Sorry if 99% of you already know this, but give me a minute. Sometime ago someone here mentioned Senderbase. If you haven't used www.senderbase.org to help lookup IP's, domains, network owners, etc, it is worth trying out. (I'm sure there are other good lookup sites.) It has been helpful verifying bad boys and getting CIDR's. However today I "discovered" a neat feature.
After clicking on the network owner, it most often shows a list of "closely associated domains" and "addresses used to send mail" (network ex: http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY) Clicking one of the domains will generally also produce an address list specific to the domain. (domain ex.: http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com). Along with the address list is an export function which will produce a text file usable for a Declude ipfile, especially if you want to target specific IP's. (See below. I used Plain Text-Windows & include hostnames.) Well, if you knew this, you were ahead of the game; if not, Merry Christmas. John C Sample IP text listing # Results from IronPort's SenderBase -- Addresses recently used, domain 'savesign.com' # Exported: December 14, 2005 8.10.58.77 # ss77.savesign.com 8.10.58.84 # ss84.savesign.com 8.10.58.73 # ss73.savesign.com 8.10.58.70 # ss70.savesign.com 8.10.58.74 # ss74.savesign.com 8.10.58.75 # ss75.savesign.com 8.10.58.80 # ss80.savesign.com 8.10.58.72 # ss72.savesign.com 8.10.58.87 # ss87.savesign.com --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
