client9 / ipcat Goto Github PK
View Code? Open in Web Editor NEWCategorization of IP Addresses
License: MIT License
Categorization of IP Addresses
License: MIT License
whois 80.93.90.96
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '80.93.80.0 - 80.93.90.255'
% Abuse contact for '80.93.80.0 - 80.93.90.255' is '[email protected]'
inetnum: 80.93.80.0 - 80.93.90.255
netname: IKOULA
descr: ikoula france serveur virtuel
country: FR
admin-c: JG10236-RIPE
tech-c: NI181-RIPE
status: ASSIGNED PA
mnt-by: IKOULA-MNT
mnt-lower: IKOULA-MNT
mnt-routes: IKOULA-MNT
created: 2007-07-26T15:28:29Z
last-modified: 2013-12-17T13:18:30Z
source: RIPE # Filtered
role: NOC IKOULA
address: 175 rue d?Aguesseau
address: 92100 Boulogne Billancourt
address: Fr
remarks: trouble: Information : http://www.ikoula.fr
remarks: trouble: Spam : mailto:[email protected]
admin-c: JG10236-RIPE
tech-c: JDS15-RIPE
tech-c: AP4912-RIPE
nic-hdl: NI181-RIPE
mnt-by: IKOULA-MNT
created: 1970-01-01T00:00:00Z
last-modified: 2014-10-09T15:22:17Z
source: RIPE # Filtered
abuse-mailbox: [email protected]
phone: +33184010250
remarks: http://express.ikoula.com
remarks: For any question contact [email protected]
remarks: or http://express.ikoula.com
remarks: For Dedicated Server http://express.ikoula.com/serveur-dedie
remarks: For Domain Name http://express.ikoula.com/nom-de-domaine
remarks: For Virtual Server http://express.ikoula.com/serveur-virtuel
remarks: For Managed Hosting http://ies.ikoula.com/
remarks: For Managed Hosting http://ies.ikoula.com/
remarks: For Cloud Storage http://www.ikeepincloud.com/
remarks: For MailService http://www.ex10.biz/
remarks: For Public Cloud http://express.ikoula.com/cloud-public
remarks: For Private Cloud http://ies.ikoula.com/cloud-prive
person: Jules-Henri Gavetti
address: Ikoula / Gamikzone
address: 175 rue d�Aguesseau
address: 92100 Boulogne Billancourt
address: Fr
mnt-by: IKOULA-MNT
phone: +33 1 71 14 00 01
fax-no: +33 1 71 14 00 05
nic-hdl: JG10236-RIPE
created: 2001-09-25T17:11:49Z
last-modified: 2008-12-09T11:28:18Z
source: RIPE # Filtered
% Information related to '80.93.80.0/20AS21409'
route: 80.93.80.0/20
descr: Ikoula Ripe Block
origin: AS21409
remarks: Abuse reports to [email protected]
remarks: Peering contact is [email protected]
mnt-by: IKOULA-MNT
created: 2008-06-30T16:21:03Z
last-modified: 2008-06-30T16:21:03Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-3)
I've honestly tried to update the stats, but could not –
$ make generate
go run ./cmd/ipcat/main.go
# command-line-arguments
cmd/ipcat/main.go:82: undefined: ipcat.DownloadCloudflare
cmd/ipcat/main.go:86: undefined: ipcat.UpdateCloudflare
make: *** [generate] Error 2
php code:
$rowstr = file_get_contents('https://raw.github.com/client9/ipcat/master/datacenters.csv');
$rows = explode("\n", $rowstr);
foreach ($rows as $row) {
if (strlen($row) == 0 || $row[0] == '#') {
continue;
}
$parts = explode(',', $row); // it breaks rows to arrays divided by ","
there is one company named as "ThePlanet.com Internet Services, Inc." in datacenters.csv, and it will result in failed on generating code.
I've been updating AWS, Azure, etc. ranges manually for a while now. It would be nice to have some sort of cron that polls for changes and automatically makes a PR when new ranges are added. Then I would get a notification and just merge the PR, rather than checking for changes manually and pushing them up myself.
I have a script that uses the hub tool to automatically gofmt and make a PR to a given repo. Could probably use something similar. The question is where to run it.
Hey,
I landed on this project from the Etsy blog. I see that you had not set the last0, last1 values in the for loop to validate the data. I shall submit a pull request.
Hi, you have 184.22.0.0/16 flagged as a datacenter owned by http://www.hostnoc.net/, however it's been reported to me that this is a false positive and these IPs are in use by residential customers. The range actually appears to belong to ais.co.th, a Thai mobile data provider.
They updated https://forums.aws.amazon.com/ann.jspa?annID=1701 with these
54.221.0.0/16 (54.221.0.0 - 54.221.255.255) NEW
54.212.0.0/15 (54.212.0.0 - 54.213.255.255) NEW
54.218.0.0/16 (54.218.0.0 - 54.218.255.255) NEW
54.219.0.0/16 (54.219.0.0 - 54.219.255.255) NEW
54.220.0.0/16 (54.220.0.0 - 54.220.255.255) NEW
54.238.0.0/16 (54.238.0.0 - 54.238.255.255) NEW
138.68.0.0 - 138.68.255.255
207.154.192.0 - 207.154.255.255
104.236.0.0 - 104.236.255.255
45.55.0.0 - 45.55.255.255
159.203.0.0 - 159.203.255.255
whois 185.40.4.29
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '185.40.4.0 - 185.40.4.255'
% Abuse contact for '185.40.4.0 - 185.40.4.255' is '[email protected]'
inetnum: 185.40.4.0 - 185.40.4.255
org: ORG-HL100-RIPE
netname: Hostgrad
descr: Hostgrad
country: RU
admin-c: EH3355-RIPE
tech-c: EH3355-RIPE
status: ASSIGNED PA
mnt-by: HOSTGRAD-MNT
created: 2015-07-03T11:55:45Z
last-modified: 2015-07-03T11:55:45Z
source: RIPE # Filtered
organisation: ORG-HL100-RIPE
org-name: Hostgard LLC
org-type: OTHER
address: Ivanovo, Dzerzhinskogo st., 39
abuse-mailbox: [email protected]
abuse-c: ARH29-RIPE
mnt-ref: HOSTGRAD-MNT
mnt-by: HOSTGRAD-MNT
created: 2015-07-03T11:52:31Z
last-modified: 2015-07-03T15:24:31Z
source: RIPE # Filtered
person: Evgeniy Horoshev
address: Ivanovo, Dzerzhinskogo st., 39
phone: +74957874224
nic-hdl: EH3355-RIPE
mnt-by: HOSTGRAD-MNT
created: 2015-07-03T11:50:26Z
last-modified: 2015-07-03T11:50:26Z
source: RIPE # Filtered
% Information related to '185.40.4.0/24AS50113'
route: 185.40.4.0/24
descr: Hostgrad
origin: AS50113
mnt-by: MNT-NTX
created: 2015-04-01T17:44:34Z
last-modified: 2015-07-03T15:49:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-1)
I'm not sure where to put such a request but I notice your service has blacklisted my site (mycockerspaniel.com, 67.225.160.120). My site has very little traffic and my email is handled by mandrillapp. My site sent out a total of 47 email last week and that's about the norm. Mandrill lists my mailserver as excellent with zero complaints in the past 3 months.
Could you please tell me why this happenend so I can inform mandrillapp?
Hi,
thank you for maintaining this IP feed.
I have just added it to FireHOL IP Lists at https://iplists.firehol.org/?ipset=datacenters
On that site you can see its geographic coverage and how it correlates to other publicly available IP Feeds.
As time passes and this list gets updated, the site will also track its progress, changesets and retention policy.
Thank you!
whois 54.231.19.128
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=54.231.19.128?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#
# start
NetRange: 54.224.0.0 - 54.239.255.255
CIDR: 54.224.0.0/12
NetName: AMAZON-2011L
NetHandle: NET-54-224-0-0-1
Parent: NET54 (NET-54-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS16509
Organization: Amazon Technologies Inc. (AT-88-Z)
RegDate: 2012-03-01
Updated: 2012-04-02
Ref: http://whois.arin.net/rest/net/NET-54-224-0-0-1
OrgName: Amazon Technologies Inc.
OrgId: AT-88-Z
Address: 410 Terry Ave N.
City: Seattle
StateProv: WA
PostalCode: 98109
Country: US
RegDate: 2011-12-08
Updated: 2014-10-20
Comment: All abuse reports MUST include:
Comment: * src IP
Comment: * dest IP (your IP)
Comment: * dest port
Comment: * Accurate date/timestamp and timezone of activity
Comment: * Intensity/frequency (short log extracts)
Comment: * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref: http://whois.arin.net/rest/org/AT-88-Z
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-266-2187
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/AANO1-ARIN
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/AEA8-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-266-4064
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/ANO24-ARIN
# end
# start
NetRange: 54.230.0.0 - 54.231.255.255
CIDR: 54.230.0.0/15
NetName: AMAZO-ZL4
NetHandle: NET-54-230-0-0-1
Parent: AMAZON-2011L (NET-54-224-0-0-1)
NetType: Reassigned
OriginAS: AS16509
Organization: Amazon.com, Inc. (AMAZO-4)
RegDate: 2012-07-30
Updated: 2012-07-30
Ref: http://whois.arin.net/rest/net/NET-54-230-0-0-1
OrgName: Amazon.com, Inc.
OrgId: AMAZO-4
Address: Amazon Web Services, Inc.
Address: P.O. Box 81226
City: Seattle
StateProv: WA
PostalCode: 98108-1226
Country: US
RegDate: 2005-09-29
Updated: 2015-09-30
Comment: For details of this service please see
Comment: http://ec2.amazonaws.com/
Ref: http://whois.arin.net/rest/org/AMAZO-4
OrgAbuseHandle: AEA8-ARIN
OrgAbuseName: Amazon EC2 Abuse
OrgAbusePhone: +1-206-266-4064
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/AEA8-ARIN
OrgNOCHandle: AANO1-ARIN
OrgNOCName: Amazon AWS Network Operations
OrgNOCPhone: +1-206-266-2187
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/AANO1-ARIN
OrgTechHandle: ANO24-ARIN
OrgTechName: Amazon EC2 Network Operations
OrgTechPhone: +1-206-266-4064
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/ANO24-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
whois 51.254.151.5
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '51.254.151.0 - 51.254.151.63'
% Abuse contact for '51.254.151.0 - 51.254.151.63' is '[email protected]'
inetnum: 51.254.151.0 - 51.254.151.63
netname: OVH_91075336
descr: OVH Static IP
country: FR
org: ORG-SS520-RIPE
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2015-09-28T19:51:40Z
last-modified: 2015-09-28T19:51:40Z
source: RIPE # Filtered
organisation: ORG-SS520-RIPE
org-name: SeFlow s.n.c.
org-type: OTHER
address: v. Alberici 20
address: 26845 Codogno
address: IT
abuse-mailbox: [email protected]
phone: +33.256566235
mnt-ref: OVH-MNT
mnt-by: OVH-MNT
created: 2015-07-23T07:16:04Z
last-modified: 2015-07-23T07:16:04Z
source: RIPE # Filtered
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: [email protected]
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered
% Information related to '51.254.0.0/15AS16276'
route: 51.254.0.0/15
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2015-05-28T17:50:05Z
last-modified: 2015-05-28T17:50:05Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-2)
whois 192.249.124.37
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.249.124.37?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#
# start
NetRange: 192.249.112.0 - 192.249.127.255
CIDR: 192.249.112.0/20
NetName: IMH-LAX
NetHandle: NET-192-249-112-0-2
Parent: IMH-LAX (NET-192-249-112-0-1)
NetType: Reallocated
OriginAS: AS54641
Organization: InMotion Hosting, Inc. (INMOT-1)
RegDate: 2013-08-20
Updated: 2013-11-01
Ref: http://whois.arin.net/rest/net/NET-192-249-112-0-2
OrgName: InMotion Hosting, Inc.
OrgId: INMOT-1
Address: 6100 Center Drive
Address: Suite 1190
City: Los Angeles
StateProv: CA
PostalCode: 90045
Country: US
RegDate: 2008-06-03
Updated: 2012-05-03
Ref: http://whois.arin.net/rest/org/INMOT-1
OrgTechHandle: SYSTE299-ARIN
OrgTechName: Systems Team
OrgTechPhone: +1-888-321-4678
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
OrgNOCHandle: SYSTE299-ARIN
OrgNOCName: Systems Team
OrgNOCPhone: +1-888-321-4678
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
OrgAbuseHandle: SYSTE299-ARIN
OrgAbuseName: Systems Team
OrgAbusePhone: +1-888-321-4678
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
# end
# start
NetRange: 192.249.112.0 - 192.249.127.255
CIDR: 192.249.112.0/20
NetName: IMH-LAX
NetHandle: NET-192-249-112-0-1
Parent: NET192 (NET-192-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS22611
Organization: InMotion Hosting, Inc. (INMOT-1)
RegDate: 2013-07-31
Updated: 2013-11-01
Ref: http://whois.arin.net/rest/net/NET-192-249-112-0-1
OrgName: InMotion Hosting, Inc.
OrgId: INMOT-1
Address: 6100 Center Drive
Address: Suite 1190
City: Los Angeles
StateProv: CA
PostalCode: 90045
Country: US
RegDate: 2008-06-03
Updated: 2012-05-03
Ref: http://whois.arin.net/rest/org/INMOT-1
OrgTechHandle: SYSTE299-ARIN
OrgTechName: Systems Team
OrgTechPhone: +1-888-321-4678
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
OrgNOCHandle: SYSTE299-ARIN
OrgNOCName: Systems Team
OrgNOCPhone: +1-888-321-4678
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
OrgAbuseHandle: SYSTE299-ARIN
OrgAbuseName: Systems Team
OrgAbusePhone: +1-888-321-4678
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/SYSTE299-ARIN
# end
# start
NetRange: 192.249.124.0 - 192.249.124.255
CIDR: 192.249.124.0/24
NetName: WHH-WEST
NetHandle: NET-192-249-124-0-1
Parent: IMH-LAX (NET-192-249-112-0-2)
NetType: Reallocated
OriginAS: AS22611
Organization: Web Hosting Hub, Inc (WHH6)
RegDate: 2014-12-11
Updated: 2014-12-11
Ref: http://whois.arin.net/rest/net/NET-192-249-124-0-1
OrgName: Web Hosting Hub, Inc
OrgId: WHH6
Address: 3629 Sentara Way
City: Virginia Beach
StateProv: VA
PostalCode: 23452
Country: US
RegDate: 2010-08-27
Updated: 2011-08-08
Ref: http://whois.arin.net/rest/org/WHH6
OrgAbuseHandle: SYSTE297-ARIN
OrgAbuseName: Systems Team
OrgAbusePhone: +1-877-595-4482
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/SYSTE297-ARIN
OrgTechHandle: SYSTE297-ARIN
OrgTechName: Systems Team
OrgTechPhone: +1-877-595-4482
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/SYSTE297-ARIN
OrgNOCHandle: SYSTE297-ARIN
OrgNOCName: Systems Team
OrgNOCPhone: +1-877-595-4482
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/SYSTE297-ARIN
# end
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
whois 104.255.71.251
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=104.255.71.251?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#
NetRange: 104.255.64.0 - 104.255.71.255
CIDR: 104.255.64.0/21
NetName: VOLUM-ARIN
NetHandle: NET-104-255-64-0-1
Parent: NET104 (NET-104-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS46664
Organization: VolumeDrive (VOLUM-2)
RegDate: 2015-01-22
Updated: 2015-01-22
Ref: http://whois.arin.net/rest/net/NET-104-255-64-0-1
OrgName: VolumeDrive
OrgId: VOLUM-2
Address: 1143 Northern Blvd
City: Clarks Summit
StateProv: PA
PostalCode: 18411
Country: US
RegDate: 2008-08-26
Updated: 2011-09-24
Ref: http://whois.arin.net/rest/org/VOLUM-2
OrgTechHandle: VOLUM1-ARIN
OrgTechName: VolumeDrive POC
OrgTechPhone: +1-862-266-1083
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN
OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName: VolumeDrive POC
OrgAbusePhone: +1-862-266-1083
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/VOLUM1-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
whois 80.82.65.74
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '80.82.65.0 - 80.82.65.255'
% Abuse contact for '80.82.65.0 - 80.82.65.255' is '[email protected]'
inetnum: 80.82.65.0 - 80.82.65.255
netname: NL-ECATEL
descr: AS29073, Ecatel LTD
country: NL
admin-c: EL25-RIPE
tech-c: EL25-RIPE
status: ASSIGNED PA
mnt-by: ECATEL-MNT
mnt-lower: ECATEL-MNT
mnt-routes: ECATEL-MNT
created: 2010-09-30T19:51:08Z
last-modified: 2010-09-30T19:51:08Z
source: RIPE # Filtered
role: Ecatel LTD
address: P.O.Box 19533
address: 2521 CA The Hague
address: Netherlands
abuse-mailbox: [email protected]
remarks: ----------------------------------------------------
remarks: ECATEL LTD
remarks: Dedicated and Co-location services
remarks: ----------------------------------------------------
remarks: for abuse complaints : [email protected]
remarks: for any other questions : [email protected]
remarks: ----------------------------------------------------
nic-hdl: EL25-RIPE
mnt-by: ECATEL-MNT
created: 2006-07-14T17:18:00Z
last-modified: 2015-11-07T22:55:08Z
source: RIPE # Filtered
% Information related to '80.82.65.0/24AS29073'
route: 80.82.65.0/24
descr: AS29073 Route object
origin: AS29073
mnt-by: ECATEL-MNT
created: 2010-09-30T19:52:43Z
last-modified: 2010-09-30T19:52:43Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-3)
Not incredibly urgent/a bit of a weird one:
https://godoc.org/github.com/client9/ipcat
generic.. does not care if ipv4 or ipv6
should not be in a code block, but it looks like godoc.org treats comments that begin with an extra space differently. I'll try to fix.
Straight from the Amazon forums:
Asia Pacific (Sydney)
54.252.0.0/16 (54.252.0.0 – 54.252.255.255) NEW
Hi, you have 207.46.13.0/24 flagged as Microsoft Azure IPs belonging to http://www.windowsazure.com/en-us/, however it's been reported to me that this is a false positive and these IPs are used by Bing search engine spiders. Unlike typical Azure IPs, these IPs resolve to search.msn.com.
Edit: also 157.55.39.0/24 and 40.77.167.0/24
Looks like this is the new URL:
@client9 I can update if it makes sense?
https://myip.ms/view/web_hosting/364527/Server_Network_Technologies_Inc.html
104.248.0.0 - 104.248.255.255
104.233.0.0 - 104.233.63.255
45.43.128.0 - 45.43.191.255
104.222.160.0 - 104.222.191.255
104.239.0.0 - 104.239.127.255
104.167.0.0 - 104.167.15.255
It would be great if someone add the prefixes of M247.
We daily block IP's of them.
Is currently:
79.125.64.0,79.125.127.255,Amazon AWS,http://www.amazon.com/aws/
Should be:
79.125.0.0,79.125.127.255,Amazon AWS,http://www.amazon.com/aws/
According to https://forums.aws.amazon.com/ann.jspa?annID=1528
EU (Ireland):
79.125.0.0/17 (79.125.0.0 - 79.125.127.255)
A machine digestable link: https://api.fastly.com/public-ip-list
whois 209.126.117.99
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=209.126.117.99?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#
NetRange: 209.126.96.0 - 209.126.127.255
CIDR: 209.126.96.0/19
NetName: HSI-7
NetHandle: NET-209-126-96-0-1
Parent: NET209 (NET-209-0-0-0-0)
NetType: Direct Allocation
OriginAS: AS30083
Organization: Hosting Solutions International, Inc. (SERVE-6)
RegDate: 2013-12-26
Updated: 2013-12-26
Ref: http://whois.arin.net/rest/net/NET-209-126-96-0-1
OrgName: Hosting Solutions International, Inc.
OrgId: SERVE-6
Address: 210 North Tucker Blvd.
Address: Suite 910
City: Saint Louis
StateProv: MO
PostalCode: 63101
Country: US
RegDate: 2003-04-15
Updated: 2014-11-13
Ref: http://whois.arin.net/rest/org/SERVE-6
OrgAbuseHandle: HAD16-ARIN
OrgAbuseName: HSI Abuse Department
OrgAbusePhone: +1-314-266-3638
OrgAbuseEmail: [email protected]
OrgAbuseRef: http://whois.arin.net/rest/poc/HAD16-ARIN
OrgTechHandle: SWI19-ARIN
OrgTechName: Wintz, Sascha
OrgTechPhone: +1-314-480-6840
OrgTechEmail: [email protected]
OrgTechRef: http://whois.arin.net/rest/poc/SWI19-ARIN
OrgNOCHandle: SWI19-ARIN
OrgNOCName: Wintz, Sascha
OrgNOCPhone: +1-314-480-6840
OrgNOCEmail: [email protected]
OrgNOCRef: http://whois.arin.net/rest/poc/SWI19-ARIN
#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#
I just started checking this list to see how accurate it is. But only in the first couple of lines I already see a lot of wrong data.
12.54.126.240 - 12.54.126.247 is not godaddy anymore according to https://www.ip2location.com/demo/12.54.126.240 or https://ipinfo.io/12.54.126.240
12.68.118.64 - 12.68.118.95 is not mediatemple anymore.
12.177.232.232 - 12.177.232.239 is not Peak10 anymore.
These are all entries from 6 years ago so based on this quick look I'm afraid a lot entries from 6 years ago will be wrong now. Is it maybe an idea to remove these old entries?
https://ip-ranges.amazonaws.com/ip-ranges.json contains a number of EC2 marked ranges but they do not appear in your datacenters.csv
file.
For example (this was found at a large with my log data):
35.160.0.0/13
54.153.0.0/17
54.200.0.0/15
Do you manually update the datacenters.csv
? Can I do anything to help?
Thought I'd post this. Not an issue, but that might makes things easier for however this list gets created :)
I have a bunch of ranges built up from my 'bad boy' logs that mostly are not caught by your list; also just recently complimented with some of the recent WhiteOps hooray ranges (expanded according to the whois to catch the whole organisation).
How do you want to accept this list? This good enough, who validates I have not messed up and do I need to do a PR?
<<"208.73.200.0/21">>, % interserver.net
<<"216.158.224.0/20">>, % interserver.net
<<"162.244.8.0/21">>, % poweruphosting.com
[snipped to be replaced with latest below]
Is it possible to have another file where the output is displayed without the Name & Domain and a dash or CIDR notation?
For example:
Original
52.249.168.0,52.249.168.255,Microsoft Azure,http://www.windowsazure.com/en-us/
Proposed
52.249.168.0-52.249.168.255
OR
52.249.168.0/24
This is what I could come up with:
199.167.72.1,199.167.79.254,BlackMesh,http://www.blackmesh.com/
69.174.51.1,69.174.51.254,BlackMesh,http://www.blackmesh.com/
74.121.192.1,74.121.199.254,BlackMesh,http://www.blackmesh.com/
Cheers,
Marc
I'd love to see this one get added to the list :)
NetRange: 170.110.0.0 - 170.110.255.255
CIDR: 170.110.0.0/16
OrgName: U.S. Dept. of Commerce - ITA
Hi!
Micfo have a very huge list of ip: https://ipinfo.io/AS53889#Blocks
And Contina is similar: https://ipinfo.io/AS63008#blocks
I'm thinking that maybe is a good idea maintain a database for identify by ASN
When attempting to use the script, it outputs the following:
Array
(
[_ip0] => -2143170560
[_ip1] => -2143166465
[owner] => http://www.link11.de/
)
This appears to be because $last1 >= $i0
evaluates to true.
Related to #34. Since you are thinking about enhancements to the structures, I'd like to throw one more suggestion to consider.
Sometimes a large block owned by a hosting provider may contain few smaller blocks designated for other data centers or even other clients who potentially use the addresses for other purposes (i.e. offices, individual customers, whatever). The current structure of datacenters.csv
is not a good fit to express such data.
One of the possible workarounds is the format used by Nginx for its geo
module. It's possible not only to "include" a block, but also mark a block as "excluded". Here it is the module documentation if you'd want to see it.
Probably should no longer be hording this list, easier to outsource the maintainence to the world+dog :)
What do you need from me to sort these out so they are usable to you?
Hello, thank you for your great service! Apparently, the range 109.190.0.0 - 109.190.255.255 (OVH, http://www.ovh.co.uk/) includes legitimate DSL users in the range 109.190.64.0 - 109.190.127.255 (OVH-DSL static IP). I just wanted to report this false positive. Thanks again for your kind consideration.
Thanks for sharing this as it is a good set of quickly and easily classifying addresses, but seeing as there are Azure, AWS and other big cloud provider datacenters - it seems very strange that no Google or Facebook ranges at all are present in the dataset. There is a pull request (more exist?) from last year - #14 - with a few Google addresses, but it could be very useful with 1e100.net
and other Google sources. Any reason why Google and Facebook are not part of the set - they have their own datacenters and infrastructure? 😃
Would CDNs also be part of this set - seeing as there is Akamai already?
I am using https://github.com/yl2chen/cidranger to look up IPs inside of CIDR blocks and I think having the CIDR blocks on the CSV file would make much more sense. Any reason for using ranges over CIDR blocks?
Got connections from at least two IP's:
45.77.68.23
45.32.90.198
Can you suggest IPv6 subnets list for similar purposes?
From an EC2 instance this resolves to akamai:
$ ping software.intel.com
PING a163.b.akamai.net (165.254.27.97) 56(84) bytes of data.
64 bytes from 165.254.27.97: icmp_seq=1 ttl=54 time=2.23 ms
Strangely enough 165.254.27.97, seems to be owned by "NTT America, Inc.".
Not sure how to deal with this.
inetnum: 81.177.26.0 - 81.177.27.255
netname: ERIX-COLO
descr: Erix colocation and dedicated service,
descr: Moscow, Russia
country: RU
admin-c: VAN60-RIPE
tech-c: VAN60-RIPE
status: ASSIGNED PA
mnt-by: AS8342-MNT
source: RIPE # Filtered
person: Vadim A Nesterov
address: ISP-connect LLC,
address: Moscow, Russia,
address: Obrucheva str., 5,
address: for ISP-connect LLC.
remarks: phone: +7 095 9173767
phone: +7 495 9173767
remarks: phone: +7 0732 533553
phone: +7 4732 533553
remarks: fax-no: +7 0732 533553
fax-no: +7 4732 533553
nic-hdl: VAN60-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes
inetnum: 211.151.0.0 - 211.151.255.255
netname: CHINA-21VIANET
descr: 21ViaNet(China),Inc.
country: CN
admin-c: ML1808-AP
tech-c: BW667-AP
status: ALLOCATED PORTABLE
mnt-lower: MAINT-CN-21VIANET
mnt-routes: MAINT-CNNIC-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: [email protected] 20081030
changed: [email protected] 20110311
changed: [email protected] 20121017
source: APNIC
route: 211.151.224.0/19
descr: CHINA-ABITCOOL
descr: Abitcool(China) Inc.
country: CN
origin: AS17428
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20040213
source: APNIC
person: Yang Jun
address: No. 15 Tongji Road,Yizhuang Economic and Technological Development Zone,Beijing, PRC 100176
country: CN
phone: +86-10-84562121
fax-no: +86-10-84564234
e-mail: [email protected]
nic-hdl: ML1808-AP
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20121017
source: APNIC
person: Cao Wentao
address: No. 15 Tongji Road,Yizhuang Economic and Technological Development Zone,Beijing, PRC 100176
country: CN
phone: +86-10-84562121
fax-no: +86-10-84564234
e-mail: [email protected]
nic-hdl: BW667-AP
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20121017
source: APNIC
whois 51.254.212.184
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf
% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.
% Information related to '51.254.0.0 - 51.255.255.255'
% Abuse contact for '51.254.0.0 - 51.255.255.255' is '[email protected]'
inetnum: 51.254.0.0 - 51.255.255.255
netname: FR-OVH-20150522
descr: OVH SAS
country: FR
admin-c: OTC2-RIPE
tech-c: OTC2-RIPE
status: LEGACY
mnt-by: OVH-MNT
created: 2015-05-26T08:55:56Z
last-modified: 2015-05-27T15:52:47Z
source: RIPE # Filtered
org: ORG-OS3-RIPE
organisation: ORG-OS3-RIPE
org-name: OVH SAS
org-type: LIR
address: 2 rue Kellermann
address: 59100
address: Roubaix
address: FRANCE
phone: +333974531323
fax-no: +33320200958
abuse-c: AR15333-RIPE
admin-c: GM84-RIPE
admin-c: OTC2-RIPE
admin-c: OK217-RIPE
mnt-ref: OVH-MNT
mnt-ref: RIPE-NCC-HM-MNT
mnt-by: RIPE-NCC-HM-MNT
abuse-mailbox: [email protected]
created: 2004-04-17T11:23:17Z
last-modified: 2015-03-24T14:19:23Z
source: RIPE # Filtered
role: OVH Technical Contact
address: OVH SAS
address: 2 rue Kellermann
address: 59100 Roubaix
address: France
admin-c: OK217-RIPE
tech-c: GM84-RIPE
tech-c: SL10162-RIPE
nic-hdl: OTC2-RIPE
abuse-mailbox: [email protected]
mnt-by: OVH-MNT
created: 2004-01-28T17:42:29Z
last-modified: 2014-09-05T10:47:15Z
source: RIPE # Filtered
% Information related to '51.254.0.0/15AS16276'
route: 51.254.0.0/15
descr: OVH
origin: AS16276
mnt-by: OVH-MNT
created: 2015-05-28T17:50:05Z
last-modified: 2015-05-28T17:50:05Z
source: RIPE # Filtered
% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-4)
Found a fun little bug with the Ruby client tonight. Some provider names have a comma in them, which breaks the Ruby client:
2.2.1 :001 > require './ipcat.rb'
=> true
2.2.1 :002 > dc = IPCat::Datacenters.new('./datacenters.csv')
ArgumentError: wrong number of arguments (5 for 3..4)
from /Users/mawagner/src/ipcat/ipcat.rb:16:in `add'
from /Users/mawagner/src/ipcat/ipcat.rb:12:in `block in initialize'
from /Users/mawagner/src/ipcat/ipcat.rb:11:in `map'
from /Users/mawagner/src/ipcat/ipcat.rb:11:in `initialize'
from (irb):2:in `new'
from (irb):2
from /Users/mawagner/.rvm/rubies/ruby-2.2.1/bin/irb:11:in `<main>'
The CSV is (I presume) valid, but the Ruby client just splits on commas. Trivial PR incoming with a fix.
Helpfully MaxCDN include their IP ranges on their website.
A machine digestable link is at https://www.maxcdn.com/one/assets/ips.txt
If you look at the output of nslookup -q=TXT _cloud-netblocks1.googleusercontent.com 8.8.8.8
, it includes _cloud-netblocks6.googleusercontent.com
as well.
These IP ranges are currently skipped.
It would be nice to get this additional Rackspace range in:
Rackspace Hosting RACKS-8-NET-11 (NET-166-78-0-0-1) 166.78.0.0 - 166.78.255.255
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.