Contents of END_USERS.DAT (last modified at 11:41:45AM on 9-AUG-2010):
*=*. $C$0=$1
!
! Hyphenate IP address and tack it on for easier matching
!
*.*.*.*=* $C$0.$1.$2.$3=$4/$0-$1-$2-$3
!
! Typical forms for end-user connections
!
$<0.0.0.0/32>=*static* $N
$<0.0.0.0/32>=dhcp* $Y
! $<0.0.0.0/32>=dhcp-$@0*.$@*/$@* $Y
! $@<0.0.0.0/32>=dhcp-*.$@*/$@1* $Y
$@<0.0.0.0/32>=$@*.dhcp.$@*/$@* $Y
$<0.0.0.0/32>=dial-$@0*.$@*/$@* $Y
$@<0.0.0.0/32>=dial-*.$@*/$@1* $Y
$@<0.0.0.0/32>=dial-up-*.$@*/$@1* $Y
$@<0.0.0.0/32>=$@*.dial.$@*/$@* $Y
$@<0.0.0.0/32>=$@*.dial-up.$@*/$@* $Y
$<0.0.0.0/32>=dialup-$@0*.$@*/$@* $Y
$@<0.0.0.0/32>=dialup-*.$@*/$@1* $Y
$@<0.0.0.0/32>=dialup-$@*$@0*.$@*/$@* $Y
$@<0.0.0.0/32>=$@*.dialup.$@*/$@* $Y
$<0.0.0.0/32>=ppp-$@0*.$@*/$@* $Y
$@<0.0.0.0/32>=ppp-*.$@*/$@1* $Y
!
$@<0.0.0.0/32>=$@_**.adsl.dynamic.$@*/$@2* $Y
$@<0.0.0.0/32>=*.cm.dynamic.apol.com.tw/$@1* $Y
$@<0.0.0.0/32>=$@*.dialup.vol.cz/$@* $Y
$@<0.0.0.0/32>=0x$@H*.$@S*.adsl-dhcp.tele.dk/$@* $Y
$@(219.84.0.0/15)=*-adsl-$@*.dynamic.so-net.net.tw/$@1* $Y
*.*.*.*=*-ppp$@3*.*.dialup.connect.net.au/$@* $Y
*.*.*.*=ppp-$@3*-$@2*.$@1*-$@0*.libero.it/$@* $Y
$@<0.0.0.0/32>=*.ip.mcleodusa.net/$@1* $Y
*.*.*.*=cable$@[0]*$@2*a$@[0]*$@3*.usuarios.retecal.es/$@* $Y
*.*.*.*=$@3*-$@2*-$@1*-$@0*.ipt.knet.ca/$@* $Y
*.*.*.*=c$@0*.$@1*.$@2*-$@3*.clta.globetrotter.net/$@* $Y
*.*.*.*=n$@3*.n$@0*-$@1*-$@2*.eranet.net/$@* $Y
$@(63.246.160.0/19)= user-0vv$@H*.cable.mindspring.com/$@* $Y
*.*.*.*=d$@1*-$@0*-$@3*-$@2*.$@*.wideopenwest.com/$@* $Y
$(130.67.0.0/16)=ti$@D*a$@D*-$@D*.dialup.online.no/$@* $Y
$@(213.148.224.0/19)=d594$@X*.dsl.concepts.nl/$@* $Y
*.*.*.*=N$@[0]*$@2*$@[0]*$@3*.ppp.dion.ne.jp/$@* $Y
$@(63.238.252.0/23)=dial$@D*-$@D*.btc-bci.com/$@* $Y
$@(212.174.0.0/16)=adsluser-$@D*.adsl.ttnet.net.tr/$@* $Y
81.217.*.*=h081217$@[0]*$@0*$@[0]*$@1*.dyn.cm.kabsi.at/$@* $Y
$@(217.184.0.0/13)=$@*-$@H*.pool.mediaWays.net/$@* $Y
*.*.*.*=$@%$@%$@3*.neoplus.adsl.tpnet.pl/$@* $Y
$@(213.76.0.0/16)=$@*.ppp.tpnet.pl/$@* $Y
$@(62.87.128.0/17)=dial-$@D*.$@*.dialog.net.pl/$@* $Y
$@(81.213.0.0/16)=mstr81213-$@D*.dial-in.ttnet.net.tr/$@* $Y
208.3.1$@[34]%.*=$@*-$@1*.ardmore.net/$@* $Y
$@<0.0.0.0/32>=pool-*.$@*.verizon.net/$@1* $Y
217.132.$@*.$@*=CBL*.bb.netvision.net.il/$@2* $Y
217.132.$@*.$@*=DSL*.bb.netvision.net.il/$@2* $Y
64.110.*.*=hsdb$@*64-110-$@0*-$@1*.sasknet.sk.ca/$@* $Y
217.23.*.*=$@*-$0-$1.prijedor.com/$@* $Y
81.*.*.*=$@*$@2*.net81-$@0*-$@1*.noos.fr/$@* $Y
80.11.$@*.*=A$@*-$@D*-$@D*-$@1*.w80-11.abo.wanadoo.fr/$@* $Y
$@<0.0.0.0/32>=*.$@*.dialup.rcn.com/$@1* $Y
$@(82.64.0.0/14)=$@_*-$@_*-$@_*-*.adsl.proxad.net/$@4* $Y
$@(206.15.128.0/18)=*.dialup.ziplink.net/$@1* $Y
66.233.*.*=cdm-66-$@0*-$@1*-$@*.cox-internet.com/$@* $Y
208.180.*.*=cdm-208-$@0*-$@1*-$@*.cox-internet.com/$@* $Y
*.*.*.*=$@*-cust$@D%$@D*.$@*.cable.ntl.com/$@* $Y
$@<0.0.0.0/32>=dial*.in-addr.btopenworld.com/$@1* $Y
$@<0.0.0.0/32>=host*.in-addr.btopenworld.com/$@1* $Y
$@<0.0.0.0/32>=*.adsl.ttn.net/$@1* $Y
*.*.*.*=cablep-$@1*-$@2*-$@3*.cablep.bezeqint.net/$@* $Y
$@<0.0.0.0/32>=p$@H*.dip.t-dialin.net/$@* $Y
*.*.*.*=$@*pool$@2*-$@3*.$@*.da.qwest.net/$@* $Y
$@(63.224.0.0/13)=dialup$@*.uswest.net/$@* $Y
$@(168.226.0.0/16)=*.speedy.com.ar/$@1* $Y
$@<0.0.0.0/32>=cpe$@*.cpe.net.cable.rogers.com/$@* $Y
$@<0.0.0.0/32>=dup-*.prodigy.net.mx/$@1* $Y
$@*.*.*.*=d$@0*-$@2*-$@1*.$@*.wideopenwest.com/$@* $Y
194.2.*.*=$@*$@1*.$@0*.2.194.capgemini.fr/$@* $Y
$@<217.0.0.0/24>=*.teliko.net/$@1* $Y
$@<0.0.0.0/32>=*.$@*.cable.rcn.com/$@1* $Y
$@<0.0.0.0/32>=c-*.$@*.client2.attbi.com/$@1* $Y
$@<0.0.0.0/32>=h$@H*.$@*.client2.attbi.com/$@* $Y
$@*.*.*.*=$@*$@0*-$@1*-$@2*.home.cgocable.net/$@* $Y
$@<0.0.0.0/32>=*.atgi.net/$@1* $Y
*.*.*.*=*.biz.rr.com/$@* $N
$@<0.0.0.0/32>=$@*.res.rr.com $Y
*.*.*.*=$@_*$@3*$@_*$@2*$@_*$@1*$@_*$@0*$@_*.$@*.rr.com/$@* $Y
*.*.*.*=$@_*$@0*$@_*$@1*$@_*$@2*$@_*$@3*$@_*.$@*.rr.com/$@* $Y
*.*.*.*=$@_*$@1*$@_*$@2*$@_*$@3*$@_*.$@*.rr.com/$@* $Y
$@<0.0.0.0/32>=h*.$@%$@%.shawcable.net/$@1* $Y
$@<67.0.0.0/24>=c-*.client.comcast.net/$@1* $Y
$@(68.32.0.0/11)=pcp$@D*pcs.$@*.comcast.net/$@* $Y
$@<68.80.0.0/19>=pcp$@D*pcs.$@*.comcast.net/$@* $Y
$@<66.0.0.0/24>=*$@*.$@*.charter.com/$@1* $Y
68.115.*.*=cm-68-115-$@0*-$@[0]*$@1*.$@*.charter.com/$@* $Y
200.151.*.*=shasta$@[0]*$@0*$@[0]*$@1*.ig.com.br/$@* $Y
200.$@D*.*.*=$@1*$@2*.$@*.virtua.com.br/$@* $Y
200.174.*.*=174$@0$@1.virtua.com.br/$@* $Y
$@<0.0.0.0/32>=$@H*.virtua.com.br/$@* $Y
200.177.$@*.$@*=cm-$@*-C8B1$@H*.p001.terra.com.br/$@* $Y
200.177.$@*.$@*=dl-$@*-C8B1$@H*.p001.terra.com.br/$@* $Y
200.217.*.*=$@1*.$@D*-$@D*.$@0*.217.200.telemar.net.br/$@* $Y
*.*.*.*=user.$@3*.$@2*.$@1*.$@0*.dial$@*.telemar.net.br/$@* $Y
200.*.*.*=$@2*.$@1*.$@0*.200.$@*.br/$@* $Y
200.*.*.*=$@2*-$@1*-$@0*-200.$@*.br/$@* $Y
$<200.0.0.0/24>=$@0*.$@*.br/$@* $Y
$@<200.0.0.0/24>=*.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.$@*adsl.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.customer.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.dial.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.dialup.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.dsl.$@*.br/$@1* $Y
$@<200.0.0.0/24>=*.tlm.dialuol.com.br/$@1* $Y
*.*.*.*=$@[0]*$@0*$@[0]*$@1*$@[0]*$@2*$@[0]*$@3*.user.veloxzone.com.br/$@* $Y
$@<200.0.0.0/24>=ppp$@*.br/$@* $Y
$@<200.0.0.0/24>=200-$@*.$@*.dial.brasiltelecom.net.br/$@* $Y
$@<200.0.0.0/24>=200-$@*.$@*.dsl.brasiltelecom.net.br/$@* $Y
$@<24.248.0.0/19>=cmc$@*.nc.home.com/$@* $Y
208.57.*.*=$@*-dsl$@0*-cust$@[0]$@*$@1*.mpowercom.net/$@* $Y
$<202.0.0.0/25>=$@0*.apexn.net/$@* $Y
$@<210.201.0.0/16>=dial$@*-NK-ii.hitron.net/$@* $Y
$@<24.188.0.0/18>=ool-18b$[c-f]%$@*.dyn.optonline.net/$@* $Y
203.147.$@*.*=$@*$@0*.powerup.com.au/$@* $Y
$@<210.62.0.0/8>=host$@*.210620.gcn.net.tw/$@* $Y
$@<211.74.128.0/11>=swtp$@*-$@*.adsl.seed.net.tw/$@* $Y
*.*.*.*=$@3*.$@2*.$@1*.$@0*.$@*.tw/$@* $Y
*.*.*.*=$@3*-$@2*-$@1*-$@0*.$@*.tw/$@* $Y
$@*.$@*.*.*=$@1*.c$@0*.ethome.net.tw/$@* $Y
*.*.*.*=$@3*.c$@0*-$@1*-$@2*.ethome.net.tw/$@* $Y
*.*.*.*=u$@2*-$@3*.u$@0*-$@1*.giga.net.tw/$@* $Y
*.*.*.*=h$@3*-$@0*-$@1*-$@2*.ptr.com.tw/$@* $Y
212.144.*.*=$@2*-$@3*.$@A%.dial.o-tel-o.net/$@* $Y
216.254.*.*=$@*-$@0*-$@1*.$@*.primus.ca/$@* $Y
$@<0.0.0.0/32>=*.dynamic.hinet.net/$@1* $Y
$@<0.0.0.0/32>=*.HINET-IP.hinet.net/$@1* $Y
$@*.$@*.$@*.*=chi-tgn-g$A%$A%-vty$@0*.as.wcom.net/$@* $Y
$@<0.0.0.0/32>=ppp$@D%$@D%$@D%.$@A%$@A*.centurytel.net/$@* $Y
$@*.$@*.*.*=$@0*-$@1*.pop.fl.mi.verio.co/$@* $Y
$@<0.0.0.0/32>=$@*.ipt.aol.com/$@* $Y
$@*.*.*.*=nic-$@0*-c$@1*-$@2*.$@*.mediaone.net/$@* $Y
$@<0.0.0.0/32>=ppp$@*-resale$@*-$@*.dialinx.net/$@* $Y
!
! The following are general SPAM sources, and are not
! generally named per some variation of the IP address.
!