OK, who's chummy with RIPE ranges? I've been doing some housecleaning and find an awful lot of ranges that are broken into suspiciously small segments (< 24) and/or divided among suspiciously many countries. Some may be cell phones and some may be sublets, but naturally I suspect some unidentified server farms hiding in there.
These are the ranges I looked up, and what-if-anything I learned. Most of the names don't mean anything to me.
5.255.152-159
Free lookup says Marktplaats NL. Could be anything.
31.160-167
31.160 is KPN Internet solutions. Sounds vaguely familiar. Not sure about the rest.
37.123.208.0/21
Global Layer. Have I heard of them?
46.231.112-119
Tagadab. Ridiculous name, but I think it's hosting.
50.115.128-143
Take 2 Hosting. Uhm. I don't think there's any "I think..." about that one.
77.67.0.0/17
Akamai NL. What is Akamai, anyway? I recognize the name but have no idea what they do.
78.41.184.0/21
Free lookup says "European Backbone 1 of Phibee-Telecom". That looks like English, but ### if I know what it means.
79.143.80-87
What I get: .80-83 redstation; .84 hosting; .85 who-knows; .86-87 Tadbir Server -- OK, s-word.
93.112.0.0/13
This is an awfully wide range and I've never figured out if it's a Romanian server farm or just a bunch of sublets. And now we're in the part of Eastern Europe where computers are so infection-prone I just can't be bothered: one robot or botnet and they're banned. (I do feel bad for the occasional Polish human who's stuck with the wrong ISP, though.)
94.156
Who knows.
109.236.192.0/20
"Quant House". Anyone know what that means?
109.238.128.0/20
Agile Communications Group: US, UK or both. I'm always uneasy when an entity can't make up its mind what country it belongs to.
167.202.192.0/19
Amro Bank NL. OK, so they've got branches all over the place-- but how much legitimate browsing?
178.18.240.0/20
Free lookup says 240-43 Valueserver / Atomhosting. Well. Hm. Taking a wild guess, I think this might possibly be a server farm. (For one subrange, same free lookup also says "Dongwang.net" and --in German-- "Online Dienste", leading to some very, very weird mental pictures.)
185.2.148.0/22
Stackscale / Servihosting. Can't remember what country this officially belongs to.
185.7.32.0/22
"International Widespread Services". Can't argue with the name, since the company seems undecided whether it lives in Europe, Colombia or UAE.
185.13.40.0/22
Portlane. Ka-ching!
185.15.56.0/22
wikimedia Europe. Well, fancy that. I guess they get a pass. At least for now.
188.65.184.0/21
Aspider Solutions International, where "international" means they live in Malta and vacation in NL, or possibly the other way around.
192.100.104.0/21 with a possible added 112-127
This is the only range I found mentioned anywhere in WebmasterWorld: there's a fairly recent thread talking about fishy activity from Nokia. (The actual range is reported as something odd, like 102-133.)
193.43.0 or 0-7
Is this a PI networks range? I never know what to do about those. I mean, wouldn't we all like to have our very own IP?
193.240
Level 3 / Global Crossing. How in the world did that slip between the cracks?
There were more on my list, but I think they might just be cell phones. Shrug.
I don't normally block ranges a priori, unless it's something like Hetzner where you know from the start that no good will come of them. But if I've labeled someone as "robot", then if I later find an unwanted visitor from that range, I can just block it without investing any more time.
