Welcome to WebmasterWorld Guest from 54.198.46.95

Forum Moderators: Ocean10000 & incrediBILL

Message Too Old, No Replies

Server Farms - Feb. 2014

Ongoing Hosting Data Center Discussion

     
12:20 pm on Feb 7, 2014 (gmt 0)

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Continuation of the Sept 2013 thread:
[webmasterworld.com...]
11:08 am on Feb 17, 2014 (gmt 0)



I have a few extras for ISPrime

64.111.192.0/19
64.111.192.0 - 64.111.223.255

64.188.48.0/20
64.188.48.0 - 64.188.63.255

66.230.128.0/18
66.230.128.0 - 66.230.191.255

68.169.96.0/20
68.169.64.0 - 68.169.111.255

76.9.0.0/19
76.9.0.0 - 76.9.31.255

92.61.240.0/20
92.61.240.0 - 92.61.255.255

162.217.36.0/22
162.217.36.0 - 162.217.39.255

199.167.64.0/22
199.167.64.0 - 199.167.67.255
1:49 pm on Feb 17, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Thank you Bobo: Filed away for future use.
I've got most of 66. blocked.
7:52 pm on Feb 17, 2014 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member



Thanks for the extra ISPrime ranges.
9:59 am on Feb 18, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Many of you will have this one, which I unaccountably let through. (I'm busy moving our sites after a decade with a splendid-but-even-more-retro-than-me host.)

Arch NY nasty:
Digital Ocean Inc. NY Simple Cloud Hosting

Obeyed robots.txt but nonetheless unwelcome and now blocked:
107.170.0.0 - 107.170.255.255 107.170.0.0/16 Blocked
OriginAS: AS14061, AS62567, AS46652


107.170.42.10 - - [18/Feb/2014] "GET /robots.txt HTTP/1.1" 200 670 "-" "Mozilla/5.0 (compatible; spbot/4.0.7; +http://OpenLinkProfiler.org/bot )"
1:52 pm on Feb 18, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



inetnum: 185.38.249.0 - 185.38.249.255
route: 185.38.248.0/22
netname: SPRINT-SDC-FIRE
descr: Sprint Data Center Customer
country: PL

Comment spammer from 185.38.249.217.

----------------------------------------------------
Aeori Web Hosting (has more ranges)
NetRange: 68.234.0.0 - 68.234.31.255
CIDR: 68.234.0.0/19
country: US
10:52 pm on Feb 19, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month




Serverius
5.255.72.0/22
5.255.72.0 - 5.255.75.255
12:40 pm on Feb 20, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Gigas Hosting SL - from Spain

5.56.60.0/22
5.56.60.0 - 5.56.63.255

5.56.56.0/22
5.56.56.0 - 5.56.59.255

146.255.96.0 - 146.255.99.255
146.255.96.0/22

146.255.100.0 - 146.255.103.255
146.255.100.0/22
7:50 pm on Feb 20, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Thanks Blend27. I didn't have either of the broadened ranges. Just had the /22's. So...

These:
5.56.60.0/22
5.56.60.0 - 5.56.63.255
5.56.56.0/22
5.56.56.0 - 5.56.59.255

Can be condensed to:
5.56.60.0/21
5.56.56.0 - 5.56.63.255

And these:
146.255.96.0 - 146.255.99.255
146.255.96.0/22
146.255.100.0 - 146.255.103.255
146.255.100.0/22

Can be condensed to:
146.255.96.0 - 146.255.103.255
146.255.96.0/21
2:51 am on Feb 21, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Thanks keyplyr,

These were a morning quickie, 2 IPs from one range were acting up, so I listed all ranges I had.

Would never happen again... :)
8:26 am on Feb 27, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month





Fiber Grid (Layered Tech)

165.231.0.0 - 165.231.255.255
165.231.0.0/16

196.196.0.0 - 196.196.255.255
196.196.0.0/16
9:09 am on Feb 28, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month




This server range may have some broadband in there, but I've been getting repeat offenders from:

fibersunucu.com.tr
217.195.192.0/20
217.195.192.0 - 217.195.207.255


Which contains what I had formerly noted as:
Buyurl
217.195.202.0/24
217.195.202.0 - 217.195.202.255
7:04 pm on Feb 28, 2014 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member



I had that, too. Now set the /20 to TR. The band just above it is a Russian server range, by the way.
10:48 pm on Feb 28, 2014 (gmt 0)

WebmasterWorld Administrator 5+ Year Member Top Contributors Of The Month



I'm getting bad actors from XO Communications' ALGX at 216.0.0.0 - 216.5.255.255 216.0.0.0/14

And Mainstream Consulting's MCGNET at
64.202.240.0 - 64.202.255.255 64.202.240.0/20

And TOQEN-NET at
198.41.96.0 - 198.41.127.255 198.41.96.0/19

Most interesting was : "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" trying some sql injection from 222.178.10.2XX


(Edited to replace missing tabs with spaces/readability..)
2:02 am on Mar 1, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month





My XO list:

207.155.128.0 - 207.155.255.255
207.155.128.0/17

208.176.0.0 - 208.177.255.255
208.176.0.0/15

216.0.0.0 - 216.5.255.255
216.0.0.0/14
3:19 am on Mar 1, 2014 (gmt 0)

WebmasterWorld Administrator 5+ Year Member Top Contributors Of The Month



Thank you, I did not have the 207 group, I only had one previous note for XO anywhere.
12:37 pm on Mar 1, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



You Gents are far too soft on 217.
Get some Turkish friends to tell you why.
9:54 pm on Mar 1, 2014 (gmt 0)

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member



My XO list below. As listed they are full not-blocked ranges. A few have blocked sub-ranges within them.

64.0.0.0 - 64.3.255.255
64.244.0.0 - 64.245.255.255
65.44.0.0 - 65.47.255.255
66.88.0.0 - 66.89.255.255
66.236.0.0 - 66.239.255.255
67.88.0.0 - 67.95.255.255
67.104.0 - 67.111.255.255
67.152.0.0 - 67.155.255.255
71.4.0.0 - 71.5.255.255
206.83.64.0 - 206.83.95.255
206.111.0.0 - 206.111.255.255
206.205.0.0 - 206.205.255.255
207.86.0.0 - 207.88.255.255
207.155.128.0 - 207.155.255.255
207.238.0.0 - 207.239.255.255
208.36.0.0 - 208.37.255.255
208.176.0.0 - 208.177.255.255
209.31.0.0 - 209.31.255.255
209.116.0.0 - 209.119.255.255
209.164.0.0 - 209.164.63.255
209.220.0.0 - 209.220.255.255
216.0.0.0 - 216.5.255.255
216.112.0.0 - 216.112.255.255
216.120.0.0 - 216.120.127.255
216.156.0.0 - 216.156.255.255
8:38 am on Mar 5, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month




QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?
2:58 pm on Mar 5, 2014 (gmt 0)



QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?


I also have:

199.195.140.0/22
199.195.140.0 - 199.195.143.255
3:56 pm on Mar 5, 2014 (gmt 0)

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



QuickWeb Technologies LLC (QTL-6)
Corporate Colocation Inc. (CORPO-6)
CORPCOLO-66-117-11-16-29 66.117.11.16 - 66.117.11.23 66.117.0.0/20
QUICKWEB-NET 198.154.180.0 - 198.154.183.255 198.154.180.0/22
54046-QUICKWEB-NET-USA 199.231.232.0 - 199.231.235.255 199.231.232.0/22
QUICKWEB-USA-NET 199.195.140.0 - 199.195.143.255 199.195.140.0/22
QUICKWEB-NET-USA 199.83.100.0 - 199.83.103.255 199.83.100.0/22
CORPCOLO-74-124-208-128-27 74.124.208.128 - 74.124.208.159 74.124.192.0/19
CORPCOLO-205-134-242-112-30 205.134.242.112 - 205.134.242.115 205.134.224.0/19
CORPCOLO-205-134-242-116-30 205.134.242.116 - 205.134.242.119 205.134.224.0/19

Corporate Colocation Inc. (CORPO-6)
[whois.arin.net...]
7:10 pm on Mar 5, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month





Thanks for the XO and the QuickWeb ranges.
7:34 am on Mar 6, 2014 (gmt 0)



I apologize for my stupidity, but I must ask why our IPs are on this forum as a "server farm".

Also, the 'Web Africa Proxy' comment was a proxy registration of our ASN IRR object on RIPE by the company 'Web Africa'.

We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

If you have issues with any of our customers you can report them to abuse@quadranet.com. You can also confirm the assignment size by querying our rWHOIS server at rwhois.quadranet.com on port 4321.
8:51 am on Mar 6, 2014 (gmt 0)

WebmasterWorld Senior Member keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



I must ask why our IPs are on this forum as a "server farm"...
We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

Yes, you just described a server farm.

We block IP ranges assigned to server farms since no human traffic results from servers, only robots, most of which conduct bad behavior (data mining, hacking, scraping content, etc.) We do allow some robots that have been determined to be beneficial. This is done on a case by case basis.

Thanks for the abuse contact & query info.
5:20 pm on Mar 6, 2014 (gmt 0)



Thanks keyplyr.

Note that most of our IP space is in-use for hosters and enterprise customers (eg. bittorrent.com) versus 'scrapers'. There are a number of eyeballs on our network. (TOR nodes, VPN companies, and MetroE/T1s)

Blocking our ranges carte blanche will result in some legitimate users being blocked.
7:26 pm on Mar 6, 2014 (gmt 0)

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Blocking our ranges carte blanche will result in some legitimate users being blocked.


You mean like this one hammering for PHP vulnerabilities!

96.44.189.102 - - [01/Mar/2013:13:01:20 -0500]

or this one

198.55.109.18 - - [02/Nov/2013:17:45:27 -0600]
7:32 pm on Mar 6, 2014 (gmt 0)



wilderness,

Thanks for the info, I'm going to PM you to hopefully deal with those. The first one is a TOR node, but logs will help so I can speak with the customer about hopefully blocking some abuse.
7:45 pm on Mar 6, 2014 (gmt 0)

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Ive the IP ranges denied and a resolution in place.

Thanks anyway.
3:18 pm on Mar 7, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Somebody please give me a full list of Quadranet IPs urgently...
4:14 pm on Mar 7, 2014 (gmt 0)

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month



Their on page 2 of this thread. No reason to duplicate.
3:36 am on Mar 8, 2014 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Roger Don, it was intended as a rhetorical comment on Quadranet personnel :)
This 109 message thread spans 4 pages: 109
 

Featured Threads

Hot Threads This Week

Hot Threads This Month