Spamcop-Top200 Weekly 2021-11-05 : US(34:4_535_000); AS36352/US(11:4_182_215); 23.94.50.131(1:1_049_651) US AS36352

[A. Filip]

Spamcop.net Top200 source: https://www.spamcop.net/hoshame.shtml
IPv4 reports for the week ending 2021-11-05T10:51:08+00:00
IPv6 reports for the week ending 2021-11-05T10:51:09+00:00
IP address to country and ASN mapping by whois.cymru.com
Stats generated for 200 IPv4 addresses and 0 IPv6 adresses
Cutoff at Spamcop.net 200:IPv4 : 7720 reports
Spamcop.net 1:IPv6 : 7377 reports

#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
1. 1:IPv4 1_049_651 2.3 days US AS36352 23.94.50.131
2. 2:IPv4 1_028_928 11 hours US AS36352 198.46.188.198
3. 3:IPv4 469_429 46 hours US AS36352 107.172.201.130
4. 4:IPv4 426_537 4 hours DE AS24940 188.40.132.126
5. 5:IPv4 384_213 2.4 days CZ AS48347/RU 194.87.103.44
6. 6:IPv4 383_878 21 hours US AS36352 198.46.189.156
7. 7:IPv4 378_342 3.5 days RU AS31133 178.176.175.57
8. 8:IPv4 354_995 2.4 days US AS36352 172.245.186.129
9. 9:IPv4 296_342 2.1 days US AS36352 107.175.17.130
10. 10:IPv4 252_000 16 hours US AS36352 192.227.227.212
72. 72:IPv4 18_665 11 hours US AS15169 209.85.220.41
https://dnswl.org/s/?s=209.85.220.41 Trust=none google.com
116. 116:IPv4 12_417 7 hours US AS15169 209.85.220.65
https://dnswl.org/s/?s=209.85.220.65 Trust=none google.com
200. 200:IPv4 7_720 - - -
3_887_459 - - *

#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
1. AS36352 11 4_182_215 AS-COLOCROSSING, US
[Top-IP:1,2,3,6,8,9,10]
2. AS31133 54 1_750_600 MF-MGSM-AS PJSC MegaFon, RU
[Top-IP:7]
3. AS24940 1 426_537 HETZNER-AS, DE
[Top-IP:4]
4. AS48347 1 384_213 MTW-AS, RU
[Top-IP:5]
5. AS10429 16 179_393 TELEFONICA BRASIL S.A, BR
6. AS15169 3 108_785 GOOGLE, US
[Top-IP:72(dnswl-none),116(dnswl-none)]
7. AS4780 1 104_405 SEEDNET Digital United Inc., TW
8. AS21127 1 101_609 ZSTTKAS Novosibirsk, Russia, RU
9. AS60784 3 55_377 IRADEUM-AS, BG
10. AS8926 2 54_265 MOLDTELECOM-AS Moldtelecom Autonomous System,
MD
103. - 1 7_861 -
* 106 1_595_316

#### Entries and reports count by country
#### [Top-Country: Top 5 countries + listed in Top-IP + listed in Top-AS]
#No. Reports ASes_with_stats
1. US 34 4_535_000 AS36352(11:4_182_215) AS15169(3:108_785)
AS30377(1:30_620) AS20473(1:26_671)
AS11492(3:24_769) AS7018(1:23_207) AS7922(2:23_002)
AS14061(1:12_985) AS11776(1:12_887)
AS12083(1:11_462) AS33038(1:10_211)
AS62651(1:9_241) AS174(1:9_056) AS11427(1:9_047)
AS33616(1:8_647) AS19108(1:8_185) AS701(1:8_057)
AS20001(1:7_986) AS10796(1:7_967)
[Top-IP:1,2,3,6,8,9,10,72(dnswl-none),
116(dnswl-none) + Top-AS:1,6]
2. RU 67 2_451_627 AS31133(54:1_750_600) AS48347(1:384_213)
AS21127(1:101_609) AS39593(1:50_812)
AS3216(1:37_295) AS20485(1:31_672)
AS35401(1:25_487) AS51341(1:13_694)
AS202306(1:10_602) AS42002(1:10_444)
AS12389(1:10_311) AS8369(1:9_111) AS12714(1:7_916)
AS42610(1:7_861)
[Top-IP:5,7 + Top-AS:2,4,8]
-. eu 32 1_249_390 DE(2:441_214) CZ(3:419_099) BG(6:94_303)
SE(5:94_284) BE(5:48_297) RO(3:47_856) DK(3:42_172)
SI(1:18_251) PT(1:13_052) NL(1:12_561) FR(1:9_593)
PL(1:8_708)
[Top-IP:4,5 + Top-AS:3,9]
3. DE 2 441_214 AS24940(1:426_537) AS35244(1:14_677)
[Top-IP:4 + Top-AS:3]
4. CZ 3 419_099 AS48347/RU(1:384_213) AS25248(1:26_281)
AS41129/UA(1:8_605)
[Top-IP:5]
5. BR 19 218_825 AS10429(16:179_393) AS267280(1:16_722)
AS263648(1:11_844) AS18881(1:10_866)
[Top-AS:5]
6. TW 1 104_405 AS4780(1:104_405)
[Top-AS:7]
8. BG 6 94_303 AS60784(3:55_377) AS205874(1:15_413)
AS60966(1:14_557) AS8866(1:8_956)
[Top-AS:9]
12. MD 3 66_374 AS8926(2:54_265) AS1547(1:12_109)
[Top-AS:10]
47. - 1 8_085 -

[Andrzej Adam Filip]

Post by A. Filip
Spamcop.net Top200 source: https://www.spamcop.net/hoshame.shtml
IPv4 reports for the week ending 2021-11-05T10:51:08+00:00
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
72. 72:IPv4 18_665 11 hours US AS15169 209.85.220.41
https://dnswl.org/s/?s=209.85.220.41 Trust=none google.com
116. 116:IPv4 12_417 7 hours US AS15169 209.85.220.65
https://dnswl.org/s/?s=209.85.220.65 Trust=none google.com
200. 200:IPv4 7_720 - - -
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
6. AS15169 3 108_785 GOOGLE, US
[Top-IP:72(dnswl-none),116(dnswl-none)]
103. - 1 7_861 -

Google spams you say?

Big email system for external customers and free riders means some
outgoing spam is unavoidable IMHO. Based on my personal mailboxes
I am surprised that Google is not represented in spamcop top-200
*permanently*.

I am not going to claim that google policies regarding outgoing spam
are sufficient. It is Google/Gmail reputation to loose.
It is up to Google to balance costs and reputation.

[The Doctor]

On Friday, 05 November 2021 16:43 -0000,

Post by Andrzej Adam Filip

Post by A. Filip
Spamcop.net Top200 source: https://www.spamcop.net/hoshame.shtml
IPv4 reports for the week ending 2021-11-05T10:51:08+00:00
#### Top entries with reports count
#### [Top-IP: Top 10 IPv4&IPv6 + DNSWL listed]
#No. Reports Age AS IP_Address
72. 72:IPv4 18_665 11 hours US AS15169 209.85.220.41
https://dnswl.org/s/?s=209.85.220.41 Trust=none google.com
116. 116:IPv4 12_417 7 hours US AS15169 209.85.220.65
https://dnswl.org/s/?s=209.85.220.65 Trust=none google.com
200. 200:IPv4 7_720 - - -
#### Entries and reports count by AS
#### [Top-AS: Top 10 ASes + listed in Top-IP]
#No. Reports AS_name_and_country
6. AS15169 3 108_785 GOOGLE, US
[Top-IP:72(dnswl-none),116(dnswl-none)]
103. - 1 7_861 -

Google spams you say?

/me offers Dave Yadallee some cheese and crackers, to go with his
perpetual whine.

Post by Andrzej Adam Filip
Big email system for external customers and free riders means some
outgoing spam is unavoidable IMHO. Based on my personal mailboxes I
am surprised that Google is not represented in spamcop top-200
*permanently*.

By big, I assume you mean individual servers, in huge server farms,
which may average more than 5k messages per second, for years on end.
These servers may emit over 10k messages per second, in short bursts.
As such, 18_665 messages in 11 hours amounts to a relative trickle.
It still sucks.
[
]

I *suspect* that google avoids listings in spamcop top-200 mainly due to
_very wide_ distribution of email sending. I hope to be wrong.
It is not a strong hope.

I need to make my spam in a honeypot!

google is spam heavy.

--
A. Filip