14618 #Amazon.com Inc.
54.172.0.0/14 as14618 #Amazon.com Inc.
54.221.0.0/16 as14618 #Amazon.com Inc.
62.197.136.0/24 as211252 #Delis LLC
62.233.50.0/24 as57523 #Chang Way Technologies Co. Limited
64.227.0.0/17 as14061 #DigitalOcean LLC
66.240.192.0/18 as10439 #CARInet Inc.
71.6.128.0/17 as10439 #CARInet Inc.
75.160.0.0/12 as209 #CenturyLink Communications LLC
77.247.110.0/24 as212370 #Peenq.nl
80.66.76.0/24 as208091 #Xhost Internet Solutions LP
80.66.88.0/24 as208091 #Xhost Internet Solutions LP
80.82.76.0/22 as202425 #IP Volume Inc
85.202.168.0/23 as211252 #Delis LLC
85.214.128.0/17 as6724 #Strato AG
87.246.7.0/24 as204428 #SS-NET
89.248.160.0/20 as202425 #IP Volume Inc
92.255.85.0/24 as57523 #Chang Way Technologies Co. Limited
93.174.88.0/21 as202425 #IP Volume Inc
94.102.48.0/20 as202425 #IP Volume Inc
its just a simple bash script takes 2 sec to rescan, i use ip2location
database from local sqlite3 db
above is one of my spamtrap servers, without any mx, a, aaaa, happy
hollyday :=)
