Server Farms, Elron Technologies and more

[wilderness]

single root request.
No images, no robots.

Visited a few times previously.

207.232.29.zzz - - [22/May/2012:15:27:14 +0100] "GET / HTTP/1.1" 403 559 "-" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.8.1.14) Gecko/20100824 BonEcho/2.0.0.14"

207.232.0.0 - 207.232.63.255
199.203.0.0 - 199.203.255.255

[wilderness]

198.24.132.234 - - [29/Nov/2012:11:20:02 +0000] "GET /MyFolder/MyPage.html HTTP/1.0" 200 7333 "http://www.example.com/SameFolder/SamePage.html" "Mozilla/5.0 (Windows NT 5.2; rv:12.0) Gecko/20100101 Firefox/12.0"

SS8 108.170.0.0 - 108.170.63.255
BUDGETVDS 108.170.1.72 - 108.170.1.79
BUDGETVDS 108.170.1.96 - 108.170.1.127
SECUREDSERVERS 174.138.160.0 - 174.138.175.255
SS5 184.164.128.0 - 184.164.159.255
SECUREDSERVERS 184.171.160.0 - 184.171.175.255
SECUREDSERVERS 184.95.32.0 - 184.95.63.255
SECURED-SERVERS 198.15.64.0 - 198.15.127.255
SECUREDSERVERS 198.24.128.0 - 198.24.191.255
SECUREDSERVERS 209.188.0.0 - 209.188.31.255
SSL-65 64.38.192.0 - 64.38.192.127
SSL-65 64.38.193.0 - 64.38.193.31
SS7 66.85.128.0 - 66.85.191.255
SECURED-IPV6 2607:FF00:: - 2607:FF00:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[keyplyr]

207.232.0.0 - 207.232.63.255
199.203.0.0 - 199.203.255.255

I have one other Israel Netvision ADSL blocked from a while ago.

109.186.0.0 - 109.186.128.0
109.186.0.0/17

[wilderness]

This page (at least until yesterday) had an email address for contact and has been getting plenty of pests requesting that solitary page.

68.235.36.193 - - [08/Dec/2012:18:02:33 +0000] "GET /MyFolder/MyPage.html HTTP/1.0" 200 7288 "http://www.example.com/SameFolder/SamePage.html" "Opera/9.80 (Windows NT 6.1; WOW64; U; en) Presto/2.10.289 Version/12.00"


TZULO 173.231.192.0 - 173.231.255.255 173.249.192.0/18
TZULO 173.249.192.0 - 173.249.255.255 173.231.192.0/18
TZULO 173.253.0.0 - 173.253.127.255 173.253.0.0/17
TZULO 206.226.64.0 - 206.226.127.255 206.226.64.0/18
TZULO 208.77.16.0 - 208.77.23.255 208.77.16.0/21
TZULO 68.235.32.0 - 68.235.63.255 68.235.32.0/19
TZULO 2607:9000:: - 2607:9000:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[keyplyr]

Don, it seems the mission of your web site is bot-bait. The pests hit you, then you tell the rest of us :)

[wilderness]

Continuum Data Centers
CDC-LMB-ARIN1 173.243.112.0 - 173.243.127.255 173.243.112.0/20
CDC-CUST-BLK 198.50.24.0 - 198.50.31.255 198.50.24.0/21
CDC-LMB-ARIN9 199.96.80.0 - 199.96.87.255 199.96.80.0/21
CDC-LMB-ARIN8 199.192.200.0 - 199.192.207.255 199.192.200.0/21
CDC-CUST-BLK 216.107.144.0 - 216.107.159.255 216.107.144.0/20
CDC-LMB-ARIN2 216.231.128.0 - 216.231.143.255 216.231.128.0/20
CDC-LMB-ARIN4 74.117.236.0 - 74.117.239.255 74.117.236.0/22
CDC-LMB-ARIN5 74.119.216.0 - 74.119.219.255 74.119.216.0/22
CDC-LMB-ARIN6 74.121.180.0 - 74.121.183.255 74.121.180.0/22
CDC-LMB-ARIN7 74.122.192.0 - 74.122.199.255 74.122.192.0/21
CDC-LMB-ARIN3 64.79.96.0 - 64.79.111.255 64.79.96.0/20
CDC-INAP-DIRECT 69.25.250.0 - 69.25.251.255 69.25.250.0/23
CDC-LMB-IPV6 2607:FF50:: - 2607:FF50:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[wilderness]

Perfect International, Inc
PERFECT-INTERNATIONAL 64.56.64.0 - 64.56.79.255 64.56.64.0/20
PERFECT-INTERNATIONAL 70.36.96.0 - 70.36.127.255 70.36.96.0/19
PERFECT-INTERNATIONAL 74.222.0.0 - 74.222.31.255 74.222.0.0/19
PERFECT-INTERNATIONAL 74.81.32.0 - 74.81.63.255 74.81.32.0/19
PERFECT-INTERNATIONAL 2607:FA98:: - 2607:FA98:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[dstiles]

I had the Perfect ranges tagged as VrtServer as of 2010. Thanks for the redesignation of ownership.

69.25.250.0/23 is part of Internap's /16 range but otherwise there were several Continuum ranges I didn't have.

The tzulo ranges seem to be designated "static" and to have individual rDNS per IP, which implies a static broadband.

[wilderness]

The tzulo ranges seem to be designated "static" and to have individual rDNS per IP, which implies a static broadband.

With that UA, they wouldn't get into my sites if they were Allah, Moses or Shirley Temple.

[keyplyr]

The tzulo ranges seem to be designated "static" and to have individual rDNS per IP, which implies a static broadband.

From tzulo.com

Sart your web hosting experience with us by entering the domain name you want to register, transfer or simply purchase hosting for below.

In addition, their shopping cart offers 5 products only, all hosting plans. If they also serve as an ISP, I can't find any evidence of it, at least not from their company website nor the SERP.

[wilderness]

DATAPIPE-NETBLK7 206.188.0.0 - 206.188.31.255
209.18.64.0 - 209.18.127.255
209.18.124.0 - 209.18.127.255
216.109.128.0 - 216.109.159.255
216.109.156.0 - 216.109.159.255
63.131.128.0 - 63.131.159.255
64.106.128.0 - 64.106.255.255
64.106.252.0 - 64.106.255.255
64.27.64.0 - 64.27.127.255
65.17.192.0 - 65.17.255.255
65.17.248.0 - 65.17.255.255
66.70.0.0 - 66.70.127.255
2607:F9F0:: - 2607:F9F1:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[wilderness]

If anybody is aware of large ranges (as below) I'd be interested.
They specialize in business solutions and there are hundreds of subnet delegations.

Logix Communications, Inc. LOGIXCOM-COM 216.201.128.0 - 216.201.255.255
216.74.224.0 - 216.74.255.255
66.196.192.0 - 66.196.255.255
66.64.0.0 - 66.64.63.255

[keyplyr]

Thanks Don.

FYI - these can be combined:

64.106.128.0 - 64.106.255.255
64.106.252.0 - 64.106.255.255

209.18.64.0 - 209.18.127.255
209.18.124.0 - 209.18.127.255

[dstiles]

Wilderness - my own IP broadband is static: all it means (at least, here in UK) is that the IP is not changed when the broadband connection drops. Most UK broadband is DHCP. But apologies because...

Keyplr - thanks, hadn't seen that. I'll revise accordingly.

logix - I also have:

74.213.0.0 - 74.213.63.255
216.201.128.0 - 216.201.255.255

[wilderness]

FYI - these can be combined:

Keyplr - thanks, hadn't seen that. I'll revise accordingly.

There are actually four sets in the PIPE ranges that may be combined.
The only reason I included them is because they have their own subnet names.

[keyplyr]

There are actually four sets in the PIPE ranges that may be combined.

Yes, I hadn't got to the other two yet :)

The only reason I included them is because they have their own subnet names.

I try and condense as much as possible using CIDRs, makes it nice and succinct.

[blend27]

PSYCHZ-NETWORKS IP Ranges Updated.

74.117.56.0 - 74.117.63.255 PSYCHZ-NETWORKS 74.117.56.0/21
216.99.144.0 - 216.99.159.255 PSYCHZ-NETWORKS 216.99.144.0/20
216.24.192.0 - 216.24.207.255 PSYCHZ-NETWORKS 216.24.192.0/20
208.87.240.0 - 208.87.243.255 PSYCHZ-NETWORKS 208.87.240.0/22 <---- Expanded
199.83.88.0 - 199.83.95.255 PSYCHZ-NETWORKS 199.83.88.0/21
199.71.212.0 - 199.71.215.255 PSYCHZ-NETWORKS 199.71.212.0/22
199.15.112.0 - 199.15.119.255 PSYCHZ-NETWORKS 199.15.112.0/21
199.119.200.0 - 199.119.207.255 PSYCHZ-NETWORKS 199.119.200.0/21
198.13.96.0 - 198.13.127.255 PSYCHZ-NETWORKS 198.13.96.0/19 <---- New One, fresh from October
192.210.48.0 - 192.210.63.255 PSYCHZ-NETWORKS 192.210.48.0/20
173.224.208.0 - 173.224.223.255 PSYCHZ-NETWORKS 173.224.208.0/20
108.171.240.0 - 108.171.255.255 PSYCHZ-NETWORKS 108.171.240.0/20

I am being hammered by comment spamming attempts and logs being filled with the referrer spam with in the past week. 90% from 108.171.240.0/20 and 216.24.192.0/20. Grrrrr...

[keyplyr]

Thanks blend27, I didn't have 2 of them (not the same 2 you highlighted.)

[wilderness]

Gig Avenue, LLC
ARCSCALE-1 (NET-208-66-96-0-1) 208.66.96.0 - 208.66.103.255 208.66.96.0/21
ARCSCALE-2 (NET-208-78-80-0-1) 208.78.80.0 - 208.78.87.255 208.78.80.0/21
UU-65-211-250-D6 (NET-65-211-250-0-1) 65.211.250.0 - 65.211.250.255 65.211.250.0/24

FWIW, I've had the UU backbone range denied for a long while.

[keyplyr]

Don, you mean you've had this denied for a long time?

UUnet
65.192.0.0 - 65.223.255.255
65.192.0.0/11

From Wikipedia:

UUNET founded in 1987, was one of the largest Internet service providers and one of the early Tier 1 networks. It was based in Northern Virginia and was the first commercial Internet service provider. Today, UUNET is an internal brand of Verizon Business (formerly MCI).

Doesn't blocking this range also block a lot of users?

[wilderness]

Aye.
Too bad. So Sad.

In 2002 I contacted UUnet for an intrusion solution.
The reply began with the following:

Please be advised that you are reading an automatically generated reply to acknowledge the receipt of your recently submitted message to us. Due to the large volume of correspondence we receive, we cannot guarantee a personal reply to each report that we receive.

MCI purchased major portions of UUNet, if not all.
I've more UUNet ranges if your interested?

In addition, I'm pretty sure that I have old-subnet searches from some UUNet/MCI ranges, which provide all the customers IP's.

[wilderness]

keyplr,
My websites are quite unique.

In the event a person within the widget community doesn't know and correspond frequently, than the person knows another person within the widget community that knows me and corresponds.
Custom solutions for access frequent and pending identity.

Just today I modified a RIPE access which was formerly an exception in the 85 Class to A to and exception in the 109 Class A.

I would do the same for a widget person in the UUNet/MCI range, were they to contact me.

[wilderness]

In addition, I'm pretty sure that I have old-subnet searches from some UUNet/MCI ranges, which provide all the customers IP's.

that file is 7-meg in size (html) and from 2006.
If anybody wishes the thing? contact me.

[wilderness]

VolumeDrive
VOLUM-ARIN 142.0.32.0 - 142.0.47.255 142.0.32.0/20
VOLUMEDRIVE 173.242.112.0 - 173.242.127.255 173.242.112.0/20
VOLUMEDRIVE 199.115.228.0 - 199.115.231.255 199.115.228.0/22
VOLUMEDRIVE 199.168.136.0 - 199.168.143.255 199.168.136.0/21
VOLUM-ARIN 199.180.112.0 - 199.180.119.255 199.180.112.0/21
VOLUMEDRIVE 199.19.104.0 - 199.19.111.255 199.19.104.0/21
VOLUMEDRIVE 204.124.180.0 - 204.124.183.255 204.124.180.0/22
VOLUMEDRIVE 74.118.192.0 - 74.118.195.255 74.118.192.0/22
VOLUM-ARIN 2607:8F00:: - 2607:8F00:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[keyplyr]

Cool, I was missing 2 of those. Thanks Don.

[wilderness]

199.19.110.149 - - [21/Dec/2012:01:08:42 +0000] "GET /MyFolder/MySub/MyPage.html HTTP/1.0" 200 37093 "http://www.example.com/SameFolder/SameSub/SamePage.html" "Mozilla/5.0 (Windows NT 6.0; rv:9.0.1) Gecko/20100101 Firefox/9.0.1"

No robots, no supporting files/

[Bewenched]

208.87.240.0 - 208.87.243.255
thanks blend,
I'd had some of that blocked due to scraping activity...
I see they've expanded.

It's a never ending battle.

[wilderness]

70.39.69.162 - - [24/Dec/2012:07:39:51 +0000] "GET / HTTP/1.1" 200 5772 "-" "Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20100101 Firefox/17.0"

Sharktech
174.128.224.0 - 174.128.255.255 174.128.224.0/19
198.148.80.0 - 198.148.95.255 198.148.80.0/20
199.115.96.0 - 199.115.103.255 199.115.96.0/21
204.188.192.0 - 204.188.255.255 204.188.192.0/18
208.98.0.0 - 208.98.63.255 208.98.0.0/18
64.32.0.0 - 64.32.31.255 64.32.0.0/19
67.21.64.0 - 67.21.95.255 67.21.64.0/19
70.39.64.0 - 70.39.127.255 70.39.64.0/18
2610:150:: - 2610:150:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

[keyplyr]

Sharktech - sound like a school for lawyers :)

Thanks, never seen any actors from this hosting co but maybe just haven't noticed.

[wilderness]

Hostway Services, Inc
AFFINITY-AUSTIN-2 207.150.200.0 - 207.150.207.255 207.150.200.0/21
HWSERVICES-AUS1 216.139.208.0 - 216.139.255.255 216.139.224.0/19 216.139.208.0/20
AFFINITY-AUSTIN-3 216.185.144.0 - 216.185.159.255 216.185.144.0/20
HWSERVICES-AUS-V6 2606:8200:: - 2606:8200:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

SOLIDTOOLSTECH 100.42.224.0 - 100.42.239.255 100.42.224.0/20
SOLIDTOOLSTECH 198.40.48.0 - 198.40.63.255 198.40.48.0/20
SOLIDTOOLSTECH 64.187.144.0 - 64.187.159.255 64.187.144.0/20

USCOLO-NET 192.34.20.0 - 192.34.23.255 192.34.20.0/22
USCOLO-NET 204.9.200.0 - 204.9.207.255 204.9.200.0/21
USCOLO-NET 208.64.248.0 - 208.64.255.255 208.64.248.0/21
USCOLO-NET 208.74.72.0 - 208.74.79.255 208.74.72.0/21
NET-216-151-140-0-24-XEEX-USCOLO 216.151.140.0 - 216.151.140.255 216.151.140.0/24
NET-69-26-172-0-23-XEEX-USCOLO 69.26.172.0 - 69.26.173.255 69.26.172.0/23
XEEX-USCOLO-69-26-185-0-24 69.26.185.0 - 69.26.185.255 69.26.185.0/24
USCOLO-NET 98.158.144.0 - 98.158.159.255 98.158.144.0/20

[wilderness]

Infolink
INFOLINK-BLK1-PROGRESS-107228 216.22.105.0 - 216.22.105.255 216.22.105.0/24
INFOLINK-BLK-100 64.251.0.0 - 64.251.31.255 64.251.0.0/19
INFOLINK-BLK-600 65.111.160.0 - 65.111.191.255 65.111.160.0/19
INFOLINK-BLK-101 69.60.96.0 - 69.60.127.255 69.60.96.0/19
INFOLINK-IP6-1-32 (NET6-2607-FEB8-1) 2607:FEB8:: - 2607:FEB8:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF