Server Farms - July 2018

Continuing discussion of hosting company IP ranges

[keyplyr]

Continuation of the Server Farm threads.

This is where we report data center IP ranges as they are discovered or change in the rapidly evolving assigned IP landscape.

Past server farm threads:

• Jan 2018 [webmasterworld.com...]
  
  
• Jan 2017 [webmasterworld.com...]
  
  
• June 2016 [webmasterworld.com...]
  
  
• Jan 2016 [webmasterworld.com...]
  
  
• Nov 2015 [webmasterworld.com...]
  
  
• Jul 2015 [webmasterworld.com...]
  
  
• Feb 2015 [webmasterworld.com...]
  
  
• Aug 2014 [webmasterworld.com...]
  
  
• Apr 2014 [webmasterworld.com...]
  
  
• Feb 2014 [webmasterworld.com...]
  
  
• Sep 2013 [webmasterworld.com...]
  
  
• May 2013 [webmasterworld.com...]
  
  
• Mar 2013 [webmasterworld.com...]
  
  
• May 2012 [webmasterworld.com...]
  

[keyplyr]

cogecopeer1.com
83.222.224.0 - 83.222.255.255
83.222.224.0/19

[Dimitri]

Just a one time off-topic comment. Thank you for the Server Farms topics, this is a source of a lot of valuable information when it comes to analyze traffic, and block such or such attempts.

[keyplyr]

AWS
18.208.0.0 - 18.208.255.255
18.208.0.0/16

[Steven29]

two more new AWS also

18.204.0.0/14
18.232.0.0/16

[keyplyr]

Thanks Steven29,

We list the full range & the CIDR for those who may use one or the other. Those AWS ranges actually are:

18.202.0.0 - 18.207.255.255
18.204.0.0/14, 18.202.0.0/15

and of course the AWS right next door:
18.208.0.0 - 18.208.255.255
18.208.0.0/16


Note: 185.38.185.0/24 & 185.38.187.0/24 (removed) belong to new-wind.biz, not a server farm

[Steven29]

Of course! Thank you for providing a place to post this information! I will try to post a full subnet, instead of two and make sure i'm not double posting any information (will search first).

neohost.net
93.179.68.0/23

[keyplyr]

Again, please post the full range & the CIDR, thanks.

neohost.net
93.179.68.0 - 93.179.69.255
93.179.68.0/23

Here's another neohost.net:
79.133.98.0 - 79.133.99.255
79.133.98.0/23

[Steven29]

Hi Keyplr

Oops, OK. I get it now..

New Digital Ocean
178.128.0.0 - 178.128.255.255
178.128.0.0/16

Please check the subnet is correct on this one (it was not available in whois). /16

[Steven29]

sentris.com
64.140.128.0 - 64.140.143.255
64.140.128.0/20

[Steven29]

Amazon
18.209.0.0 - 18.211.255.255
18.210.0.0/15, 18.209.0.0/16

Amazon
18.212.0.0 - 18.212.255.255
18.212.0.0/16

Amazon
18.213.0.0-18.213.255.255
18.213.0.0/16

Amazon
18.214.0.0 - 18.214.255.255
18.214.0.0/16

Amazon
18.215.0.0 - 18.217.255.255
18.215.0.0/16, 18.216.0.0/15

Amazon
18.218.0.0 - 18.218.255.255
18.218.0.0/16

Amazon
18.219.0.0 - 18.228.255.255
18.228.0.0/16, 18.224.0.0/14, 18.220.0.0/14, 18.219.0.0/16

Maybe easier to post this:

Amazon
18.194.0.0-18.228.255.255
18.194.0.0/15
18.196.0.0/14
18.200.0.0/13
18.208.0.0/12
18.224.0.0/14
18.228.0.0/16

[keyplyr]

Thanks Steven29

More Amazon IP ranges [webmasterworld.com]

[keyplyr]

serverdedicati.aruba.it
89.40.116.0 - 89.40.119.255
89.40.116.0/22

[Steven29]

quickpacket.com
104.247.216.0 - 104.247.223.255
104.247.216.0/21

[keyplyr]

Steven29, that quickpacket.com is actually:
104.247.192.0 - 104.247.223.255
104.247.192.0/19

Often, IP lookup services will display ranges registered by date and not include those already allocated to that company. What I found helpful is to expand on either end to see if there are other ranges next door registered at a different time, but to the same company.

[keyplyr]

rh-tec.de
95.143.160.0 - 95.143.172.255
95.143.160.0/20

[thetrasher]

DigitalOcean
142.93.0.0 - 142.93.255.255
142.93.0.0/16
RegDate: 2018-07-12

[keyplyr]

TheFirst-RU
94.250.254.0 - 94.250.255.255
94.250.254.0/23

[Steven29]

Quality Networks, Inc.
(no url found)
37.9.44.0 - 37.9.44.255
37.9.44.0/22

5.189.205.0 - 5.189.205.255
5.189.205.0/24

5.189.206.0 - 5.189.206.255
5.189.206.0/24

5.189.207.0 - 5.189.207.255
5.189.207.0/24

5.62.153.0 - 5.62.153.255
5.62.153.0/24

5.62.154.0 - 5.62.154.255
5.62.154.0/24

5.62.155.0 - 5.62.155.255
5.62.155.0/24

5.62.156.0 - 5.62.156.255
5.62.156.0/24

5.62.157.0 - 5.62.157.255
5.62.157.0/24

5.62.158.0 - 5.62.158.255
5.62.158.0/24

5.8.46.0 - 5.8.46.255
5.8.46.0/24

5.8.45.0 - 5.8.45.255
5.8.45.0/24

5.8.44.0 - 5.8.44.255
5.8.44.0/24

95.85.81.0 - 95.85.81.255
95.85.81.0/24

5.101.222.0 - 5.101.222.255
5.101.222.0/24

5.101.221.0/24
5.101.220.0 - 5.101.220.255

5.101.220.0/24
5.101.220.0 - 5.101.220.255

5.101.219.0/24
5.101.219.0 - 5.101.219.255

5.101.218.0/24
5.101.218.0 - 5.101.218.255

91.200.83.0/24
91.200.83.0 - 91.200.83.255

185.14.193.0/24
185.14.193.0 - 185.14.193.255

79.110.28.0/24
79.110.28.0 - 79.110.28.255

79.110.29.0/24
79.110.29.0 - 79.110.29.255

79.110.30.0/24
79.110.30.0 - 79.110.30.255

79.110.31.0/24
79.110.31.0 - 79.110.31.255

37.9.44.0/24
37.9.44.0 - 37.9.44.255

37.9.45.0/24
37.9.45.0 - 37.9.45.255

95.181.218.0/24
95.181.218.0 - 95.181.218.255

5.101.218.0/24
5.101.218.0 - 5.101.218.255

5.101.219.0/24
5.101.219.0 - 5.101.219.255

5.101.221.0/24
5.101.221.0 - 5.101.221.255

93.179.89.0/24
93.179.89.0 - 93.179.89.255

93.179.90.0/24
93.179.90.0 - 93.179.90.255

93.179.91.0/24
93.179.91.0 - 93.179.91.255

5.8.44.0/24
5.8.44.0 - 5.8.44..255

5.8.45.0/24
5.8.45.0 - 5.8.45.255

5.8.46.0/24
5.8.46.0 - 5.8.46.255


Kalugahost
185.46.84.0 - 185.46.87.255
185.46.84.0/22

gigenet.com
191.96.164.0 - 191.96.164.255
191.96.164.0/24

[keyplyr]

(no url found)

Quality Networks, Inc. is: qualityhostonline.com

Corrections*:

5.8.44.0 - 5.8.47.255
5.8.44.0/22

5.62.152.0 - 5.62.159.255
5.62.152.0/21

5.101.216.0 - 5.101.223.255 (the last /24 is their datacenter depo40.ru)
5.101.216.0/21

5.189.204.0 - 5.189.207.255
5.189.204.0/22

37.9.44.0 - 37.9.47.255
37.9.44.0/22

79.110.28.0 - 79.110.31.255
79.110.28.0/22

91.200.80.0 - 91.200.83.255
91.200.80.0/22

93.179.90.0 - 93.179.91.255
93.179.90.0/23

95.85.80.0 - 95.85.81.255
95.85.80.0/23

185.14.192.0 - 185.14.195.255
185.14.192.0/22

*expand on either end to see if there are other ranges next door. If so, they can usually be combined.

[Steven29]

nwstack.com
190.112.200.0 - 190.112.201.255
190.112.200.0/23

190.112.203.0 - 190.112.203.255
190.112.203.0/24

190.112.192.0 - 190.112.195.255
190.112.192.0/22

Threads showing what these do: <snip>


involta.com
206.206.160.0 - 206.207.255.255
206.207.0.0/16
206.206.160.0/19
206.206.192.0/18


Previous thread with more ips and information: [webmasterworld.com...]

- - -

Search Engine Spiders & User Agent Forum Charter [webmasterworld.com]

[edited by: keyplyr at 7:35 pm (utc) on Jul 21, 2018]
[edit reason] Removed outside links [/edit]

[Steven29]

www.thecia.net (Complete Internet Access)
206.40.160.0/20
206.40.160.0 - 206.40.175.255

[keyplyr]

The home page hasn't been updated in 16 years, which may indicate whatever was once a business is no longer the same operation. Or sometimes they keep an old home page up as cover.

Looks like there are a couple dozen biz websites using ranges in that /20. I wonder how many humans using it for connectivity?

[Steven29]

Digital Ocean
209.97.128.0/18
209.97.128.0 - 209.97.191.255

Madgenius.com
192.119.160.0/20
192.119.160.0 - 192.119.175.255

More Quality Host
79.110.17.0/24
79.110.17.0 - 79.110.17.255

79.110.18.0/24
79.110.18.0 - 79.110.18.255

79.110.19.0/24
79.110.19.0 - 79.110.19.255

QuickPacket
64.187.232.0/21
64.187.224.0 - 64.187.239.255

199.195.140.0/23
199.195.140.0 - 199.195.141.255

Budget Node
167.160.80.0/20
167.160.80.0 - 167.160.95.255

Cube Notion / Server Crate
216.126.224.0/20
216.126.224.0 - 216.126.239.255

RootLevelTech.com
23.239.144.0/24
23.239.144.0 - 23.239.144.255

dacentec.com
104.171.112.0/20
104.171.112.0 - 104.171.127.255

quadranet.com
104.223.114.128/25
104.223.114.128 - 104.223.114.255

Smarthost
23.228.251.96/27
23.228.251.96 - 23.228.251.127

[keyplyr]

RE: involta.com 206.206.160.0 - 206.207.255.255

206.206.192.0 - 206.206.255.255 is used by Arizona Tri-University Network

[keyplyr]

That rootleveltech.com 23.239.144.0 - 23.239.144.255 is actually:
23.239.128.0 - 23.239.159.255
23.239.128.0/19


And that quadranet.com range 104.223.114.128 - 104.223.114.255 is actually:
104.223.0.0 - 104.223.127.255
104.223.0.0/17


And that Smarthost range 23.228.251.96 - 23.228.251.127 is actually:
psychz.net
23.228.192.0 - 23.228.255.255
23.228.192.0/18

[Steven29]

Hi Keyplyr,

Thank you! I try my best and if I am unsure I post the least block that I know for sure is botting.

zare.com
89.35.28.0/22
89.35.28.0 - 89.35.31.255

alibabacloud.com
47.89.128.0/18
47.89.128.0 - 47.89.191.255

[keyplyr]

alibaba.com is actually:
47.52.0.0 - 47.52.255.255
47.52.0.0/16
47.88.0.0 - 47.91.255.255
47.88.0.0/14

I'd be careful about blocking Alibaba. Millions of humans use those ranges, and a lot of apps.

[Steven29]

Digital Ocean
159.65.0.0/16
159.65.0.0 - 159.65.255.255

Quonix.net
76.8.48.0/20
76.8.48.0 - 76.8.63.255

netins.net
167.142.0.0/16
167.142.0.0 - 167.142.255.255

HostDime
5.226.173.0/24
5.226.173.0 - 5.226.173.255

Cybercon.com
64.73.192.0/19
64.73.192.0 - 64.73.223.255

[keyplyr]

Thanks Steven29

That hostdime is actually:
comforthost.net (could be reseller)
5.226.168.0 - 5.226.175.255
5.226.168.0/21