homepage Welcome to WebmasterWorld Guest from 54.211.97.242
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
Forum Library, Charter, Moderators: Ocean10000 & incrediBILL

Search Engine Spider and User Agent Identification Forum

This 109 message thread spans 4 pages: < < 109 ( 1 [2] 3 4 > >     
Server Farms - Feb. 2014
Ongoing Hosting Data Center Discussion
incrediBILL

WebmasterWorld Administrator incredibill us a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 12:20 pm on Feb 7, 2014 (gmt 0)

Continuation of the Sept 2013 thread:
[webmasterworld.com...]

 

bobothecat2



 
Msg#: 4643253 posted 11:08 am on Feb 17, 2014 (gmt 0)

I have a few extras for ISPrime

64.111.192.0/19
64.111.192.0 - 64.111.223.255

64.188.48.0/20
64.188.48.0 - 64.188.63.255

66.230.128.0/18
66.230.128.0 - 66.230.191.255

68.169.96.0/20
68.169.64.0 - 68.169.111.255

76.9.0.0/19
76.9.0.0 - 76.9.31.255

92.61.240.0/20
92.61.240.0 - 92.61.255.255

162.217.36.0/22
162.217.36.0 - 162.217.39.255

199.167.64.0/22
199.167.64.0 - 199.167.67.255

Angonasec

10+ Year Member



 
Msg#: 4643253 posted 1:49 pm on Feb 17, 2014 (gmt 0)

Thank you Bobo: Filed away for future use.
I've got most of 66. blocked.

dstiles

WebmasterWorld Senior Member dstiles us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 4643253 posted 7:52 pm on Feb 17, 2014 (gmt 0)

Thanks for the extra ISPrime ranges.

Angonasec

10+ Year Member



 
Msg#: 4643253 posted 9:59 am on Feb 18, 2014 (gmt 0)

Many of you will have this one, which I unaccountably let through. (I'm busy moving our sites after a decade with a splendid-but-even-more-retro-than-me host.)

Arch NY nasty:
Digital Ocean Inc. NY Simple Cloud Hosting

Obeyed robots.txt but nonetheless unwelcome and now blocked:
107.170.0.0 - 107.170.255.255 107.170.0.0/16 Blocked
OriginAS: AS14061, AS62567, AS46652


107.170.42.10 - - [18/Feb/2014] "GET /robots.txt HTTP/1.1" 200 670 "-" "Mozilla/5.0 (compatible; spbot/4.0.7; +http://OpenLinkProfiler.org/bot )"

blend27

WebmasterWorld Senior Member 5+ Year Member



 
Msg#: 4643253 posted 1:52 pm on Feb 18, 2014 (gmt 0)

inetnum: 185.38.249.0 - 185.38.249.255
route: 185.38.248.0/22
netname: SPRINT-SDC-FIRE
descr: Sprint Data Center Customer
country: PL

Comment spammer from 185.38.249.217.

----------------------------------------------------
Aeori Web Hosting (has more ranges)
NetRange: 68.234.0.0 - 68.234.31.255
CIDR: 68.234.0.0/19
country: US

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 10:52 pm on Feb 19, 2014 (gmt 0)


Serverius
5.255.72.0/22
5.255.72.0 - 5.255.75.255

blend27

WebmasterWorld Senior Member 5+ Year Member



 
Msg#: 4643253 posted 12:40 pm on Feb 20, 2014 (gmt 0)

Gigas Hosting SL - from Spain

5.56.60.0/22
5.56.60.0 - 5.56.63.255

5.56.56.0/22
5.56.56.0 - 5.56.59.255

146.255.96.0 - 146.255.99.255
146.255.96.0/22

146.255.100.0 - 146.255.103.255
146.255.100.0/22

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 7:50 pm on Feb 20, 2014 (gmt 0)

Thanks Blend27. I didn't have either of the broadened ranges. Just had the /22's. So...

These:
5.56.60.0/22
5.56.60.0 - 5.56.63.255
5.56.56.0/22
5.56.56.0 - 5.56.59.255

Can be condensed to:
5.56.60.0/21
5.56.56.0 - 5.56.63.255

And these:
146.255.96.0 - 146.255.99.255
146.255.96.0/22
146.255.100.0 - 146.255.103.255
146.255.100.0/22

Can be condensed to:
146.255.96.0 - 146.255.103.255
146.255.96.0/21

blend27

WebmasterWorld Senior Member 5+ Year Member



 
Msg#: 4643253 posted 2:51 am on Feb 21, 2014 (gmt 0)

Thanks keyplyr,

These were a morning quickie, 2 IPs from one range were acting up, so I listed all ranges I had.

Would never happen again... :)

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 8:26 am on Feb 27, 2014 (gmt 0)



Fiber Grid (Layered Tech)

165.231.0.0 - 165.231.255.255
165.231.0.0/16

196.196.0.0 - 196.196.255.255
196.196.0.0/16

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 9:09 am on Feb 28, 2014 (gmt 0)


This server range may have some broadband in there, but I've been getting repeat offenders from:

fibersunucu.com.tr
217.195.192.0/20
217.195.192.0 - 217.195.207.255


Which contains what I had formerly noted as:
Buyurl
217.195.202.0/24
217.195.202.0 - 217.195.202.255

dstiles

WebmasterWorld Senior Member dstiles us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 4643253 posted 7:04 pm on Feb 28, 2014 (gmt 0)

I had that, too. Now set the /20 to TR. The band just above it is a Russian server range, by the way.

not2easy

WebmasterWorld Administrator 5+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 10:48 pm on Feb 28, 2014 (gmt 0)

I'm getting bad actors from XO Communications' ALGX at 216.0.0.0 - 216.5.255.255 216.0.0.0/14

And Mainstream Consulting's MCGNET at
64.202.240.0 - 64.202.255.255 64.202.240.0/20

And TOQEN-NET at
198.41.96.0 - 198.41.127.255 198.41.96.0/19

Most interesting was : "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" trying some sql injection from 222.178.10.2XX


(Edited to replace missing tabs with spaces/readability..)

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 2:02 am on Mar 1, 2014 (gmt 0)



My XO list:

207.155.128.0 - 207.155.255.255
207.155.128.0/17

208.176.0.0 - 208.177.255.255
208.176.0.0/15

216.0.0.0 - 216.5.255.255
216.0.0.0/14

not2easy

WebmasterWorld Administrator 5+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 3:19 am on Mar 1, 2014 (gmt 0)

Thank you, I did not have the 207 group, I only had one previous note for XO anywhere.

Angonasec

10+ Year Member



 
Msg#: 4643253 posted 12:37 pm on Mar 1, 2014 (gmt 0)

You Gents are far too soft on 217.
Get some Turkish friends to tell you why.

dstiles

WebmasterWorld Senior Member dstiles us a WebmasterWorld Top Contributor of All Time 5+ Year Member



 
Msg#: 4643253 posted 9:54 pm on Mar 1, 2014 (gmt 0)

My XO list below. As listed they are full not-blocked ranges. A few have blocked sub-ranges within them.

64.0.0.0 - 64.3.255.255
64.244.0.0 - 64.245.255.255
65.44.0.0 - 65.47.255.255
66.88.0.0 - 66.89.255.255
66.236.0.0 - 66.239.255.255
67.88.0.0 - 67.95.255.255
67.104.0 - 67.111.255.255
67.152.0.0 - 67.155.255.255
71.4.0.0 - 71.5.255.255
206.83.64.0 - 206.83.95.255
206.111.0.0 - 206.111.255.255
206.205.0.0 - 206.205.255.255
207.86.0.0 - 207.88.255.255
207.155.128.0 - 207.155.255.255
207.238.0.0 - 207.239.255.255
208.36.0.0 - 208.37.255.255
208.176.0.0 - 208.177.255.255
209.31.0.0 - 209.31.255.255
209.116.0.0 - 209.119.255.255
209.164.0.0 - 209.164.63.255
209.220.0.0 - 209.220.255.255
216.0.0.0 - 216.5.255.255
216.112.0.0 - 216.112.255.255
216.120.0.0 - 216.120.127.255
216.156.0.0 - 216.156.255.255

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 8:38 am on Mar 5, 2014 (gmt 0)


QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?

bobothecat2



 
Msg#: 4643253 posted 2:58 pm on Mar 5, 2014 (gmt 0)

QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?


I also have:

199.195.140.0/22
199.195.140.0 - 199.195.143.255

wilderness

WebmasterWorld Senior Member wilderness us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 3:56 pm on Mar 5, 2014 (gmt 0)

QuickWeb Technologies LLC (QTL-6)
Corporate Colocation Inc. (CORPO-6)
CORPCOLO-66-117-11-16-29 66.117.11.16 - 66.117.11.23 66.117.0.0/20
QUICKWEB-NET 198.154.180.0 - 198.154.183.255 198.154.180.0/22
54046-QUICKWEB-NET-USA 199.231.232.0 - 199.231.235.255 199.231.232.0/22
QUICKWEB-USA-NET 199.195.140.0 - 199.195.143.255 199.195.140.0/22
QUICKWEB-NET-USA 199.83.100.0 - 199.83.103.255 199.83.100.0/22
CORPCOLO-74-124-208-128-27 74.124.208.128 - 74.124.208.159 74.124.192.0/19
CORPCOLO-205-134-242-112-30 205.134.242.112 - 205.134.242.115 205.134.224.0/19
CORPCOLO-205-134-242-116-30 205.134.242.116 - 205.134.242.119 205.134.224.0/19

Corporate Colocation Inc. (CORPO-6)
[whois.arin.net...]

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 7:10 pm on Mar 5, 2014 (gmt 0)



Thanks for the XO and the QuickWeb ranges.

quadranet



 
Msg#: 4643253 posted 7:34 am on Mar 6, 2014 (gmt 0)

I apologize for my stupidity, but I must ask why our IPs are on this forum as a "server farm".

Also, the 'Web Africa Proxy' comment was a proxy registration of our ASN IRR object on RIPE by the company 'Web Africa'.

We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

If you have issues with any of our customers you can report them to abuse@quadranet.com. You can also confirm the assignment size by querying our rWHOIS server at rwhois.quadranet.com on port 4321.

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 8:51 am on Mar 6, 2014 (gmt 0)

I must ask why our IPs are on this forum as a "server farm"...
We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

Yes, you just described a server farm.

We block IP ranges assigned to server farms since no human traffic results from servers, only robots, most of which conduct bad behavior (data mining, hacking, scraping content, etc.) We do allow some robots that have been determined to be beneficial. This is done on a case by case basis.

Thanks for the abuse contact & query info.

quadranet



 
Msg#: 4643253 posted 5:20 pm on Mar 6, 2014 (gmt 0)

Thanks keyplyr.

Note that most of our IP space is in-use for hosters and enterprise customers (eg. bittorrent.com) versus 'scrapers'. There are a number of eyeballs on our network. (TOR nodes, VPN companies, and MetroE/T1s)

Blocking our ranges carte blanche will result in some legitimate users being blocked.

wilderness

WebmasterWorld Senior Member wilderness us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 7:26 pm on Mar 6, 2014 (gmt 0)

Blocking our ranges carte blanche will result in some legitimate users being blocked.


You mean like this one hammering for PHP vulnerabilities!

96.44.189.102 - - [01/Mar/2013:13:01:20 -0500]

or this one

198.55.109.18 - - [02/Nov/2013:17:45:27 -0600]

quadranet



 
Msg#: 4643253 posted 7:32 pm on Mar 6, 2014 (gmt 0)

wilderness,

Thanks for the info, I'm going to PM you to hopefully deal with those. The first one is a TOR node, but logs will help so I can speak with the customer about hopefully blocking some abuse.

wilderness

WebmasterWorld Senior Member wilderness us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 7:45 pm on Mar 6, 2014 (gmt 0)

Ive the IP ranges denied and a resolution in place.

Thanks anyway.

Angonasec

10+ Year Member



 
Msg#: 4643253 posted 3:18 pm on Mar 7, 2014 (gmt 0)

Somebody please give me a full list of Quadranet IPs urgently...

wilderness

WebmasterWorld Senior Member wilderness us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 4:14 pm on Mar 7, 2014 (gmt 0)

Their on page 2 of this thread. No reason to duplicate.

Angonasec

10+ Year Member



 
Msg#: 4643253 posted 3:36 am on Mar 8, 2014 (gmt 0)

Roger Don, it was intended as a rhetorical comment on Quadranet personnel :)

keyplyr

WebmasterWorld Senior Member keyplyr us a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



 
Msg#: 4643253 posted 9:14 am on Mar 10, 2014 (gmt 0)


205.237.88.140 - - [10/Mar/2014:01:32:48 -0700] "GET / HTTP/1.0" 403 1343 "-" "=Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16"

Grand Web Solutions
205.237.88.0 - 205.237.95.255
205.237.88.0/21

This 109 message thread spans 4 pages: < < 109 ( 1 [2] 3 4 > >
Global Options:
 top home search open messages active posts  
 

Home / Forums Index / Search Engines / Search Engine Spider and User Agent Identification
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved