Mailing List Archive: shit from serverion

shit from serverion

Jun 29, 2022, 6:14 AM

Post #1 of 13 (1155 views)

Today I decided to spend some time getting all the ip's[1] (these are all /24 thus you have to add 164.215.103.1-164.215.103.255) of serverion, who is sending out constant stream of crap. I thought about posting it here so you do not need to do this work. If you do some random checks, you can see this looks weird[2]. Do as you please with this info.

[1]
164.215.103.1 164.215.103.1 164.215.96.254 171.22.17.0 109.205.211.0 141.98.6.0 109.206.240.0 164.215.101.0 109.206.242.0 109.206.241.0 109.206.243.0 185.246.222.0 185.218.138.0 185.126.34.0 185.225.73.0 185.216.68.0 185.225.74.0 185.246.220.0 185.216.71.0 171.22.30.0 185.225.75.0 185.72.9.0 185.252.178.0 185.252.179.0 193.124.207.0 193.124.91.0 185.254.37.0 193.124.203.0 185.246.223.0 193.124.205.0 192.124.172.0 193.37.40.0 193.47.61.0 194.135.23.0 194.180.48.0 194.48.250.0 194.58.60.0 193.124.95.0 194.55.186.0 194.169.172.0 193.233.176.0 193.233.177.0 193.233.178.0 193.233.179.0 193.233.180.0 193.233.181.0 193.233.182.0 193.233.183.0 193.233.184.0 193.233.185.0 193.233.186.0 193.233.187.0 193.233.188.0 193.233.189.0 193.233.190.0 193.233.191.255 194.87.136.0 194.87.132.0 194.87.133.0 194.87.134.0 194.87.135.255 194.87.128.0 194.87.108.0 194.87.129.0 194.58.67.0 194.87.137.0 194.87.114.0 194.87.130.0 194.87.131.0 194.87.171.0 194.87.178.0 194.87.200.0 194.87.169.0 194.87.168.0 194.87.170.0 194.87.204.0 194.87.208.0 194.87.209.0 194.87.212.0 194.87.246.0 194.87.3.0 194.87.251.0 194.87.250.0 194.87.226.0 194.87.227.0 194.87.24.0 194.87.25.0 194.87.26.0 194.87.27.255 194.87.228.0 194.87.229.0 194.87.230.0 194.87.231.255 194.87.219.0 194.87.22.0 194.87.84.0 194.87.86.0 194.87.72.0 194.87.75.0 194.87.90.0 194.87.87.0 194.87.42.0 194.87.74.0 194.87.85.0 194.87.73.0 195.133.31.0 195.133.28.0 195.133.32.0 195.133.84.0 195.133.80.0 195.133.75.0 195.133.39.0 195.133.38.0 195.133.76.0 195.133.35.0 195.178.121.0 195.133.86.0 195.58.35.0 195.58.52.0 195.133.85.0 195.58.50.0 195.58.53.0 212.192.11.0 195.178.120.0 195.58.54.0 195.58.54.255

[2]
4.169.172.5 griffith.tahoerealestateloans.com.
194.169.172.6 jones.tahoerealestateloans.com.
194.169.172.7 watkins.tahoerealestateloans.com.
194.169.172.8 phillips.tahoerealestateloans.com.
194.169.172.9 howard.tahoerealestateloans.com.
194.169.172.10 atkinson.tahoerealestateloans.com.
194.169.172.11 obrien.tahoerealestateloans.com.
194.169.172.12 smith.tahoerealestateloans.com.
194.169.172.13 fleming.tahoerealestateloans.com.
194.169.172.14 grant.tahoerealestateloans.com.
194.169.172.15 schultz.tahoerealestateloans.com.
194.169.172.16 adams.tahoerealestateloans.com.
194.169.172.17 fisher.tahoerealestateloans.com.
194.169.172.18 avila.tahoerealestateloans.com.
194.169.172.19 crawford.tahoerealestateloans.com.
194.169.172.20 francis.tahoerealestateloans.com.
194.169.172.21 hunt.tahoerealestateloans.com.
194.169.172.22 ayers.tahoerealestateloans.com.
194.169.172.23 barker.tahoerealestateloans.com.
194.169.172.24 sullivan.tahoerealestateloans.com.
194.169.172.25 campos.tahoerealestateloans.com.
194.169.172.26 sanders.tahoerealestateloans.com.
194.169.172.27 harris.tahoerealestateloans.com.
194.169.172.28 delacruz.tahoerealestateloans.com.
194.169.172.29 carlson.tahoerealestateloans.com.
194.169.172.30 walker.tahoerealestateloans.com.
194.169.172.31 ortega.tahoerealestateloans.com.
194.169.172.32 pearson.tahoerealestateloans.com.
194.169.172.33 noble.tahoerealestateloans.com.
194.169.172.34 scott.tahoerealestateloans.com.
194.169.172.35 barnes.tahoerealestateloans.com.
194.169.172.36 ortiz.tahoerealestateloans.com.
194.169.172.37 davis.tahoerealestateloans.com.
194.169.172.38 lane.tahoerealestateloans.com.
194.169.172.39 dominguez.tahoerealestateloans.com.
194.169.172.40 gonzalez.tahoerealestateloans.com.
194.169.172.41 zavala.tahoerealestateloans.com.
194.169.172.42 rhodes.tahoerealestateloans.com.
194.169.172.43 stewart.tahoerealestateloans.com.
194.169.172.44 bailey.tahoerealestateloans.com.
194.169.172.45 knight.tahoerealestateloans.com.
194.169.172.46 wilson.tahoerealestateloans.com.

193.233.176.13 juvis.e-hitart.co.uk.
193.233.176.14 tastat.free-business-directory.co.uk.
193.233.176.15 rgissa.free-business-directory.co.uk.
193.233.176.16 haytap.free-business-directory.co.uk.
193.233.176.17 ssvax.free-business-directory.co.uk.
193.233.176.18 sryian.imakoocars.co.uk.
193.233.176.19 overkj.imakoocars.co.uk.
193.233.176.20 xjnu.imakoocars.co.uk.
193.233.176.21 amuru.imakoocars.co.uk.
193.233.176.22 teip.tfng.co.uk.
193.233.176.23 qudian.tfng.co.uk.
193.233.176.24 fogou.tfng.co.uk.
193.233.176.25 inuge.tfng.co.uk.
193.233.176.26 very.nike-free-run.org.uk.
193.233.176.27 shim.nike-free-run.org.uk.
193.233.176.28 phimht.nike-free-run.org.uk.
193.233.176.29 sparev.nike-free-run.org.uk.
193.233.176.30 ombyt.nike-free-run.org.uk.
193.233.176.31 ekoka.nike-free-run.org.uk.
193.233.176.32 sirpus.nike-free-run.org.uk.
193.233.176.33 zanzig.nike-free-run.org.uk.
193.233.176.34 redowl.nike-free-run.org.uk.
193.233.176.35 noeuze.nike-free-run.org.uk.
193.233.176.36 givrer.nike-free-run.org.uk.
193.233.176.37 alyner.nike-free-run.org.uk.
193.233.176.38 quyte.nike-free-run.org.uk.
193.233.176.39 aisy.nike-free-run.org.uk.
193.233.176.40 moske.nike-free-run.org.uk.
193.233.176.41 rmf.nike-free-run.org.uk.
193.233.176.42 arley.nike-free-run.org.uk.
193.233.176.43 lyubil.nike-free-run.org.uk.
193.233.176.44 csaic.nike-free-run.org.uk.
193.233.176.45 libc.nike-free-run.org.uk.
193.233.176.46 strutz.nike-free-run.org.uk.
193.233.176.47 sunjpg.nike-free-run.org.uk.
193.233.176.48 constn.nike-free-run.org.uk.
193.233.176.49 cddian.nike-free-run.org.uk.
193.233.176.50 bulin.nike-free-run.org.uk.
193.233.176.51 knatt.nike-free-run.org.uk.
193.233.176.52 nonrur.nike-free-run.org.uk.
193.233.176.53 chazen.nike-free-run.org.uk.
193.233.176.54 hrgbrg.nike-free-run.org.uk.
193.233.176.55 bsww.nike-free-run.org.uk.
193.233.176.56 addcit.nike-free-run.org.uk.

94.87.87.30 price.refugesquick.org.uk.
194.87.87.31 graham.refugesquick.org.uk.
194.87.87.32 anderson.refugesquick.org.uk.
194.87.87.33 henderson-freeman.refugesquick.org.uk.
194.87.87.34 wade-davila.refugesquick.org.uk.
194.87.87.35 pollard.refugesquick.org.uk.
194.87.87.36 arellano.refugesquick.org.uk.
194.87.87.37 reid.refugesquick.org.uk.
194.87.87.38 brown.refugesquick.org.uk.
194.87.87.39 malone-peterson.refugesquick.org.uk.
194.87.87.40 conley.refugesquick.org.uk.
194.87.87.41 rodriguez.refugesquick.org.uk.
194.87.87.42 barton.refugesquick.org.uk.
194.87.87.43 mack.refugesquick.org.uk.
194.87.87.44 holland-taylor.refugesquick.org.uk.
194.87.87.45 king.refugesquick.org.uk.
194.87.87.46 valdez.refugesquick.org.uk.
194.87.87.47 huffman.refugesquick.org.uk.
194.87.87.48 wood.refugesquick.org.uk.
194.87.87.49 smith.refugesquick.org.uk.
194.87.87.50 henry.refugesquick.org.uk.
194.87.87.51 phillips.refugesquick.org.uk.
194.87.87.52 rogers.refugesquick.org.uk.
194.87.87.53 rodriguez-montgomery.refugesquick.org.uk.
194.87.87.54 oconnell.refugesquick.org.uk.
194.87.87.55 martinez.refugesquick.org.uk.
194.87.87.56 becker.refugesquick.org.uk.
194.87.87.57 lewis-alvarado.refugesquick.org.uk.
194.87.87.58 williams.refugesquick.org.uk.
194.87.87.59 henson.refugesquick.org.uk.
194.87.87.60 nelson.refugesquick.org.uk.
194.87.87.61 turner.refugesquick.org.uk.
194.87.87.62 bernard.refugesquick.org.uk.
194.87.87.63 peters-pearson.refugesquick.org.uk.
194.87.87.64 munoz.refugesquick.org.uk.
194.87.87.65 gross.refugesquick.org.uk.
194.87.87.66 booktactical.com.
194.87.87.67 thomas.booktactical.com.
194.87.87.68 rich.booktactical.com.
194.87.87.69 davidson-mason.booktactical.com.
194.87.87.70 sanchez.booktactical.com.
194.87.87.71 williams-griffith.booktactical.com.

194.87.42.20 cook-martinez.tweakedtoperfection.com.
194.87.42.21 newton.tweakedtoperfection.com.
194.87.42.22 hunt-oliver.tweakedtoperfection.com.
194.87.42.23 davidson.tweakedtoperfection.com.
194.87.42.24 brown.tweakedtoperfection.com.
194.87.42.25 riley.tweakedtoperfection.com.
194.87.42.26 jones.tweakedtoperfection.com.
194.87.42.27 griffin.tweakedtoperfection.com.
194.87.42.28 davis.tweakedtoperfection.com.
194.87.42.29 miller-hinton.tweakedtoperfection.com.
194.87.42.30 nelson.tweakedtoperfection.com.
194.87.42.31 jacobs-gilbert.tweakedtoperfection.com.
194.87.42.32 hardy-knight.tweakedtoperfection.com.
194.87.42.33 craig.tweakedtoperfection.com.
194.87.42.34 austin-smith.tweakedtoperfection.com.
194.87.42.35 carson-jarvis.tweakedtoperfection.com.
194.87.42.36 camacho.tweakedtoperfection.com.
194.87.42.37 christensen-crawford.tweakedtoperfection.com.
194.87.42.38 solomon.tweakedtoperfection.com.
194.87.42.39 mcgee.tweakedtoperfection.com.
194.87.42.40 black.tweakedtoperfection.com.
194.87.42.41 bray.tweakedtoperfection.com.
194.87.42.42 miles.tweakedtoperfection.com.
194.87.42.43 howard.tweakedtoperfection.com.
194.87.42.44 burns.tweakedtoperfection.com.
194.87.42.45 brooks.tweakedtoperfection.com.
194.87.42.46 alexander.tweakedtoperfection.com.
194.87.42.47 torres-cooper.tweakedtoperfection.com.
194.87.42.48 king.tweakedtoperfection.com.
194.87.42.49 lopez.tweakedtoperfection.com.
194.87.42.50 bautista-higgins.tweakedtoperfection.com.
194.87.42.51 fowler.tweakedtoperfection.com.
194.87.42.52 norman.tweakedtoperfection.com.
194.87.42.53 shaw.tweakedtoperfection.com.
194.87.42.54 ray-gardner.tweakedtoperfection.com.
194.87.42.55 mckay.tweakedtoperfection.com.
194.87.42.56 hill.tweakedtoperfection.com.
194.87.42.57 franco.tweakedtoperfection.com.
194.87.42.58 walker-hood.tweakedtoperfection.com.
194.87.42.59 rivas-martinez.tweakedtoperfection.com.
194.87.42.60 colon.tweakedtoperfection.com.
194.87.42.61 thompson.tweakedtoperfection.com.
194.87.42.62 armstrong-brown.tweakedtoperfection.com.
194.87.42.63 clark.tweakedtoperfection.com.

Re: shit from serverion [ In reply to ]

raymond at prolocation

Jun 29, 2022, 6:44 AM

Post #2 of 13 (1155 views)

Permalink

Hello Marc,

> Today I decided to spend some time getting all the ip's[1] (these are
> all /24 thus you have to add 164.215.103.1-164.215.103.255) of
> serverion, who is sending out constant stream of crap. I thought about
> posting it here so you do not need to do this work. If you do some
> random checks, you can see this looks weird[2]. Do as you please with
> this info.

There is a lot more related to this. Several ranges from 'prefix broker'
that are used for the same and that have been blasting out .co spams.

So yes they (at least) tend to have some bad customers there.

And discussed this during a recent event in London also with some other BL
providers...

bye, Raymond - SURBL

Re: shit from serverion [ In reply to ]

uhlar at fantomas

Jun 29, 2022, 7:01 AM

Post #3 of 13 (1155 views)

Permalink

On 29.06.22 13:14, Marc wrote:
>Today I decided to spend some time getting all the ip's[1] (these are all
> /24 thus you have to add 164.215.103.1-164.215.103.255) of serverion, who
> is sending out constant stream of crap. I thought about posting it here
> so you do not need to do this work. If you do some random checks, you can
> see this looks weird[2]. Do as you please with this info.

FYI

I use local rbldnsd at SA and MTA level, one IP zone for ip-based
blocking at MTA level and SA and one zone for domain blocking ad MTA level
and URI search.

long time ago there was distributed RBL where multiple admins did block
unwelcome mail senders... afaik it's dead

>[1]
>164.215.103.1 164.215.103.1 164.215.96.254 171.22.17.0 109.205.211.0 141.98.6.0 109.206.240.0 164.215.101.0 109.206.242.0 109.206.241.0 109.206.243.0 185.246.222.0 185.218.138.0 185.126.34.0 185.225.73.0 185.216.68.0 185.225.74.0 185.246.220.0 185.216.71.0 171.22.30.0 185.225.75.0 185.72.9.0 185.252.178.0 185.252.179.0 193.124.207.0 193.124.91.0 185.254.37.0 193.124.203.0 185.246.223.0 193.124.205.0 192.124.172.0 193.37.40.0 193.47.61.0 194.135.23.0 194.180.48.0 194.48.250.0 194.58.60.0 193.124.95.0 194.55.186.0 194.169.172.0 193.233.176.0 193.233.177.0 193.233.178.0 193.233.179.0 193.233.180.0 193.233.181.0 193.233.182.0 193.233.183.0 193.233.184.0 193.233.185.0 193.233.186.0 193.233.187.0 193.233.188.0 193.233.189.0 193.233.190.0 193.233.191.255 194.87.136.0 194.87.132.0 194.87.133.0 194.87.134.0 194.87.135.255 194.87.128.0 194.87.108.0 194.87.129.0 194.58.67.0 194.87.137.0 194.87.114.0 194.87.130.0 194.87.131.0 194.87.171.0 194.87.178.0 194.87.200.0 194.87.169.0 194.87.168.0 194.87.170.0 194.87.204.0 194.87.208.0 194.87.209.0 194.87.212.0 194.87.246.0 194.87.3.0 194.87.251.0 194.87.250.0 194.87.226.0 194.87.227.0 194.87.24.0 194.87.25.0 194.87.26.0 194.87.27.255 194.87.228.0 194.87.229.0 194.87.230.0 194.87.231.255 194.87.219.0 194.87.22.0 194.87.84.0 194.87.86.0 194.87.72.0 194.87.75.0 194.87.90.0 194.87.87.0 194.87.42.0 194.87.74.0 194.87.85.0 194.87.73.0 195.133.31.0 195.133.28.0 195.133.32.0 195.133.84.0 195.133.80.0 195.133.75.0 195.133.39.0 195.133.38.0 195.133.76.0 195.133.35.0 195.178.121.0 195.133.86.0 195.58.35.0 195.58.52.0 195.133.85.0 195.58.50.0 195.58.53.0 212.192.11.0 195.178.120.0 195.58.54.0 195.58.54.255
>
>[2]
>4.169.172.5 griffith.tahoerealestateloans.com.
>194.169.172.6 jones.tahoerealestateloans.com.
>194.169.172.7 watkins.tahoerealestateloans.com.
>194.169.172.8 phillips.tahoerealestateloans.com.
>194.169.172.9 howard.tahoerealestateloans.com.
>194.169.172.10 atkinson.tahoerealestateloans.com.
>194.169.172.11 obrien.tahoerealestateloans.com.
>194.169.172.12 smith.tahoerealestateloans.com.
>194.169.172.13 fleming.tahoerealestateloans.com.
>194.169.172.14 grant.tahoerealestateloans.com.
>194.169.172.15 schultz.tahoerealestateloans.com.
>194.169.172.16 adams.tahoerealestateloans.com.
>194.169.172.17 fisher.tahoerealestateloans.com.
>194.169.172.18 avila.tahoerealestateloans.com.
>194.169.172.19 crawford.tahoerealestateloans.com.
>194.169.172.20 francis.tahoerealestateloans.com.
>194.169.172.21 hunt.tahoerealestateloans.com.
>194.169.172.22 ayers.tahoerealestateloans.com.
>194.169.172.23 barker.tahoerealestateloans.com.
>194.169.172.24 sullivan.tahoerealestateloans.com.
>194.169.172.25 campos.tahoerealestateloans.com.
>194.169.172.26 sanders.tahoerealestateloans.com.
>194.169.172.27 harris.tahoerealestateloans.com.
>194.169.172.28 delacruz.tahoerealestateloans.com.
>194.169.172.29 carlson.tahoerealestateloans.com.
>194.169.172.30 walker.tahoerealestateloans.com.
>194.169.172.31 ortega.tahoerealestateloans.com.
>194.169.172.32 pearson.tahoerealestateloans.com.
>194.169.172.33 noble.tahoerealestateloans.com.
>194.169.172.34 scott.tahoerealestateloans.com.
>194.169.172.35 barnes.tahoerealestateloans.com.
>194.169.172.36 ortiz.tahoerealestateloans.com.
>194.169.172.37 davis.tahoerealestateloans.com.
>194.169.172.38 lane.tahoerealestateloans.com.
>194.169.172.39 dominguez.tahoerealestateloans.com.
>194.169.172.40 gonzalez.tahoerealestateloans.com.
>194.169.172.41 zavala.tahoerealestateloans.com.
>194.169.172.42 rhodes.tahoerealestateloans.com.
>194.169.172.43 stewart.tahoerealestateloans.com.
>194.169.172.44 bailey.tahoerealestateloans.com.
>194.169.172.45 knight.tahoerealestateloans.com.
>194.169.172.46 wilson.tahoerealestateloans.com.
>
>
>
>193.233.176.13 juvis.e-hitart.co.uk.
>193.233.176.14 tastat.free-business-directory.co.uk.
>193.233.176.15 rgissa.free-business-directory.co.uk.
>193.233.176.16 haytap.free-business-directory.co.uk.
>193.233.176.17 ssvax.free-business-directory.co.uk.
>193.233.176.18 sryian.imakoocars.co.uk.
>193.233.176.19 overkj.imakoocars.co.uk.
>193.233.176.20 xjnu.imakoocars.co.uk.
>193.233.176.21 amuru.imakoocars.co.uk.
>193.233.176.22 teip.tfng.co.uk.
>193.233.176.23 qudian.tfng.co.uk.
>193.233.176.24 fogou.tfng.co.uk.
>193.233.176.25 inuge.tfng.co.uk.
>193.233.176.26 very.nike-free-run.org.uk.
>193.233.176.27 shim.nike-free-run.org.uk.
>193.233.176.28 phimht.nike-free-run.org.uk.
>193.233.176.29 sparev.nike-free-run.org.uk.
>193.233.176.30 ombyt.nike-free-run.org.uk.
>193.233.176.31 ekoka.nike-free-run.org.uk.
>193.233.176.32 sirpus.nike-free-run.org.uk.
>193.233.176.33 zanzig.nike-free-run.org.uk.
>193.233.176.34 redowl.nike-free-run.org.uk.
>193.233.176.35 noeuze.nike-free-run.org.uk.
>193.233.176.36 givrer.nike-free-run.org.uk.
>193.233.176.37 alyner.nike-free-run.org.uk.
>193.233.176.38 quyte.nike-free-run.org.uk.
>193.233.176.39 aisy.nike-free-run.org.uk.
>193.233.176.40 moske.nike-free-run.org.uk.
>193.233.176.41 rmf.nike-free-run.org.uk.
>193.233.176.42 arley.nike-free-run.org.uk.
>193.233.176.43 lyubil.nike-free-run.org.uk.
>193.233.176.44 csaic.nike-free-run.org.uk.
>193.233.176.45 libc.nike-free-run.org.uk.
>193.233.176.46 strutz.nike-free-run.org.uk.
>193.233.176.47 sunjpg.nike-free-run.org.uk.
>193.233.176.48 constn.nike-free-run.org.uk.
>193.233.176.49 cddian.nike-free-run.org.uk.
>193.233.176.50 bulin.nike-free-run.org.uk.
>193.233.176.51 knatt.nike-free-run.org.uk.
>193.233.176.52 nonrur.nike-free-run.org.uk.
>193.233.176.53 chazen.nike-free-run.org.uk.
>193.233.176.54 hrgbrg.nike-free-run.org.uk.
>193.233.176.55 bsww.nike-free-run.org.uk.
>193.233.176.56 addcit.nike-free-run.org.uk.
>
>94.87.87.30 price.refugesquick.org.uk.
>194.87.87.31 graham.refugesquick.org.uk.
>194.87.87.32 anderson.refugesquick.org.uk.
>194.87.87.33 henderson-freeman.refugesquick.org.uk.
>194.87.87.34 wade-davila.refugesquick.org.uk.
>194.87.87.35 pollard.refugesquick.org.uk.
>194.87.87.36 arellano.refugesquick.org.uk.
>194.87.87.37 reid.refugesquick.org.uk.
>194.87.87.38 brown.refugesquick.org.uk.
>194.87.87.39 malone-peterson.refugesquick.org.uk.
>194.87.87.40 conley.refugesquick.org.uk.
>194.87.87.41 rodriguez.refugesquick.org.uk.
>194.87.87.42 barton.refugesquick.org.uk.
>194.87.87.43 mack.refugesquick.org.uk.
>194.87.87.44 holland-taylor.refugesquick.org.uk.
>194.87.87.45 king.refugesquick.org.uk.
>194.87.87.46 valdez.refugesquick.org.uk.
>194.87.87.47 huffman.refugesquick.org.uk.
>194.87.87.48 wood.refugesquick.org.uk.
>194.87.87.49 smith.refugesquick.org.uk.
>194.87.87.50 henry.refugesquick.org.uk.
>194.87.87.51 phillips.refugesquick.org.uk.
>194.87.87.52 rogers.refugesquick.org.uk.
>194.87.87.53 rodriguez-montgomery.refugesquick.org.uk.
>194.87.87.54 oconnell.refugesquick.org.uk.
>194.87.87.55 martinez.refugesquick.org.uk.
>194.87.87.56 becker.refugesquick.org.uk.
>194.87.87.57 lewis-alvarado.refugesquick.org.uk.
>194.87.87.58 williams.refugesquick.org.uk.
>194.87.87.59 henson.refugesquick.org.uk.
>194.87.87.60 nelson.refugesquick.org.uk.
>194.87.87.61 turner.refugesquick.org.uk.
>194.87.87.62 bernard.refugesquick.org.uk.
>194.87.87.63 peters-pearson.refugesquick.org.uk.
>194.87.87.64 munoz.refugesquick.org.uk.
>194.87.87.65 gross.refugesquick.org.uk.
>194.87.87.66 booktactical.com.
>194.87.87.67 thomas.booktactical.com.
>194.87.87.68 rich.booktactical.com.
>194.87.87.69 davidson-mason.booktactical.com.
>194.87.87.70 sanchez.booktactical.com.
>194.87.87.71 williams-griffith.booktactical.com.
>
>194.87.42.20 cook-martinez.tweakedtoperfection.com.
>194.87.42.21 newton.tweakedtoperfection.com.
>194.87.42.22 hunt-oliver.tweakedtoperfection.com.
>194.87.42.23 davidson.tweakedtoperfection.com.
>194.87.42.24 brown.tweakedtoperfection.com.
>194.87.42.25 riley.tweakedtoperfection.com.
>194.87.42.26 jones.tweakedtoperfection.com.
>194.87.42.27 griffin.tweakedtoperfection.com.
>194.87.42.28 davis.tweakedtoperfection.com.
>194.87.42.29 miller-hinton.tweakedtoperfection.com.
>194.87.42.30 nelson.tweakedtoperfection.com.
>194.87.42.31 jacobs-gilbert.tweakedtoperfection.com.
>194.87.42.32 hardy-knight.tweakedtoperfection.com.
>194.87.42.33 craig.tweakedtoperfection.com.
>194.87.42.34 austin-smith.tweakedtoperfection.com.
>194.87.42.35 carson-jarvis.tweakedtoperfection.com.
>194.87.42.36 camacho.tweakedtoperfection.com.
>194.87.42.37 christensen-crawford.tweakedtoperfection.com.
>194.87.42.38 solomon.tweakedtoperfection.com.
>194.87.42.39 mcgee.tweakedtoperfection.com.
>194.87.42.40 black.tweakedtoperfection.com.
>194.87.42.41 bray.tweakedtoperfection.com.
>194.87.42.42 miles.tweakedtoperfection.com.
>194.87.42.43 howard.tweakedtoperfection.com.
>194.87.42.44 burns.tweakedtoperfection.com.
>194.87.42.45 brooks.tweakedtoperfection.com.
>194.87.42.46 alexander.tweakedtoperfection.com.
>194.87.42.47 torres-cooper.tweakedtoperfection.com.
>194.87.42.48 king.tweakedtoperfection.com.
>194.87.42.49 lopez.tweakedtoperfection.com.
>194.87.42.50 bautista-higgins.tweakedtoperfection.com.
>194.87.42.51 fowler.tweakedtoperfection.com.
>194.87.42.52 norman.tweakedtoperfection.com.
>194.87.42.53 shaw.tweakedtoperfection.com.
>194.87.42.54 ray-gardner.tweakedtoperfection.com.
>194.87.42.55 mckay.tweakedtoperfection.com.
>194.87.42.56 hill.tweakedtoperfection.com.
>194.87.42.57 franco.tweakedtoperfection.com.
>194.87.42.58 walker-hood.tweakedtoperfection.com.
>194.87.42.59 rivas-martinez.tweakedtoperfection.com.
>194.87.42.60 colon.tweakedtoperfection.com.
>194.87.42.61 thompson.tweakedtoperfection.com.
>194.87.42.62 armstrong-brown.tweakedtoperfection.com.
>194.87.42.63 clark.tweakedtoperfection.com.
>
>
>
>
>
>
>

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed by 500% - DEL C:\WINDOWS\*.*

Re: shit from serverion [ In reply to ]

vincent at vinc17

Jun 29, 2022, 7:15 AM

Post #4 of 13 (1155 views)

Permalink

On 2022-06-29 13:14:58 +0000, Marc wrote:
> Today I decided to spend some time getting all the ip's[1] (these
> are all /24 thus you have to add 164.215.103.1-164.215.103.255) of
> serverion, who is sending out constant stream of crap. I thought
> about posting it here so you do not need to do this work. If you do
> some random checks, you can see this looks weird[2]. Do as you
> please with this info.

FYI, I'm rejecting them at the postfix level. Here are all the blocks
from which I've received spam and blocked afterwards:

# Serverion / Des Capital B.V. (2021-08 / 2022-05)
2.56.56.0/22 REJECT Blacklisted (SERVER-2-56-56-0 / Serverion BV, NL)
2.58.148.0/22 REJECT Blacklisted (SERVER-2-58-148-0 / Serverion BV, NL)
31.210.20.0/24 REJECT Blacklisted (SERVER-31-210-20-0 / Serverion BV, NL)
31.210.22.0/24 REJECT Blacklisted (SERVER-31-210-22-0 / Serverion BV, NL)
37.0.8.0/21 REJECT Blacklisted (SERVER-37-0-8/12-0 / Serverion BV, NL)
45.85.90.0/24 REJECT Blacklisted (SERVER-45-85-90-0 / Serverion BV, NL)
45.133.1.0/24 REJECT Blacklisted (SERVER-45-133-1-0 / Serverion BV, NL)
45.134.23.0/24 REJECT Blacklisted (SERVER-45-134-23-0 / Serverion BV, NL)
45.144.225.0/24 REJECT Blacklisted (SERVER-45-144-225-0 / Serverion BV, NL)
45.144.226.0/24 REJECT Blacklisted (SERVER-45-144-226-0 / Serverion BV, NL)
62.197.136.0/24 REJECT Blacklisted (SERVER-62-197-136-0 / Serverion BV, NL)
85.202.168.0/24 REJECT Blacklisted (SERVER-85-202-168-0 / Serverion BV, NL)
107.182.131.0/24 REJECT Blacklisted (Serverion LLC, DE)
136.144.41.0/24 REJECT Blacklisted (SERVER-136-144-41-0 / Serverion BV, NL)
185.102.170.0/23 REJECT Blacklisted (SERVER-185-102-170-0 / Serverion BV, NL)
185.239.242.0/24 REJECT Blacklisted (SERVER-185-239-242-0 / Serverion BV, NL)
193.233.182.0/24 REJECT Blacklisted (Serverion / Des Capital B.V., NL)
194.31.98.0/24 REJECT Blacklisted (SERVER-194-31-98-0 / Serverion BV, NL)
194.99.45.0/24 REJECT Blacklisted (SERVER-194-99-44-0 / Serverion BV, NL)
195.133.18.0/24 REJECT Blacklisted (US-DELIS-20210528 / Des Capital B.V., NL)
195.133.38.0/24 REJECT Blacklisted (Serverion, NL)
195.133.39.0/24 REJECT Blacklisted (Serverion, NL)
212.192.216.0/22 REJECT Blacklisted (Serverion, NL)
212.192.244.0/22 REJECT Blacklisted (Serverion, NL)

I check the logs from time to time, and I haven't see any
false positive (in the sense that the few logged data give
a good indication of real spam).

I have the same kind of things for DATACLUB, DigitalOcean, EONIX,
LAYER-HOST, RootLayer and UCLOUD-NET (though spam from DATACLUB IPs
seems to have stopped, and also almost for EONIX).

--
Vincent Lef?vre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: shit from serverion [ In reply to ]

pedrod_marco at yahoo

Jun 29, 2022, 7:16 AM

Post #5 of 13 (1155 views)

Permalink

On our side it is a huge list as well... does Serverion send anything clean?
Pedro.

On Wednesday, June 29, 2022, 04:02:05 PM GMT+2, Matus UHLAR - fantomas <uhlar@fantomas.sk> wrote:

On 29.06.22 13:14, Marc wrote:
>Today I decided to spend some time getting all the ip's[1] (these are all
> /24 thus you have to add 164.215.103.1-164.215.103.255) of serverion, who
> is sending out constant stream of crap. I thought about posting it here
> so you do not need to do this work. If you do some random checks, you can
> see this looks weird[2]. Do as you please with this info.

FYI

I use local rbldnsd at SA and MTA level, one IP zone for ip-based
blocking at MTA level and SA and one zone for domain blocking ad MTA level
and URI search.

long time ago there was distributed RBL where multiple admins did block
unwelcome mail senders... afaik it's dead

>[1]
>164.215.103.1 164.215.103.1 164.215.96.254 171.22.17.0 109.205.211.0 141.98.6.0 109.206.240.0 164.215.101.0 109.206.242.0 109.206.241.0 109.206.243.0 185.246.222.0 185.218.138.0 185.126.34.0 185.225.73.0 185.216.68.0 185.225.74.0 185.246.220.0 185.216.71.0 171.22.30.0 185.225.75.0 185.72.9.0 185.252.178.0 185.252.179.0 193.124.207.0 193.124.91.0 185.254.37.0 193.124.203.0 185.246.223.0 193.124.205.0 192.124.172.0 193.37.40.0 193.47.61.0 194.135.23.0 194.180.48.0 194.48.250.0 194.58.60.0 193.124.95.0 194.55.186.0 194.169.172.0 193.233.176.0 193.233.177.0 193.233.178.0 193.233.179.0 193.233.180.0 193.233.181.0 193.233.182.0 193.233.183.0 193.233.184.0 193.233.185.0 193.233.186.0 193.233.187.0 193.233.188.0 193.233.189.0 193.233.190.0 193.233.191.255 194.87.136.0 194.87.132.0 194.87.133.0 194.87.134.0 194.87.135.255 194.87.128.0 194.87.108.0 194.87.129.0 194.58.67.0 194.87.137.0 194.87.114.0 194.87.130.0 194.87.131.0 194.87.171.0 194.87.178.0 194.87.200.0 194.87.169.0 194.87.168.0 194.87.170.0 194.87.204.0 194.87.208.0 194.87.209.0 194.87.212.0 194.87.246.0 194.87.3.0 194.87.251.0 194.87.250.0 194.87.226.0 194.87.227.0 194.87.24.0 194.87.25.0 194.87.26.0 194.87.27.255 194.87.228.0 194.87.229.0 194.87.230.0 194.87.231.255 194.87.219.0 194.87.22.0 194.87.84.0 194.87.86.0 194.87.72.0 194.87.75.0 194.87.90.0 194.87.87.0 194.87.42.0 194.87.74.0 194.87.85.0 194.87.73.0 195.133.31.0 195.133.28.0 195.133.32.0 195.133.84.0 195.133.80.0 195.133.75.0 195.133.39.0 195.133.38.0 195.133.76.0 195.133.35.0 195.178.121.0 195.133.86.0 195.58.35.0 195.58.52.0 195.133.85.0 195.58.50.0 195.58.53.0 212.192.11.0 195.178.120.0 195.58.54.0 195.58.54.255
>
>[2]
>4.169.172.5 griffith.tahoerealestateloans.com.
>194.169.172.6 jones.tahoerealestateloans.com.
>194.169.172.7 watkins.tahoerealestateloans.com.
>194.169.172.8 phillips.tahoerealestateloans.com.
>194.169.172.9 howard.tahoerealestateloans.com.
>194.169.172.10 atkinson.tahoerealestateloans.com.
>194.169.172.11 obrien.tahoerealestateloans.com.
>194.169.172.12 smith.tahoerealestateloans.com.
>194.169.172.13 fleming.tahoerealestateloans.com.
>194.169.172.14 grant.tahoerealestateloans.com.
>194.169.172.15 schultz.tahoerealestateloans.com.
>194.169.172.16 adams.tahoerealestateloans.com.
>194.169.172.17 fisher.tahoerealestateloans.com.
>194.169.172.18 avila.tahoerealestateloans.com.
>194.169.172.19 crawford.tahoerealestateloans.com.
>194.169.172.20 francis.tahoerealestateloans.com.
>194.169.172.21 hunt.tahoerealestateloans.com.
>194.169.172.22 ayers.tahoerealestateloans.com.
>194.169.172.23 barker.tahoerealestateloans.com.
>194.169.172.24 sullivan.tahoerealestateloans.com.
>194.169.172.25 campos.tahoerealestateloans.com.
>194.169.172.26 sanders.tahoerealestateloans.com.
>194.169.172.27 harris.tahoerealestateloans.com.
>194.169.172.28 delacruz.tahoerealestateloans.com.
>194.169.172.29 carlson.tahoerealestateloans.com.
>194.169.172.30 walker.tahoerealestateloans.com.
>194.169.172.31 ortega.tahoerealestateloans.com.
>194.169.172.32 pearson.tahoerealestateloans.com.
>194.169.172.33 noble.tahoerealestateloans.com.
>194.169.172.34 scott.tahoerealestateloans.com.
>194.169.172.35 barnes.tahoerealestateloans.com.
>194.169.172.36 ortiz.tahoerealestateloans.com.
>194.169.172.37 davis.tahoerealestateloans.com.
>194.169.172.38 lane.tahoerealestateloans.com.
>194.169.172.39 dominguez.tahoerealestateloans.com.
>194.169.172.40 gonzalez.tahoerealestateloans.com.
>194.169.172.41 zavala.tahoerealestateloans.com.
>194.169.172.42 rhodes.tahoerealestateloans.com.
>194.169.172.43 stewart.tahoerealestateloans.com.
>194.169.172.44 bailey.tahoerealestateloans.com.
>194.169.172.45 knight.tahoerealestateloans.com.
>194.169.172.46 wilson.tahoerealestateloans.com.
>
>
>
>193.233.176.13 juvis.e-hitart.co.uk.
>193.233.176.14 tastat.free-business-directory.co.uk.
>193.233.176.15 rgissa.free-business-directory.co.uk.
>193.233.176.16 haytap.free-business-directory.co.uk.
>193.233.176.17 ssvax.free-business-directory.co.uk.
>193.233.176.18 sryian.imakoocars.co.uk.
>193.233.176.19 overkj.imakoocars.co.uk.
>193.233.176.20 xjnu.imakoocars.co.uk.
>193.233.176.21 amuru.imakoocars.co.uk.
>193.233.176.22 teip.tfng.co.uk.
>193.233.176.23 qudian.tfng.co.uk.
>193.233.176.24 fogou.tfng.co.uk.
>193.233.176.25 inuge.tfng.co.uk.
>193.233.176.26 very.nike-free-run.org.uk.
>193.233.176.27 shim.nike-free-run.org.uk.
>193.233.176.28 phimht.nike-free-run.org.uk.
>193.233.176.29 sparev.nike-free-run.org.uk.
>193.233.176.30 ombyt.nike-free-run.org.uk.
>193.233.176.31 ekoka.nike-free-run.org.uk.
>193.233.176.32 sirpus.nike-free-run.org.uk.
>193.233.176.33 zanzig.nike-free-run.org.uk.
>193.233.176.34 redowl.nike-free-run.org.uk.
>193.233.176.35 noeuze.nike-free-run.org.uk.
>193.233.176.36 givrer.nike-free-run.org.uk.
>193.233.176.37 alyner.nike-free-run.org.uk.
>193.233.176.38 quyte.nike-free-run.org.uk.
>193.233.176.39 aisy.nike-free-run.org.uk.
>193.233.176.40 moske.nike-free-run.org.uk.
>193.233.176.41 rmf.nike-free-run.org.uk.
>193.233.176.42 arley.nike-free-run.org.uk.
>193.233.176.43 lyubil.nike-free-run.org.uk.
>193.233.176.44 csaic.nike-free-run.org.uk.
>193.233.176.45 libc.nike-free-run.org.uk.
>193.233.176.46 strutz.nike-free-run.org.uk.
>193.233.176.47 sunjpg.nike-free-run.org.uk.
>193.233.176.48 constn.nike-free-run.org.uk.
>193.233.176.49 cddian.nike-free-run.org.uk.
>193.233.176.50 bulin.nike-free-run.org.uk.
>193.233.176.51 knatt.nike-free-run.org.uk.
>193.233.176.52 nonrur.nike-free-run.org.uk.
>193.233.176.53 chazen.nike-free-run.org.uk.
>193.233.176.54 hrgbrg.nike-free-run.org.uk.
>193.233.176.55 bsww.nike-free-run.org.uk.
>193.233.176.56 addcit.nike-free-run.org.uk.
>
>94.87.87.30 price.refugesquick.org.uk.
>194.87.87.31 graham.refugesquick.org.uk.
>194.87.87.32 anderson.refugesquick.org.uk.
>194.87.87.33 henderson-freeman.refugesquick.org.uk.
>194.87.87.34 wade-davila.refugesquick.org.uk.
>194.87.87.35 pollard.refugesquick.org.uk.
>194.87.87.36 arellano.refugesquick.org.uk.
>194.87.87.37 reid.refugesquick.org.uk.
>194.87.87.38 brown.refugesquick.org.uk.
>194.87.87.39 malone-peterson.refugesquick.org.uk.
>194.87.87.40 conley.refugesquick.org.uk.
>194.87.87.41 rodriguez.refugesquick.org.uk.
>194.87.87.42 barton.refugesquick.org.uk.
>194.87.87.43 mack.refugesquick.org.uk.
>194.87.87.44 holland-taylor.refugesquick.org.uk.
>194.87.87.45 king.refugesquick.org.uk.
>194.87.87.46 valdez.refugesquick.org.uk.
>194.87.87.47 huffman.refugesquick.org.uk.
>194.87.87.48 wood.refugesquick.org.uk.
>194.87.87.49 smith.refugesquick.org.uk.
>194.87.87.50 henry.refugesquick.org.uk.
>194.87.87.51 phillips.refugesquick.org.uk.
>194.87.87.52 rogers.refugesquick.org.uk.
>194.87.87.53 rodriguez-montgomery.refugesquick.org.uk.
>194.87.87.54 oconnell.refugesquick.org.uk.
>194.87.87.55 martinez.refugesquick.org.uk.
>194.87.87.56 becker.refugesquick.org.uk.
>194.87.87.57 lewis-alvarado.refugesquick.org.uk.
>194.87.87.58 williams.refugesquick.org.uk.
>194.87.87.59 henson.refugesquick.org.uk.
>194.87.87.60 nelson.refugesquick.org.uk.
>194.87.87.61 turner.refugesquick.org.uk.
>194.87.87.62 bernard.refugesquick.org.uk.
>194.87.87.63 peters-pearson.refugesquick.org.uk.
>194.87.87.64 munoz.refugesquick.org.uk.
>194.87.87.65 gross.refugesquick.org.uk.
>194.87.87.66 booktactical.com.
>194.87.87.67 thomas.booktactical.com.
>194.87.87.68 rich.booktactical.com.
>194.87.87.69 davidson-mason.booktactical.com.
>194.87.87.70 sanchez.booktactical.com.
>194.87.87.71 williams-griffith.booktactical.com.
>
>194.87.42.20 cook-martinez.tweakedtoperfection.com.
>194.87.42.21 newton.tweakedtoperfection.com.
>194.87.42.22 hunt-oliver.tweakedtoperfection.com.
>194.87.42.23 davidson.tweakedtoperfection.com.
>194.87.42.24 brown.tweakedtoperfection.com.
>194.87.42.25 riley.tweakedtoperfection.com.
>194.87.42.26 jones.tweakedtoperfection.com.
>194.87.42.27 griffin.tweakedtoperfection.com.
>194.87.42.28 davis.tweakedtoperfection.com.
>194.87.42.29 miller-hinton.tweakedtoperfection.com.
>194.87.42.30 nelson.tweakedtoperfection.com.
>194.87.42.31 jacobs-gilbert.tweakedtoperfection.com.
>194.87.42.32 hardy-knight.tweakedtoperfection.com.
>194.87.42.33 craig.tweakedtoperfection.com.
>194.87.42.34 austin-smith.tweakedtoperfection.com.
>194.87.42.35 carson-jarvis.tweakedtoperfection.com.
>194.87.42.36 camacho.tweakedtoperfection.com.
>194.87.42.37 christensen-crawford.tweakedtoperfection.com.
>194.87.42.38 solomon.tweakedtoperfection.com.
>194.87.42.39 mcgee.tweakedtoperfection.com.
>194.87.42.40 black.tweakedtoperfection.com.
>194.87.42.41 bray.tweakedtoperfection.com.
>194.87.42.42 miles.tweakedtoperfection.com.
>194.87.42.43 howard.tweakedtoperfection.com.
>194.87.42.44 burns.tweakedtoperfection.com.
>194.87.42.45 brooks.tweakedtoperfection.com.
>194.87.42.46 alexander.tweakedtoperfection.com.
>194.87.42.47 torres-cooper.tweakedtoperfection.com.
>194.87.42.48 king.tweakedtoperfection.com.
>194.87.42.49 lopez.tweakedtoperfection.com.
>194.87.42.50 bautista-higgins.tweakedtoperfection.com.
>194.87.42.51 fowler.tweakedtoperfection.com.
>194.87.42.52 norman.tweakedtoperfection.com.
>194.87.42.53 shaw.tweakedtoperfection.com.
>194.87.42.54 ray-gardner.tweakedtoperfection.com.
>194.87.42.55 mckay.tweakedtoperfection.com.
>194.87.42.56 hill.tweakedtoperfection.com.
>194.87.42.57 franco.tweakedtoperfection.com.
>194.87.42.58 walker-hood.tweakedtoperfection.com.
>194.87.42.59 rivas-martinez.tweakedtoperfection.com.
>194.87.42.60 colon.tweakedtoperfection.com.
>194.87.42.61 thompson.tweakedtoperfection.com.
>194.87.42.62 armstrong-brown.tweakedtoperfection.com.
>194.87.42.63 clark.tweakedtoperfection.com.
>
>
>
>
>
>
>

--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Boost your system's speed by 500% - DEL C:\WINDOWS\*.*

Re: shit from serverion [ In reply to ]

jhardin at impsec

Jun 29, 2022, 8:04 AM

Post #6 of 13 (1155 views)

Permalink

On Wed, 29 Jun 2022, Vincent Lefevre wrote:

> On 2022-06-29 13:14:58 +0000, Marc wrote:
>> Today I decided to spend some time getting all the ip's[1] (these
>> are all /24 thus you have to add 164.215.103.1-164.215.103.255) of
>> serverion, who is sending out constant stream of crap. I thought
>> about posting it here so you do not need to do this work. If you do
>> some random checks, you can see this looks weird[2]. Do as you
>> please with this info.
>
> FYI, I'm rejecting them at the postfix level.

*cough* TCP Tarpit *cough*

--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin@impsec.org pgpk -a jhardin@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Individual liberties are always "loopholes" to absolute authority.
-----------------------------------------------------------------------
5 days until the 246th anniversary of the Declaration of Independence

Re: shit from serverion [ In reply to ]

benoit.panizzon at imp

Jun 30, 2022, 12:06 AM

Post #7 of 13 (1155 views)

Permalink

Hi

Just to share my experience with them...

It looks like there is a quite confusing way to which company IP ranges
are allocated. Last year I had a case involving an ip from this range:

% Abuse contact for '31.210.20.0 - 31.210.21.255' is 'abuse@serverion.com'

inetnum: 31.210.20.0 - 31.210.21.255
netname: SERVER-31-210-20-0
country: NL
org: ORG-SB652-RIPE
admin-c: SBAH16-RIPE
tech-c: SBAH16-RIPE
status: ASSIGNED PA
mnt-by: PREFIXBROKER-MNT

All my attempts to reach out to abuse@serverion.com or any other
contacts found on their website remained unreplied.

Finally I contacted: PREFIXBROKER-MNT

And those turned out to be the ones being responsible for that range
and answering to the issue. So don't trust the abuse contact published
@ RIPE.

Mit freundlichen Grüssen

-Benoît Panizzon-
--
I m p r o W a r e A G - Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29 Tel +41 61 826 93 00
CH-4133 Pratteln Fax +41 61 826 93 01
Schweiz Web http://www.imp.ch
______________________________________________________

Re: shit from serverion [ In reply to ]

me at junc

Jun 30, 2022, 5:01 AM

Post #8 of 13 (1153 views)

Permalink

On 2022-06-29 15:14, Marc wrote:
> Today I decided to spend some time getting all the ip's[1] (these are
> all /24 thus you have to add 164.215.103.1-164.215.103.255) of
> serverion, who is sending out constant stream of crap. I thought about
> posting it here so you do not need to do this work. If you do some
> random checks, you can see this looks weird[2]. Do as you please with
> this info.

my pregreet list in postfix

101.36.96.0/19 as135377 #UCloud Information Technology HK Limited
103.125.188.0/22 as135905 #Vietnam Posts and Telecommunications Group
106.75.0.0/17 as4808 #China Unicom
106.75.128.0/20 as58466 #ChinaNet Guangdong Province Network
106.75.148.0/23 as58466 #ChinaNet Guangdong Province Network
106.75.160.0/19 as58466 #ChinaNet Guangdong Province Network
106.75.208.0/20 as17621 #China Unicom Shanghai Network
106.75.224.0/19 as4812 #China Telecom Group
113.31.96.0/19 as17621 #China Unicom Shanghai Network
117.50.0.0/16 as4808 #China Unicom
118.193.32.0/20 as135377 #UCloud Information Technology HK Limited
119.194.0.0/16 as4766 #Korea Telecom
124.88.0.0/13 as4837 #China Unicom
136.144.41.0/24 as211252 #Delis LLC
143.110.128.0/17 as14061 #DigitalOcean LLC
143.198.0.0/16 as14061 #DigitalOcean LLC
147.78.47.0/24 as209588 #FlyServers S.A.
152.32.128.0/18 as135377 #UCloud Information Technology HK Limited
152.32.234.0/23 as135377 #UCloud Information Technology HK Limited
154.89.5.0/24 as141167 #AgotoZ HK Limited
159.89.0.0/16 as14061 #DigitalOcean LLC
165.154.0.0/17 as135377 #UCloud Information Technology HK Limited
165.227.0.0/16 as14061 #DigitalOcean LLC
167.172.0.0/16 as14061 #DigitalOcean LLC
168.121.44.0/22 as27843 #Optical Technologies S.A.C.
172.104.128.0/18 as63949 #Linode LLC
172.105.0.0/16 as63949 #Linode LLC
175.198.128.0/17 as4766 #Korea Telecom
178.32.0.0/15 as16276 #OVH SAS
178.73.208.0/21 as42708 #GleSYS AB
18.204.0.0/14 as14618 #Amazon.com Inc.
183.136.224.0/21 as58461 #No.288 Fu-chun Road
185.142.236.0/24 as174 #Cogent Communications
185.156.72.0/24 as61432 #TOV Vaiz Partner
185.239.242.0/23 as399471 #Serverion LLC
190.195.0.0/16 as7303 #Latin American and Caribbean IP address Regional
Registry
192.241.128.0/17 as14061 #DigitalOcean LLC
193.142.146.0/23 as208046 #MAXIMILIAN KUTZNER TRADING AS HOSTSLICK
193.169.255.0/24 as213010 #GigaHostingServices OU
193.233.176.0/20 as400377 #Serverion LLC
193.46.254.0/23 as47890 #Unmanaged Ltd
193.56.29.0/24 as210228 #Web Hosted Group Ltd
194.165.16.0/23 as48721 #FlyServers S.A.
194.31.98.0/24 as213035 #Des Capital B.V.
195.133.18.0/24 as211252 #Delis LLC
198.199.64.0/18 as14061 #DigitalOcean LLC
2.56.56.0/22 as399471 #Serverion LLC
2.57.122.0/24 as48090 #Pptechnology Limited
202.102.128.0/18 as4659 #CHINA169-CN CNCGROUP Old Jitong IP Network
206.72.192.0/20 as19318 #InterServer Inc
208.100.0.0/19 as32748 #SteadFast
212.192.241.0/24 as211252 #Delis LLC
212.192.244.0/22 as399471 #Serverion LLC
212.193.30.0/24 as211252 #Delis LLC
212.70.149.0/24 as204428 #SS-NET
221.152.0.0/14 as4766 #Korea Telecom
223.70.0.0/15 as56048 #China Mobile Communicaitons Corporation
23.184.48.0/24 as206607 #Nexus Bytes LLC
31.210.20.0/23 as211252 #Delis LLC
35.168.0.0/13 as14618 #Amazon.com Inc.
37.0.10.0/23 as211252 #Delis LLC
37.0.15.0/24 as399471 #Serverion LLC
37.0.8.0/24 as211252 #Delis LLC
37.49.225.0/24 as212370 #Peenq.nl
44.192.0.0/11 as14618 #Amazon.com Inc.
45.134.23.0/24 as399471 #Serverion LLC
45.137.20.0/22 as51447 #RootLayer Web Services Ltd.
45.148.10.0/24 as48090 #Pptechnology Limited
45.227.254.0/24 as267784 #FlyServers S.A.
5.188.206.0/24 as200391 #Krez 999 EOOD
5.34.204.0/24 as15828 #BLUE DIAMOND NETWORK CO. LTD.
5.34.205.0/24 as58142 #Samaneh Sama Pishro Persian Communications and
Information Development Company PJS
5.34.207.0/24 as15828 #BLUE DIAMOND NETWORK CO. LTD.
50.31.20.0/22 as32748 #SteadFast
52.54.0.0/15 as14618 #Amazon.com Inc.
54.160.0.0/13 as14618 #Amazon.com Inc.
54.172.0.0/14 as14618 #Amazon.com Inc.
54.221.0.0/16 as14618 #Amazon.com Inc.
62.197.136.0/24 as211252 #Delis LLC
62.233.50.0/24 as57523 #Chang Way Technologies Co. Limited
64.227.0.0/17 as14061 #DigitalOcean LLC
66.240.192.0/18 as10439 #CARInet Inc.
71.6.128.0/17 as10439 #CARInet Inc.
75.160.0.0/12 as209 #CenturyLink Communications LLC
77.247.110.0/24 as212370 #Peenq.nl
80.66.76.0/24 as208091 #Xhost Internet Solutions LP
80.66.88.0/24 as208091 #Xhost Internet Solutions LP
80.82.76.0/22 as202425 #IP Volume Inc
85.202.168.0/23 as211252 #Delis LLC
85.214.128.0/17 as6724 #Strato AG
87.246.7.0/24 as204428 #SS-NET
89.248.160.0/20 as202425 #IP Volume Inc
92.255.85.0/24 as57523 #Chang Way Technologies Co. Limited
93.174.88.0/21 as202425 #IP Volume Inc
94.102.48.0/20 as202425 #IP Volume Inc

its just a simple bash script takes 2 sec to rescan, i use ip2location
database from local sqlite3 db

above is one of my spamtrap servers, without any mx, a, aaaa, happy
hollyday :=)

Re: shit from serverion [ In reply to ]

pedrod_marco at yahoo

Jun 30, 2022, 6:34 AM

Post #9 of 13 (1153 views)

Permalink

>On Thursday, June 30, 2022, 09:12:59 AM GMT+2, Benoit Panizzon <benoit.panizzon@imp.ch> wrote: >>All my attempts to reach out to abuse@serverion.com or any other
>contacts found on their website remained unreplied.

When a company does that.... they deserve to be sent to /dev/null

------Pedro.

RE: shit from serverion [ In reply to ]

Marc at f1-outsourcing

Jul 11, 2022, 3:26 AM

Post #10 of 13 (1121 views)

Permalink

Thanks, some of them I did not have yet!

>
> # Serverion / Des Capital B.V. (2021-08 / 2022-05)
> 2.56.56.0/22 REJECT Blacklisted (SERVER-2-56-56-0 / Serverion BV, NL)
> 2.58.148.0/22 REJECT Blacklisted (SERVER-2-58-148-0 / Serverion BV, NL)
> 31.210.20.0/24 REJECT Blacklisted (SERVER-31-210-20-0 / Serverion BV,
> NL)
> 31.210.22.0/24 REJECT Blacklisted (SERVER-31-210-22-0 / Serverion BV,
> NL)
> 37.0.8.0/21 REJECT Blacklisted (SERVER-37-0-8/12-0 / Serverion BV, NL)
> 45.85.90.0/24 REJECT Blacklisted (SERVER-45-85-90-0 / Serverion BV, NL)
> 45.133.1.0/24 REJECT Blacklisted (SERVER-45-133-1-0 / Serverion BV, NL)
> 45.134.23.0/24 REJECT Blacklisted (SERVER-45-134-23-0 / Serverion BV,
> NL)
> 45.144.225.0/24 REJECT Blacklisted (SERVER-45-144-225-0 / Serverion BV,
> NL)
> 45.144.226.0/24 REJECT Blacklisted (SERVER-45-144-226-0 / Serverion BV,
> NL)
> 62.197.136.0/24 REJECT Blacklisted (SERVER-62-197-136-0 / Serverion BV,
> NL)
> 85.202.168.0/24 REJECT Blacklisted (SERVER-85-202-168-0 / Serverion BV,
> NL)
> 107.182.131.0/24 REJECT Blacklisted (Serverion LLC, DE)
> 136.144.41.0/24 REJECT Blacklisted (SERVER-136-144-41-0 / Serverion BV,
> NL)
> 185.102.170.0/23 REJECT Blacklisted (SERVER-185-102-170-0 / Serverion
> BV, NL)
> 185.239.242.0/24 REJECT Blacklisted (SERVER-185-239-242-0 / Serverion
> BV, NL)
> 193.233.182.0/24 REJECT Blacklisted (Serverion / Des Capital B.V., NL)
> 194.31.98.0/24 REJECT Blacklisted (SERVER-194-31-98-0 / Serverion BV,
> NL)
> 194.99.45.0/24 REJECT Blacklisted (SERVER-194-99-44-0 / Serverion BV,
> NL)
> 195.133.18.0/24 REJECT Blacklisted (US-DELIS-20210528 / Des Capital
> B.V., NL)
> 195.133.38.0/24 REJECT Blacklisted (Serverion, NL)
> 195.133.39.0/24 REJECT Blacklisted (Serverion, NL)
> 212.192.216.0/22 REJECT Blacklisted (Serverion, NL)
> 212.192.244.0/22 REJECT Blacklisted (Serverion, NL)
>

RE: shit from serverion [ In reply to ]

Marc at f1-outsourcing

Jul 11, 2022, 3:27 AM

Post #11 of 13 (1121 views)

Permalink

Merci beaucoup!

>
> It looks like there is a quite confusing way to which company IP ranges
> are allocated. Last year I had a case involving an ip from this range:
>
> % Abuse contact for '31.210.20.0 - 31.210.21.255' is
> 'abuse@serverion.com'
>
> inetnum: 31.210.20.0 - 31.210.21.255
> netname: SERVER-31-210-20-0
> country: NL
> org: ORG-SB652-RIPE
> admin-c: SBAH16-RIPE
> tech-c: SBAH16-RIPE
> status: ASSIGNED PA
> mnt-by: PREFIXBROKER-MNT
>
> All my attempts to reach out to abuse@serverion.com or any other
> contacts found on their website remained unreplied.
>
> Finally I contacted: PREFIXBROKER-MNT
>

Re: shit from serverion [ In reply to ]

vincent at vinc17

Jul 11, 2022, 6:14 AM

Post #12 of 13 (1121 views)

Permalink

On 2022-06-30 13:34:56 +0000, Pedro David Marco wrote:
> >On Thursday, June 30, 2022, 09:12:59 AM GMT+2, Benoit Panizzon <benoit.panizzon@imp.ch> wrote: >>All my attempts to reach out to abuse@serverion.com or any other
> >contacts found on their website remained unreplied.
>
> When a company does that....? they deserve to be sent to /dev/null

It is probably useless to contact them: Having many IP addresses
blacklisted by major RBLs for months means that they do not care.
This is the case for serverion: my logs show many rejects due to
zen.spamhaus.org and b.barracudacentral.org. This includes snowshoe
spam (sent by consecutive IP addresses during the same day).

--
Vincent Lef?vre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Re: shit from serverion [ In reply to ]

me at junc

Jul 16, 2022, 3:40 PM

Post #13 of 13 (1117 views)

Permalink

Marc skrev den 2022-06-29 15:14:
> Today I decided to spend some time getting all the ip's[1] (these are
> all /24 thus you have to add 164.215.103.1-164.215.103.255) of
> serverion, who is sending out constant stream of crap. I thought about
> posting it here so you do not need to do this work. If you do some
> random checks, you can see this looks weird[2]. Do as you please with
> this info.
>
> [1]

all ips is not /24 :)

109.205.211.0/24 as15723 #Azeronline Ltd Joint Enterprise
109.206.240.0/24 as136923 #WitLayer Technologies Inc
109.206.241.0/24 as8739 #ICDSoft Ltd.
109.206.242.0/23 as8739 #ICDSoft Ltd.
141.98.6.0/24 as400377 #Serverion LLC
164.215.101.0/24 as210654 #Des Capital B.V.
164.215.103.0/24 as210654 #Des Capital B.V.
164.215.96.0/24 as15723 #Azeronline Ltd Joint Enterprise
171.22.17.0/24 as211252 #Delis LLC
171.22.30.0/24 as400377 #Serverion LLC
185.126.34.0/24 as213035 #Des Capital B.V.
185.216.68.0/23 as209371 #Enes Koken
185.216.71.0/24 as400377 #Serverion LLC
185.218.138.0/24 as400377 #Serverion LLC
185.225.73.0/24 as400377 #Serverion LLC
185.225.74.0/23 as8739 #ICDSoft Ltd.
185.246.220.0/24 as17447 #NET4-IN Net4India Ltd
185.246.222.0/23 as8739 #ICDSoft Ltd.
185.252.178.0/23 as211252 #Delis LLC
185.254.37.0/24 as211252 #Delis LLC
185.72.9.0/24 as213035 #Des Capital B.V.
192.124.172.0/23 as21082 #Reliable Communications s.r.o.
193.124.203.0/24 as399471 #Serverion LLC
193.124.205.0/24 as400377 #Serverion LLC
193.124.207.0/24 as211252 #Delis LLC
193.124.91.0/24 as400377 #Serverion LLC
193.124.95.0/24 as21082 #Reliable Communications s.r.o.
193.233.176.0/20 as400377 #Serverion LLC
193.37.40.0/23 as8739 #ICDSoft Ltd.
193.47.61.0/24 as211252 #Delis LLC
194.135.23.0/24 as400377 #Serverion LLC
194.169.172.0/23 as8739 #ICDSoft Ltd.
194.180.48.0/23 as8739 #ICDSoft Ltd.
194.48.248.0/22 as8739 #ICDSoft Ltd.
194.55.184.0/22 as8739 #ICDSoft Ltd.
194.58.60.0/24 as21082 #Reliable Communications s.r.o.
194.58.67.0/24 as21082 #Reliable Communications s.r.o.
194.87.108.0/24 as211252 #Delis LLC
194.87.114.0/23 as21082 #Reliable Communications s.r.o.
194.87.128.0/23 as211252 #Delis LLC
194.87.130.0/24 as211252 #Delis LLC
194.87.131.0/24 as210654 #Des Capital B.V.
194.87.132.0/22 as210654 #Des Capital B.V.
194.87.136.0/23 as211252 #Delis LLC
194.87.168.0/22 as211252 #Delis LLC
194.87.178.0/24 as211252 #Delis LLC
194.87.200.0/24 as400377 #Serverion LLC
194.87.204.0/24 as211252 #Delis LLC
194.87.208.0/23 as211252 #Delis LLC
194.87.212.0/24 as211252 #Delis LLC
194.87.219.0/24 as211252 #Delis LLC
194.87.22.0/24 as400377 #Serverion LLC
194.87.226.0/24 as21082 #Reliable Communications s.r.o.
194.87.227.0/24 as210654 #Des Capital B.V.
194.87.228.0/22 as211252 #Delis LLC
194.87.24.0/22 as21082 #Reliable Communications s.r.o.
194.87.246.0/24 as211252 #Delis LLC
194.87.250.0/23 as211252 #Delis LLC
194.87.3.0/24 as211252 #Delis LLC
194.87.42.0/24 as210654 #Des Capital B.V.
194.87.72.0/24 as21082 #Reliable Communications s.r.o.
194.87.73.0/24 as211252 #Delis LLC
194.87.74.0/23 as211252 #Delis LLC
194.87.84.0/22 as211252 #Delis LLC
194.87.90.0/24 as400377 #Serverion LLC
195.133.28.0/24 as400377 #Serverion LLC
195.133.31.0/24 as399471 #Serverion LLC
195.133.32.0/24 as400377 #Serverion LLC
195.133.35.0/24 as211252 #Delis LLC
195.133.38.0/24 as211252 #Delis LLC
195.133.39.0/24 as399471 #Serverion LLC
195.133.74.0/23 as21082 #Reliable Communications s.r.o.
195.133.76.0/24 as399471 #Serverion LLC
195.133.80.0/24 as211252 #Delis LLC
195.133.84.0/23 as211252 #Delis LLC
195.133.86.0/24 as211252 #Delis LLC
195.58.35.0/24 as400377 #Serverion LLC
195.58.50.0/24 as400377 #Serverion LLC
195.58.52.0/24 as21082 #Reliable Communications s.r.o.
195.58.53.0/24 as211252 #Delis LLC
195.58.54.0/24 as21082 #Reliable Communications s.r.o.
212.192.11.0/24 as399471 #Serverion LLC

this is not assigned in asn

195.178.120.0/23 as- #-

and lastly i see them in my own spamtrap with a server without any
mx,a,aaaa ips