[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bleeding-sigs
Subject:    Re: [Bleeding-sigs] Re: RBN CIDRs - RussianBusinessNetworkIPs.txt
From:       Matt Jonkman <jonkman () jonkmans ! com>
Date:       2007-10-29 1:02:47
Message-ID: 47253137.4040108 () jonkmans ! com
[Download RAW message or body]

That helps Darren, thanks. I'll update the list feeding the compromised
ruleset with these, Should be cleaner.

Thanks

Matt


Darren Spruell wrote:
> On 10/25/07, Darren Spruell <phatbuckett@gmail.com> wrote:
>   
>> I think the Bleeding project maintained by James McQuaid is interesting.
>>
>> The current RussianBusinessNetworkIPs.txt looks to have the full
>> collection of CIDR blocks contained in the RBN ROKSO blacklist from
>> Spamhaus as well as 26 other CIDRs that are affiliated. I notice in
>> those some /32 addresses and similar that appear to be part of larger
>> CIDRs defined already causing a bit of redundancy.
>>     
>
> On this note, I trimmed the list down and made some minor edits,
> hoping they're inline with the intent of the list. I took out smaller
> subnets and individual addresses where a larger supernet was listed
> that contained those address blocks, and I added an explicit /32 to
> some of the individual IPs that were listed just to keep it
> consistent.
>
> Better, worse?
>
> DS
>
> 58.65.233.0/24
> 58.65.239.66/31
> 62.140.208.131/32
> 62.140.208.197/32
> 62.154.15.154/32
> 65.99.192.0/20
> 65.254.48.0/20
> 66.232.96.0/19
> 66.252.0.0/19
> 67.18.0.0/15
> 67.137.217.219/32
> 69.50.160.0/19
> 72.10.164.69/32
> 72.20.0.0/19
> 80.70.239.253/32
> 81.94.16.0/20
> 81.95.128.0/19
> 84.45.24.53/32
> 84.45.47.130/32
> 84.45.90.141/32
> 85.133.4.138/32
> 85.249.23.0/24
> 88.201.208.0/20
> 89.149.186.77/32
> 89.149.186.81/32
> 89.149.186.89/32
> 193.93.232.6/32
> 193.93.235.5/32
> 194.146.204.0/22
> 194.226.64.0/20
> 194.226.96.0/24
> 195.114.16.0/23
> 195.64.140.0/23
> 195.64.162.0/23
> 195.66.226.151/32
> 208.72.160.0/20
> 213.200.78.66/32
> 213.200.79.194/32
> 213.200.80.46/32
> 217.118.119.26/32
> _______________________________________________
> Bleeding-sigs mailing list
> Bleeding-sigs@bleedingthreats.net
> http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs
>   


-- 
--------------------------------------------
Matthew Jonkman
Bleeding Edge Threats
US Phone 765-429-0398
US Fax 312-264-0205
AUS Phone 61-42-4157-491
AUS Fax 61-29-4750-026
http://www.bleedingthreats.net
--------------------------------------------

PGP: http://www.bleedingthreats.com/mattjonkman.asc



_______________________________________________
Bleeding-sigs mailing list
Bleeding-sigs@bleedingthreats.net
http://lists.bleedingthreats.net/cgi-bin/mailman/listinfo/bleeding-sigs
[prev in list] [next in list] [prev in thread] [next in thread]