Welcome to WebmasterWorld Guest from 54.198.118.102

Forum Moderators: Ocean10000 & incrediBILL & keyplyr

Message Too Old, No Replies

Server Farms - Feb. 2014

Ongoing Hosting Data Center Discussion

     
12:20 pm on Feb 7, 2014 (gmt 0)

Administrator from US 

WebmasterWorld Administrator incredibill is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Jan 25, 2005
posts:14663
votes: 99


Continuation of the Sept 2013 thread:
[webmasterworld.com...]
11:08 am on Feb 17, 2014 (gmt 0)

Junior Member

joined:Nov 1, 2013
posts:61
votes: 2


I have a few extras for ISPrime

64.111.192.0/19
64.111.192.0 - 64.111.223.255

64.188.48.0/20
64.188.48.0 - 64.188.63.255

66.230.128.0/18
66.230.128.0 - 66.230.191.255

68.169.96.0/20
68.169.64.0 - 68.169.111.255

76.9.0.0/19
76.9.0.0 - 76.9.31.255

92.61.240.0/20
92.61.240.0 - 92.61.255.255

162.217.36.0/22
162.217.36.0 - 162.217.39.255

199.167.64.0/22
199.167.64.0 - 199.167.67.255
1:49 pm on Feb 17, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 13, 2003
posts:701
votes: 0


Thank you Bobo: Filed away for future use.
I've got most of 66. blocked.
7:52 pm on Feb 17, 2014 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3148
votes: 4


Thanks for the extra ISPrime ranges.
9:59 am on Feb 18, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 13, 2003
posts:701
votes: 0


Many of you will have this one, which I unaccountably let through. (I'm busy moving our sites after a decade with a splendid-but-even-more-retro-than-me host.)

Arch NY nasty:
Digital Ocean Inc. NY Simple Cloud Hosting

Obeyed robots.txt but nonetheless unwelcome and now blocked:
107.170.0.0 - 107.170.255.255 107.170.0.0/16 Blocked
OriginAS: AS14061, AS62567, AS46652


107.170.42.10 - - [18/Feb/2014] "GET /robots.txt HTTP/1.1" 200 670 "-" "Mozilla/5.0 (compatible; spbot/4.0.7; +http://OpenLinkProfiler.org/bot )"
1:52 pm on Feb 18, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2004
posts:1889
votes: 56


inetnum: 185.38.249.0 - 185.38.249.255
route: 185.38.248.0/22
netname: SPRINT-SDC-FIRE
descr: Sprint Data Center Customer
country: PL

Comment spammer from 185.38.249.217.

----------------------------------------------------
Aeori Web Hosting (has more ranges)
NetRange: 68.234.0.0 - 68.234.31.255
CIDR: 68.234.0.0/19
country: US
10:52 pm on Feb 19, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332



Serverius
5.255.72.0/22
5.255.72.0 - 5.255.75.255
12:40 pm on Feb 20, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2004
posts:1889
votes: 56


Gigas Hosting SL - from Spain

5.56.60.0/22
5.56.60.0 - 5.56.63.255

5.56.56.0/22
5.56.56.0 - 5.56.59.255

146.255.96.0 - 146.255.99.255
146.255.96.0/22

146.255.100.0 - 146.255.103.255
146.255.100.0/22
7:50 pm on Feb 20, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332


Thanks Blend27. I didn't have either of the broadened ranges. Just had the /22's. So...

These:
5.56.60.0/22
5.56.60.0 - 5.56.63.255
5.56.56.0/22
5.56.56.0 - 5.56.59.255

Can be condensed to:
5.56.60.0/21
5.56.56.0 - 5.56.63.255

And these:
146.255.96.0 - 146.255.99.255
146.255.96.0/22
146.255.100.0 - 146.255.103.255
146.255.100.0/22

Can be condensed to:
146.255.96.0 - 146.255.103.255
146.255.96.0/21
2:51 am on Feb 21, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2004
posts:1889
votes: 56


Thanks keyplyr,

These were a morning quickie, 2 IPs from one range were acting up, so I listed all ranges I had.

Would never happen again... :)
8:26 am on Feb 27, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332




Fiber Grid (Layered Tech)

165.231.0.0 - 165.231.255.255
165.231.0.0/16

196.196.0.0 - 196.196.255.255
196.196.0.0/16
9:09 am on Feb 28, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332



This server range may have some broadband in there, but I've been getting repeat offenders from:

fibersunucu.com.tr
217.195.192.0/20
217.195.192.0 - 217.195.207.255


Which contains what I had formerly noted as:
Buyurl
217.195.202.0/24
217.195.202.0 - 217.195.202.255
7:04 pm on Feb 28, 2014 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3148
votes: 4


I had that, too. Now set the /20 to TR. The band just above it is a Russian server range, by the way.
10:48 pm on Feb 28, 2014 (gmt 0)

Administrator from US 

WebmasterWorld Administrator not2easy is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2006
posts:3228
votes: 146


I'm getting bad actors from XO Communications' ALGX at 216.0.0.0 - 216.5.255.255 216.0.0.0/14

And Mainstream Consulting's MCGNET at
64.202.240.0 - 64.202.255.255 64.202.240.0/20

And TOQEN-NET at
198.41.96.0 - 198.41.127.255 198.41.96.0/19

Most interesting was : "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" trying some sql injection from 222.178.10.2XX


(Edited to replace missing tabs with spaces/readability..)
2:02 am on Mar 1, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332




My XO list:

207.155.128.0 - 207.155.255.255
207.155.128.0/17

208.176.0.0 - 208.177.255.255
208.176.0.0/15

216.0.0.0 - 216.5.255.255
216.0.0.0/14
3:19 am on Mar 1, 2014 (gmt 0)

Administrator from US 

WebmasterWorld Administrator not2easy is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Dec 27, 2006
posts:3228
votes: 146


Thank you, I did not have the 207 group, I only had one previous note for XO anywhere.
12:37 pm on Mar 1, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 13, 2003
posts:701
votes: 0


You Gents are far too soft on 217.
Get some Turkish friends to tell you why.
9:54 pm on Mar 1, 2014 (gmt 0)

Senior Member from GB 

WebmasterWorld Senior Member dstiles is a WebmasterWorld Top Contributor of All Time 5+ Year Member Top Contributors Of The Month

joined:May 14, 2008
posts:3148
votes: 4


My XO list below. As listed they are full not-blocked ranges. A few have blocked sub-ranges within them.

64.0.0.0 - 64.3.255.255
64.244.0.0 - 64.245.255.255
65.44.0.0 - 65.47.255.255
66.88.0.0 - 66.89.255.255
66.236.0.0 - 66.239.255.255
67.88.0.0 - 67.95.255.255
67.104.0 - 67.111.255.255
67.152.0.0 - 67.155.255.255
71.4.0.0 - 71.5.255.255
206.83.64.0 - 206.83.95.255
206.111.0.0 - 206.111.255.255
206.205.0.0 - 206.205.255.255
207.86.0.0 - 207.88.255.255
207.155.128.0 - 207.155.255.255
207.238.0.0 - 207.239.255.255
208.36.0.0 - 208.37.255.255
208.176.0.0 - 208.177.255.255
209.31.0.0 - 209.31.255.255
209.116.0.0 - 209.119.255.255
209.164.0.0 - 209.164.63.255
209.220.0.0 - 209.220.255.255
216.0.0.0 - 216.5.255.255
216.112.0.0 - 216.112.255.255
216.120.0.0 - 216.120.127.255
216.156.0.0 - 216.156.255.255
8:38 am on Mar 5, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332



QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?
2:58 pm on Mar 5, 2014 (gmt 0)

Junior Member

joined:Nov 1, 2013
posts:61
votes: 2


QuickWeb

103.246.248.0/24
103.246.248.0 - 103.246.248.255

199.83.100.0/22
199.83.100.0 - 199.83.103.255

More?


I also have:

199.195.140.0/22
199.195.140.0 - 199.195.143.255
3:56 pm on Mar 5, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5459
votes: 3


QuickWeb Technologies LLC (QTL-6)
Corporate Colocation Inc. (CORPO-6)
CORPCOLO-66-117-11-16-29 66.117.11.16 - 66.117.11.23 66.117.0.0/20
QUICKWEB-NET 198.154.180.0 - 198.154.183.255 198.154.180.0/22
54046-QUICKWEB-NET-USA 199.231.232.0 - 199.231.235.255 199.231.232.0/22
QUICKWEB-USA-NET 199.195.140.0 - 199.195.143.255 199.195.140.0/22
QUICKWEB-NET-USA 199.83.100.0 - 199.83.103.255 199.83.100.0/22
CORPCOLO-74-124-208-128-27 74.124.208.128 - 74.124.208.159 74.124.192.0/19
CORPCOLO-205-134-242-112-30 205.134.242.112 - 205.134.242.115 205.134.224.0/19
CORPCOLO-205-134-242-116-30 205.134.242.116 - 205.134.242.119 205.134.224.0/19

Corporate Colocation Inc. (CORPO-6)
[whois.arin.net...]
7:10 pm on Mar 5, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332




Thanks for the XO and the QuickWeb ranges.
7:34 am on Mar 6, 2014 (gmt 0)

New User

joined:Mar 6, 2014
posts: 3
votes: 0


I apologize for my stupidity, but I must ask why our IPs are on this forum as a "server farm".

Also, the 'Web Africa Proxy' comment was a proxy registration of our ASN IRR object on RIPE by the company 'Web Africa'.

We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

If you have issues with any of our customers you can report them to abuse@quadranet.com. You can also confirm the assignment size by querying our rWHOIS server at rwhois.quadranet.com on port 4321.
8:51 am on Mar 6, 2014 (gmt 0)

Moderator This Forum from US 

WebmasterWorld Administrator keyplyr is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Sept 26, 2001
posts:8300
votes: 332


I must ask why our IPs are on this forum as a "server farm"...
We are a datacenter that sell dedicated servers, collocation cabinets and suites/cages.

Yes, you just described a server farm.

We block IP ranges assigned to server farms since no human traffic results from servers, only robots, most of which conduct bad behavior (data mining, hacking, scraping content, etc.) We do allow some robots that have been determined to be beneficial. This is done on a case by case basis.

Thanks for the abuse contact & query info.
5:20 pm on Mar 6, 2014 (gmt 0)

New User

joined:Mar 6, 2014
posts: 3
votes: 0


Thanks keyplyr.

Note that most of our IP space is in-use for hosters and enterprise customers (eg. bittorrent.com) versus 'scrapers'. There are a number of eyeballs on our network. (TOR nodes, VPN companies, and MetroE/T1s)

Blocking our ranges carte blanche will result in some legitimate users being blocked.
7:26 pm on Mar 6, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5459
votes: 3


Blocking our ranges carte blanche will result in some legitimate users being blocked.


You mean like this one hammering for PHP vulnerabilities!

96.44.189.102 - - [01/Mar/2013:13:01:20 -0500]

or this one

198.55.109.18 - - [02/Nov/2013:17:45:27 -0600]
7:32 pm on Mar 6, 2014 (gmt 0)

New User

joined:Mar 6, 2014
posts: 3
votes: 0


wilderness,

Thanks for the info, I'm going to PM you to hopefully deal with those. The first one is a TOR node, but logs will help so I can speak with the customer about hopefully blocking some abuse.
7:45 pm on Mar 6, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5459
votes: 3


Ive the IP ranges denied and a resolution in place.

Thanks anyway.
3:18 pm on Mar 7, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 13, 2003
posts:701
votes: 0


Somebody please give me a full list of Quadranet IPs urgently...
4:14 pm on Mar 7, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member wilderness is a WebmasterWorld Top Contributor of All Time 10+ Year Member Top Contributors Of The Month

joined:Nov 11, 2001
posts:5459
votes: 3


Their on page 2 of this thread. No reason to duplicate.
3:36 am on Mar 8, 2014 (gmt 0)

Senior Member

WebmasterWorld Senior Member 10+ Year Member

joined:Oct 13, 2003
posts:701
votes: 0


Roger Don, it was intended as a rhetorical comment on Quadranet personnel :)
This 109 message thread spans 4 pages: 109