135.125.0.0 - 135.125.255.255 135.125.0.0/16 created 2020-09-16
152.228.128.0 - 152.228.255.255 152.228.128.0/17 created 2021-01-06
not2easy
12:53 pm on Jan 19, 2021 (gmt 0)
I am not sure what to attribute this one to: 45.94.47.0/24 AS60781 45.94.47.0 - 45.94.47.255
The confusion is because the "Early Registrations, Transferred to RIPE NCC" shows Leaseweb but it is not registered to Leaseweb. Claims "country: BR" but "netname: IL-YEHUDA-20190705" in Israel. It's a scraper, have not viewed logs yet so no UA, just an automated scraper report/lookup for now.
blend27
6:24 pm on Feb 27, 2021 (gmt 0)
Teknosos - Turkey - seeing some scrape attempts from the first range
AS207459 <<- this has more hosting ranges assign to it, like 4 other companies, so.....
45.158.15.0 - 45.158.15.255 45.158.15.0/24
212.64.214.0 - 212.64.214.255 212.64.214.0/24
213.238.167.0 - 213.238.167.255 213.238.167.0/24
blend27
6:39 pm on Feb 27, 2021 (gmt 0)
New DediPath range for me, part of scrape attempts above ^^^
---45.94.47.0/24, I am not sure what to attribute this one to ---
Leaseweb > Scraper >> seen them here too >>> blocked...
blend27
3:41 pm on Feb 28, 2021 (gmt 0)
Single Hit from:
209.126.0.0 - 209.126.15.255 209.126.0.0/20
BTW, @wilderness reported a more wider range almost.st.st.st 20 years ago [webmasterworld.com...] at 9:21 pm on May 13, 2002 (gmt 0)
QNI1BLK Netblock: 209.126.0.0 - 209.126.127.255
:)
not2easy
4:53 pm on Feb 28, 2021 (gmt 0)
Thanks @blend27, I had one old (2013) listing for CARINET-2 (scraper) 209.126.128.0 - 209.126.255.255 209.126.128.0/17
and another one that was listed here in a previous thread as ipv4hosting I believe: 209.126.88.0 - 209.126.91.255 209.126.88.0/22
It sort of looks like 209.126.x.x changes hands but not MOs.
blend27
6:59 pm on Mar 2, 2021 (gmt 0)
Serverion BV - Netherlands - AS213035
45.85.90.0 - 45.85.91.255 45.85.90.0/23
45.85.190.0 - 45.85.190.255 45.85.190.0/24
45.153.203.0 - 45.153.203.255 45.153.203.0/24
45.152.150.0 - 45.152.151.255 45.152.150.0/23
45.145.185.0 - 45.145.186.255 45.145.185.0/23
45.144.225.0 - 45.144.225.255 45.144.225.0/24
45.133.1.0 - 45.133.1.255 45.133.1.0/24
45.130.138.0 - 45.130.138.255 45.130.138.0/24
37.46.150.0 - 37.46.150.255 37.46.150.0/24
31.210.20.0 - 31.210.20.255 31.210.20.0/24
193.239.147.0 - 193.239.147.255 193.239.147.0/24
185.239.242.0 - 185.239.243.255 185.239.242.0/23
185.102.170.0 - 185.102.171.255 185.102.170.0/23
dstiles
9:47 am on Mar 3, 2021 (gmt 0)
Thanks for those ranges!
If you check the Mounted By tag in those you will find it to be PrefixBrokers. If you check on that you can extend most ranges to /22 and /21. Your option to block or not. :)
blend27
4:19 pm on Mar 9, 2021 (gmt 0)
-- Prefixbrokers
Thanks distiles.
Well here are updated ranges for HostRoyale LLC(US) + HostRoyale Technologies Pvt Ltd(IN)
Thanks for that list. Note: a few are actually larger ranges but not easily noticed.
not2easy
5:03 am on Mar 17, 2021 (gmt 0)
New for me - scrapers from Alibaba: 47.56.0.0 - 47.57.255.255 47.56.0.0/15 Previously seen listings for Alicloud, this newer one is listed as Alibaba.com, San Mateo CA, Direct Allocation
I bet they keep acquiring new ranges, as they are being blacklisted, ... good luck for the next owner of these ranges.
jmccormac
10:46 am on Jun 25, 2021 (gmt 0)
Yep. It has some Seychelles/South African ranges as well. Sadly, African IP ranges have effectively been plundered and most of the SC ranges are not associated with the Seychelles. It also seems to run ISP proxies. Many scrapers have taken to using networks of ISP proxies.
Regards...jmcc
wilderness
12:43 am on Jun 29, 2021 (gmt 0)
Leaseweb has become massive. (LU-79 & LU (may be other subnets)) (In addition, all the non-Leaseweb ranges in 1972.241. 'appear to be other servers) Leaseweb USA, Inc. (LU-79) LU-79 172.241.24.0 - 172.241.31.255 LU-79 172.241.32.0 - 172.241.39.255 LU-79 172.255.80.0 - 172.255.83.255 LU-79 172.241.88.0 - 172.241.95.255 LU-79 172.241.112.0 - 172.241.119.255 LU-79 172.241.128.0 - 172.241.131.255 LU-79 172.241.132.0 - 172.241.135.255 LU-79 172.241.144.0 - 172.241.147.255 LU-79 172.255.148.0 - 172.255.151.255 LU-79 172.241.152.0 - 172.241.155.255 LU-79 172.241.160.0 - 172.241.163.255 LU-79 172.241.168.0 - 172.241.171.255 LU-79 172.241.184.0 - 172.241.187.255 LU-79 172.241.192.0 - 172.241.195.255 LU-79 172.241.228.0 - 172.241.231.255 LU-79 173.234.72.0 - 173.234.75.255 LU-79 173.234.224.0 - 173.234.227.255 LEASEWEB-USA-DAL-10 209.58.144.0 - 209.58.159.255 LU-79 23.105.32.0 - 23.105.32.255 LU-79 64.120.78.0 - 64.120.78.255 LU-79 67.201.48.0 - 67.201.48.255 LU-79 69.147.229.0 - 69.147.229.255 LEASEWEB-USA-DAL-10 2606:9880:: - 2606:9880:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF
Thanks for that! As it happens, I had all but 2 but it's good to check. The second half I had tagged as Nobis, not Leaseweb, but it seems Nobis has probably been absorbed - my records do go back a few years. :)
I seem to have a few more than you (he boasted!). 101 for leaseweb alone plus 16 for nobis. Some ranges (eg 172.241...) have been aggregated. As you say, some ranges adjacent to Leaseweb are also servers but I don't have that kind of correlation.