I've been watching my connection, as usual, and I noticed some strange addresses that keep coming up. Some of them are new but a few I have seen before. When I block these addresses it actually enhances my connection. I block google and facebook (nsa) by default so I did not list google here.
If I'm missing something or if a system admin cares to comment I welcome it. I am sure that my computer is running much faster when I block IPS except for the ones listed here at the bottom of the page.
I was only on steemit.com when collecting these IPS. Furthermore I have no other Internet accessable software running just a web browser connected to steemit. Finally I check my IP connections constantly.
Hope this helps some of you out. Please comment.
54.192.48.46 and 35.163.57.6 50.112.150.136 52.41.79.181
ALLOW
OrgName: Amazon.com, Inc.
OrgId: AMAZON-4
Address: 1918 8th Ave
City: SEATTLE
StateProv: WA
PostalCode: 98101-1244
Country: US
RegDate: 1995-01-23
Updated: 2015-04-23
Ref: https://whois.arin.net/rest/org/AMAZON-4
167.114.34.58 and 192.95.33.74
See everytime Im on Steemit. Assume for now it is a legit connection.
OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2016-03-25
Ref: https://whois.arin.net/rest/org/HO-2
??199.212.0.46</> and 199.71.0.46
This is Arin. But my whois search still works when I block them...assuming it is really ARINOPs.
Blocked
BLOCKED # iptables -I INPUT -s 199.71.0.46/8 -j DROP
BLOCKED #iptables -I INPUT -s 199.212.0.46/8 -j DROP
OrgName: ARIN Operations
OrgId: ARINOPS
Address: PO Box 232290
City: Centreville
StateProv: VA
PostalCode: 20120
Country: US
RegDate: 2012-09-07
Updated: 2016-08-08
Ref: https://whois.arin.net/rest/org/ARINOPS
192.124.249.9
Multiple IPs have linked to Microsoft(nsa). Could be necessary for website functionality. For now I allow.
ALLOW
131.253.61.80 Microsoft
The following results may also be obtained via:
https://whois.arin.net/rest/nets;q=131.253.61.80?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 131.253.61.0 - 131.253.255.255
CIDR: 131.253.61.0/24, 131.253.62.0/23, 131.253.128.0/17, 131.253.64.0/18
NetName: MICROSOFT
NetHandle: NET-131-253-61-0-1
Parent: NET131 (NET-131-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corp (MSFT-Z)
RegDate: 2011-06-21
Updated: 2017-01-13
Ref: https://whois.arin.net/rest/net/NET-131-253-61-0-1
93.184.220.29
BLOCKED
BLOCKED # iptables -I INPUT -s 93.184.220.29/8 -j DROP
Why is Derrick trying to connect to my computer?
% Information related to '93.184.220.0 - 93.184.223.255'
% Abuse contact for '93.184.220.0 - 93.184.223.255' is 'abuse@edgecast.com'
inetnum: 93.184.220.0 - 93.184.223.255
netname: EDGECAST-NETBLK-03
descr: NETBLK-03-EU-93-184-220-0-22
country: EU
admin-c: DS7892-RIPE
tech-c: DS7892-RIPE
status: ASSIGNED PA
mnt-by: MNT-EDGECAST
created: 2012-06-22T21:57:14Z
last-modified: 2012-06-22T21:57:14Z
source: RIPE # Filtered
person: Derrick Sawyer
address: 2850 Ocean Park Blvd., Suite 200, Santa Monica CA 90405 USA
phone: +18773343236
nic-hdl: DS7892-RIPE
created: 2010-08-25T18:44:19Z
last-modified: 2012-04-17T16:42:54Z
source: RIPE
mnt-by: MNT-EDGECAST
199.7.55.74
Allow
https://whois.arin.net/rest/nets;q=199.7.55.74?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 199.7.48.0 - 199.7.63.255
CIDR: 199.7.48.0/20
NetName: VGRSGTLD-15
NetHandle: NET-199-7-48-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: VeriSign Global Registry Services (VGRS)
RegDate: 2004-01-29
Updated: 2012-03-02
Ref: https://whois.arin.net/rest/net/NET-199-7-48-0-1
96.126.112.137
BLOCK
iptables -I INPUT -s 96.126.112.137 -j DROP
The following results may also be obtained via:
https://whois.arin.net/rest/nets;q=96.126.112.137?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 96.126.96.0 - 96.126.127.255
CIDR: 96.126.96.0/19
NetName: LINODE-US
NetHandle: NET-96-126-96-0-1
Parent: NET96 (NET-96-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Linode (LINOD)
RegDate: 2011-05-06
Updated: 2012-02-24
Comment: This block is used for static customer allocations.
Ref: https://whois.arin.net/rest/net/NET-96-126-96-0-1
OrgName: Linode
OrgId: LINOD
Address: 329 E. Jimmie Leeds Road
Address: Suite A
City: Galloway
StateProv: NJ
PostalCode: 08205
Country: US
RegDate: 2008-04-24
Updated: 2014-08-01
Comment: http://www.linode.com
Ref: https://whois.arin.net/rest/org/LINOD
Here is what my connections looked like after blocking strange connections.
Now it is light speed.
