Forum Moderators: open

Message Too Old, No Replies

Hurricane Electric.

Bot? Good or bad?

         

Bewenched

4:32 am on Aug 6, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I saw alot of very very old threads on visits from this host
But I'm seeing some fairly heavy activity ... should this be banned?

209.51.162.220

wilderness

4:30 pm on Aug 6, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Here's A bunch more from the same server

208.185.182.56 - 208.185.182.63
209.133.90.80 - 209.133.90.87
209.133.90.88 - 209.133.90.95
209.249.11.40 - 209.249.11.47
209.249.24.128 - 209.249.24.159
209.51.160.0 - 209.51.191.255
RewriteCond %{REMOTE_ADDR} ^216\.66\.([0-9]|[1-5][8-9]|9[0-5])\. [OR]
216.218.128.0 - 216.218.255.255
216.66.0.0 - 216.66.95.255
64.124.176.152 - 64.124.176.159
64.62.128.0 - 64.62.255.255
RewriteCond %{REMOTE_ADDR} ^64\.71\.(12[8-9]|1[3-8][0-9]|19[01])\. [OR]
RewriteCond %{REMOTE_ADDR} ^65\.19\.(12[8-9]|1[3-8][0-9]|19[01])\. [OR]
RewriteCond %{REMOTE_ADDR} ^66\.160\.(12[8-9]|1[3-9][0-9]|20[0-7])\.
RewriteCond %{REMOTE_ADDR} ^66\.220\.([0-9]|[12][0-9]|3[01])\. [OR]
RewriteCond %{REMOTE_ADDR} ^72\.52\.(6[4-9]|[789][0-9]|1[01][0-9]|12[0-7])\.

wilderness

5:18 pm on Aug 6, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



It's be pointed out to me that some synatx is missing (many thanks).

FWIW, there are even some IP ranges that have not been converted to regex.

I just put these all together from old saves and sorted them, without making corrections or spending extensive time in providing the ranges.

Don

keyplyr

8:55 pm on Aug 6, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hurricane Elec has been a pool of bad activity for years. I blocked these ranges:

deny from 64.62.138.0/25
deny from 64.71.175.0/24
deny from 72.52.64.0/18
deny from 209.51.0.0/16
deny from 216.218.128.0/17

dstiles

10:17 pm on Aug 6, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I have many HE IPs blocked but comments and list as below. Note that some HE ranges may be omitted from my list because they (I think) come under a larger range - or it may be the other way around. :(

64.124/15 is Abovenet, as are several others, and do not seem to be associated directly with HE.

My list of IPs for HE...

64.62.128.0 - 64.62.255.255
64.71.128.0 - 64.71.191.255
65.19.128.0 - 65.19.191.255
65.49.0.0 - 65.49.127.255
66.220.0.0 - 66.220.31.255
72.52.64.0 - 72.52.255.255
74.82.0.0 - 74.82.63.255
184.104.0.0 - 184.105.255.255
209.51.160.0 - 209.51.191.255
216.66.0.0 - 216.66.95.255
216.218.128.0 - 216.218.255.255

wilderness

1:45 am on Aug 7, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



64.124.176.152 - 64.124.176.159 was from a 2004 Name search at ARIN.

Rechecked the IP after your response and today it is indeed Aboveent.

FWIW, Abovenet many be just as bad as Hurricane, however that's another thread ;)

keyplyr

1:54 am on Aug 7, 2011 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



@ Wilderness - Actually that Abovenet range is a bit larger (and still another thread - ha.)

64.124.0.0 - 64.125.255.255
64.124.0.0/15