Server Farms - July 2018

Continuing discussion of hosting company IP ranges

[keyplyr]

Continuation of the Server Farm threads.

This is where we report data center IP ranges as they are discovered or change in the rapidly evolving assigned IP landscape.

Past server farm threads:

• Jan 2018 [webmasterworld.com...]
  
  
• Jan 2017 [webmasterworld.com...]
  
  
• June 2016 [webmasterworld.com...]
  
  
• Jan 2016 [webmasterworld.com...]
  
  
• Nov 2015 [webmasterworld.com...]
  
  
• Jul 2015 [webmasterworld.com...]
  
  
• Feb 2015 [webmasterworld.com...]
  
  
• Aug 2014 [webmasterworld.com...]
  
  
• Apr 2014 [webmasterworld.com...]
  
  
• Feb 2014 [webmasterworld.com...]
  
  
• Sep 2013 [webmasterworld.com...]
  
  
• May 2013 [webmasterworld.com...]
  
  
• Mar 2013 [webmasterworld.com...]
  
  
• May 2012 [webmasterworld.com...]
  

[not2easy]

CENTEXHOSTING
185.143.243.0 - 185.143.243.255
185.143.243.0/24

[not2easy]

I just did a lookup on "116.203.43.xxx" and Apnic returned a totally useless range: 116.0.0.0 - 119.255.255.255 listed as "netname: APNIC-AP" - well, sure. Somewhere in there.

Does anyone have a better guess?

[ClosedForLunch]

@not2easy

116.203.32.0 - 116.203.63.255

116.203.32.0/19

IP location in Germany - clients.your-server.de

IP owner in India - mtsindia.in

[not2easy]

Aha! So it's on Hetzner
116.202.0.0 - 116.203.255.255
116.202.0.0/15

[blend27]

New WORLDSTREAM range

185.180.220.0 - 185.180.223.255
185.180.220.0/22

[not2easy]

New OVH (for me anyway)
139.99.0.0 - 139.99.255.255
139.99.0.0/16

[not2easy]

New DigitalOcean scraper (search here found nothing though reg date is 2016-10-06)
165.227.0.0 - 165.227.255.255
165.227.0.0/16

[not2easy]

New WideOpenWest login attempts requesting wp-login on non-wp site, human UA.
(search here found nothing though reg date is not new)
96.27.0.0 - 96.27.255.255
96.27.0.0/16

[blend27]

RU, ERAHOST.PRO
194.61.24.0 - 194.61.27.255
194.61.24.0/23

[dstiles]

Actually 194.61.24.0/22

[Steven29]

Erahost.pro
92.246.76.0 - 92.246.79.255
92.246.76.0/22


ProxyMillion / HostRoyale


185.245.20.0-185.245.23.255
185.245.20.0/22

185.174.156.0-185.174.159.255
185.174.156.0/22

194.36.96.0-194.36.99.255
194.36.96.0/22

45.10.236.0-45.10.239.255
45.10.236.0/22

86.105.183.0-86.105.183.255
86.105.183.0/24

89.44.247.0-89.44.247.255
89.44.247.0/24

89.44.205.0-89.44.205.255
89.44.205.0/24

45.252.188.0-45.252.191.255
45.252.188.0/22

77.246.152.0-77.246.155.255
77.246.152.0/22

103.221.232.0-103.221.235.255
103.221.232.0/22

93.115.0.0-93.115.0.255
93.115.0.0/24

185.108.104.0-185.108.105.255
185.108.104.0/23

89.35.249.0-89.35.249.255
89.35.249.0/24





obiz.co.il
185.83.220.0-185.83.223.255
185.83.220.0/22

global-host.net
141.98.83.0-141.98.83.255
141.98.83.0/24

flyservers.com
141.98.82.0-141.98.82.255
141.98.82.0/24

clouding.io
185.166.212.0-185.166.215.255
185.166.212.0/22

tektonic.net
108.161.128.0-108.161.143.255
108.161.128.0/20

friendhosting.net
195.245.112.0-195.245.113.255
195.245.112.0/23

thinkxen.com
103.37.232.0-103.37.235.255
103.37.232.0/22

deluxe-host.com
67.51.218.0-67.51.218.255
67.51.218.0/24

ukwebhosting
91.208.99.0-91.208.99.255
91.208.99.0/24

geniusit.net
103.116.164.0-103.116.167.255
103.116.164.0/22

firsttheberg.com
188.213.28.0-188.213.31.255
188.213.28.0/22

nephax.com
188.116.0.0-188.116.63.255
188.116.0.0-188.116.63.255


winfor.es
5.226.168.0-5.226.175.255
5.226.168.0/21

cologlobal.com
69.42.48.0-69.42.63.255
69.42.48.0/20

[Steven29]

ip-projects.de (has HostRoyale routes attached)


185.250.248.0-185.250.251.255
185.250.248.0/22

194.26.180.0-194.26.183.255
194.26.180.0/22

5.180.64.0-5.180.67.255
5.180.64.0/22

88.218.224.0-88.218.227.255
88.218.224.0/22

152.89.236.0-152.89.239.255
152.89.236.0/22

185.248.140.0-185.248.143.255
185.248.140.0/22

91.210.224.0-91.210.227.255
91.210.224.0/22

185.242.112.0-185.242.115.255
185.242.112.0/22

185.245.96.0-185.245.99.255
185.245.96.0/22

[blend27]

DirectWebH CORP(Panama)
45.227.253.0/24

[not2easy]

Thanks, blend27. I am seeing more SA activity and wondering why Lacnic Whois hands out the CIDR but leaves off the range so it adds to the time cost for their blocks.

This one is looking for 'wp-login.php' on a plain old html site, from the 17th of Nov:
Operbes, S.A. de C.V.
201.140.96/19

[blend27]

New HYDRA Range for me. Obviously a scrape attempt.

UA: RestSharp/106.6.10.0

185.141.206.0 - 185.141.207.255
185.141.206.0/23

[blend27]

51.77.0.0 - 51.77.255.255
51.77.0.0/16

OVH ^^that just popped up.

[not2easy]

I saw an attempt at WP login on a plain html site from this range on 11/14/19 but I thought it was just another OVH I had missed. TY for sharing it, blend27.

[not2easy]

162.240.0.0 - 162.241.255.255
162.240.0.0/15

UNIFIEDLAYER (BLUEH-2)

[System]

January 2020 - Started a new thread to continue this resource:
New thread at: search_engine_spiders/4980280.htm [webmasterworld.com]

[edited by: not2easy at 6:47 pm (utc) on Jan 17, 2020]