Server Farms - June 2016

Continuation of the discussion of hosting company IP ranges

[Ocean10000]

Continuation of the Server Farm threads.

This is where we report data center IP ranges as they are discovered or change in the rapidly evolving assigned IP landscape.

Past server farm threads:

• Jan 2016 [webmasterworld.com...]
  
  
• Nov 2015 [webmasterworld.com...]
  
  
• Jul 2015 [webmasterworld.com...]
  
  
• Feb 2015 [webmasterworld.com...]
  
  
• Aug 2014 [webmasterworld.com...]
  
  
• Apr 2014 [webmasterworld.com...]
  
  
• Feb 2014 [webmasterworld.com...]
  
  
• Sep 2013 [webmasterworld.com...]
  
  
• May 2013 [webmasterworld.com...]
  
  
• Mar 2013 [webmasterworld.com...]
  
  
• May 2012 [webmasterworld.com...]
  

[keyplyr]

positive-internet.com hosting
80.87.128.0 - 80.87.143.255
80.87.128.0/20

[blend27]

I think this is myloc.de, well it is knew to me. Someone named Sergey is renting a few dozen IPs from them.

217.79.176.0 - 217.79.191.255
217.79.176.0/20

[keyplyr]

interset.ru
176.113.120.0 - 176.113.127.255
176.113.120.0/21

interset.ru seems to be managed by a company named netup.ru who hosts at digitalocean.com GB.

[blend27]

halocolocation.com
206.41.160.0 - 206.41.191.255
206.41.160.0/19
one more for the equal sign in UA attempt:

=Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16

[keyplyr]

New ovh.com
91.134.0.0 - 91.134.255.255
91.134.0.0/16

[dstiles]

91.134.0.0/16 - nasty: used to be bulgarian cable!

[not2easy]

Snagged a new (for me) Hetzner today (formerly ARIN, now RIPE) I've seen this block just once in the past, but for whatever reason it wasn't identified in my main file.
HETZNER-RZ-BLK-ERX4
138.201.0.0 - 138.201.255.255
138.201.0.0/16

[blend27]

I thought I had all GB covered, but then...

Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent

Who does things like that anymore?..

UK Dedicated Servers Limited
UK-UKSERVERS-20120626
5.101.168.0 - 5.101.175.255
5.101.168.0/21

[keyplyr]

"Who does things like that anymore?"

Likely someone running a very old script they bought at the bargin store on the dark web.

[blend27]

Someone crawls into a dark web store.

Sayz I got almost no money, Give me a script!

Reply: did you read robots.txt?

:)

[blend27]

re:last HETZNER @not2easy

There were some really nasty activity that started on 2016-02-25 at 18:31:32 GMT from that range.

static.NN.16.201.138.clients.your-server.de was simply toxic, many of them.

[keyplyr]

Host: h1host.ru
91.105.232.0 - 91.105.239.255
91.105.232.0/21

[dstiles]

For the record, I have the following for UK Dedicated Servers Limited but thanks for the above one, which I did not have before! :)

5.101.136.0 - 5.101.151.255
5.101.168.0 - 5.101.175.255
31.132.0.0 - 31.133.7.255
77.74.192.0 - 77.74.199.255
77.75.120.0 - 77.75.127.254
78.110.160.0 - 78.110.175.255
78.157.192.0 - 78.157.223.255
81.19.176.0 - 81.19.191.255
94.229.64.0 - 94.229.79.255
178.159.0.0 - 178.159.15.255
185.17.24.0 - 185.17.27.255
185.103.96.0 - 185.103.99.255

[blend27]

EIGO-SOLUTII-NET
91.233.106.0 - 91.233.106.255
91.233.106.0/24

<snip>

[edited by: keyplyr at 7:21 pm (utc) on Sep 9, 2016]
[edit reason] removed per ToS [/edit]

[keyplyr]

masterdc.com hosting
89.185.228.0 - 89.185.255.255
89.185.224.0/19

[blend27]

Bighost lv SIA(Latvia)
159.148.186.0 - 159.148.186.255
159.148.186.0/24

[keyplyr]

bizway.nl
37.143.80.0 - 37.143.87.255
37.143.80.0/21

[keyplyr]

monkeybrains.net (formerly Reliable)
199.116.72.0 - 199.116.75.255
199.116.72.0/22

San Francisco wireless ISP but also Colo & Hosting.

[blend27]

dataclub.biz - hosting(Latvia)
46.183.222.0 - 46.183.223.255
46.183.216.0/21

Caught me a nice Googlebot looking for "/phppath/php" page.

Also:
84.38.130.0 - 84.38.130.255
84.38.130.0/24
84.38.132.0 - 84.38.135.255
84.38.132.0/24
84.38.132.0 - 84.38.135.255
84.38.135.0/24

[keyplyr]

@ blend27

dataclub.me
84.38.128.0 - 84.38.135.255
84.38.128.0/21

[blend27]

IT_SERVICES(Latvia). Homepage says - Under Construction. /24 has only a few sites with very questionable content(P*lz&P*orn)
185.129.148.0 - 185.129.148.255
185.129.148.0/24

[dstiles]

I have 185.129.148.0/22 for this one (Latvia)

[keyplyr]

I have 185.129.148.0/22 for this one (Latvia)

While the /22 appears to all be Latvia servers, it looks like there are several companies leasing those ranges. For example: 185.129.151.0/24 is 2cloud.eu.

[keyplyr]

limestonenetworks.com cloud hosting

63.143.32.0 - 63.143.63.255
63.143.32.0/19

64.31.0.0 - 64.31.63.255
64.31.0.0/18

69.162.64.0 - 69.162.127.255
69.162.64.0/18

74.63.192.0 - 74.63.255.255
74.63.192.0/18

192.169.80.0 - 192.169.95.255
192.169.80.0/20

208.115.192.0 - 208.115.255.255
208.115.192.0/18

216.144.240.0 - 216.144.255.255
216.144.240.0/20

216.245.192.0 - 216.245.223.255
216.245.192.0/19

[blend27]

IPSERVER(IT Expert LLC - Russia)
195.62.52.0 - 195.62.53.255
195.62.52.0/23

Lovely Referrer: gmail.com.
Looking for "/engine/log.txt".

[Angonasec]

New Choopa range

45.76.0.0 - 45.77.255.255 45.76.0.0/15 Blocked

In conjunction with a Canadian cloud host

45.62.192.0/18 Now Ber...locked

[edited by: keyplyr at 7:11 am (utc) on Oct 13, 2016]
[edit reason] Post moved to existing server farm thread & specifics removed [/edit]

[keyplyr]

logicweb.com hosting

64.64.100.0/22
64.64.100.0 - 64.64.103.255

98.159.224.0/20
98.159.224.0 - 98.159.239.255

173.239.192.0/22
73.239.192.0 - 173.239.195.255

173.244.56.0/22
173.244.56.0 - 173.244.59.255

196.52.0.0/14
196.52.0.0 - 196.55.255.255

[blend27]

One more for VIRTUZO

172.111.0.0 - 172.111.63.255
172.111.0.0/18

previously reported at [webmasterworld.com...] msg #4747518

[blend27]

Solar Communications GmbH - Switzerland

46.28.200.0 - 46.28.207.255
46.28.200.0/21

95.183.48.0 - 95.183.63.255
95.183.48.0/20

[keyplyr]

Another Solar, a VPS in USA

65.181.64.0/18
65.181.64.0 - 65.181.127.255

66.187.96.0/20
66.187.96.0 - 66.187.111.255

69.194.192.0/20
69.194.192.0 - 69.194.207.255

209.140.128.0/18
209.140.128.0 - 209.140.191.255