It does make you wonder why they never seem to end up on any of the
spamhaus lists. Perhaps they are brilliant list washers ?
Same here - I see lots of these and they don't score on many lists.
It might be an uneducated guess, but i also have some very annoying
hosts on the radar which i started blocking manually because they are on
neither spamhaus nor sorbs.
Yep, that looks familiar...
# The Solo Networks 8.19.136.0 - 8.19.143.255
8.19.136.0/21 REJECT
# The Solo Networks 67.218.160.0 - 67.218.191.255
# 67.218.164.0/24 Surpass Solutions - cybersonicview.com
# 67.218.173.0/24 X3 Hosting Systems
# 67.218.180.0/24 LogiTech Interactive
67.218.160.0/19 REJECT
My policy, I block the /24 straight away, and hits from 3 separate
/24's earns a block for the whole netblock (as illustrated above).
How did you indentify these blocks as spammers and why doesnt spamhaus
do so? They claim to have the worst spammer organisations on their list.
I've got a whole list of Ips from india and korea which are on no list
but send spam regulary.
Should i care to investigate and maybe reject the the entire block? I'm
pretty new on hunting down sources. All I know is the whois databse
which is mostly useless for that purpose.
--
Arvid
