client9 / ipcat Goto Github PK

View Code? Open in Web Editor NEW

529.0 529.0 132.0 1.19 MB

Categorization of IP Addresses

License: MIT License

Python 10.28% PHP 5.32% Makefile 2.63% Ruby 2.77% Go 78.99%

ipcat's People

Contributors

Stargazers

Watchers

Forkers

etsy darkseed mmarschall knutties gavincarr rb2k sfrench qqonline gmanfunky ktheory armanddp barn quiiver eyalr alinabi bitland frozencow damonmorgan r--w gdemo1 martinwalsh athoune alaz n1zyy janowitz canardleteer ksmaheshkumar pombredanne bloudraak ythan joshuabergeron henfra mallat foospidy schatt xsikor baleezo hxp2k6 vaibkamble teespring-labs bytearchive awesome-security yanghan11 hyades vainius staymanhou squamous eckeman cheekybastard shmuel-web esckalayd wallin xpresservers ctheller mfaulk tzuryby sunnybit lumoslabs foxhind oftn-oswg skreuzer threatinteltest szepeviktor softctrl longzheng panzertime wrestrtdr simluzifer hrbrmstr shellb0y user-nobody gadelkareem lkurian1981 fgy58963 dduke-sd rileyzink frances2happy xbb123 alexivsn anesbitt-st kamihouse chapeupreto jacktuck dharmeshptl spudstr greywizard outrank modulexcite mmg1 isgasho yyyyhe itsusony panagiotisilia mskf3000 cyberlimbo live365-dev mmrwoods rale podlibre shagun1289

ipcat's Issues

Missing M247 AS9009 (VPN / VPS / Dedicated Server)

It would be great if someone add the prefixes of M247.
We daily block IP's of them.

https://bgp.he.net/AS9009#_prefixes

ERIX-COLO

inetnum: 81.177.26.0 - 81.177.27.255
netname: ERIX-COLO
descr: Erix colocation and dedicated service,
descr: Moscow, Russia
country: RU
admin-c: VAN60-RIPE
tech-c: VAN60-RIPE
status: ASSIGNED PA
mnt-by: AS8342-MNT
source: RIPE # Filtered

person: Vadim A Nesterov
address: ISP-connect LLC,
address: Moscow, Russia,
address: Obrucheva str., 5,
address: for ISP-connect LLC.
remarks: phone: +7 095 9173767
phone: +7 495 9173767
remarks: phone: +7 0732 533553
phone: +7 4732 533553
remarks: fax-no: +7 0732 533553
fax-no: +7 4732 533553
nic-hdl: VAN60-RIPE
source: RIPE # Filtered
remarks: modified for Russian phone area changes

~600 CIDRs over ~300 providers

Probably should no longer be hording this list, easier to outsource the maintainence to the world+dog :)

What do you need from me to sort these out so they are usable to you?

blacklist-ip.txt

Range 184.22.0.0 - 184.22.255.255 false positive

Hi, you have 184.22.0.0/16 flagged as a datacenter owned by http://www.hostnoc.net/, however it's been reported to me that this is a false positive and these IPs are in use by residential customers. The range actually appears to belong to ais.co.th, a Thai mobile data provider.

Ecatel (80.82.65.0 - 80.82.65.255)

whois 80.82.65.74
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '80.82.65.0 - 80.82.65.255'

% Abuse contact for '80.82.65.0 - 80.82.65.255' is '[email protected]'

inetnum:        80.82.65.0 - 80.82.65.255
netname:        NL-ECATEL
descr:          AS29073, Ecatel LTD
country:        NL
admin-c:        EL25-RIPE
tech-c:         EL25-RIPE
status:         ASSIGNED PA
mnt-by:         ECATEL-MNT
mnt-lower:      ECATEL-MNT
mnt-routes:     ECATEL-MNT
created:        2010-09-30T19:51:08Z
last-modified:  2010-09-30T19:51:08Z
source:         RIPE # Filtered

role:           Ecatel LTD
address:        P.O.Box 19533
address:        2521 CA The Hague
address:        Netherlands
abuse-mailbox:  [email protected]
remarks:        ----------------------------------------------------
remarks:        ECATEL LTD
remarks:        Dedicated and Co-location services
remarks:        ----------------------------------------------------
remarks:        for abuse complaints : [email protected]
remarks:        for any other questions : [email protected]
remarks:        ----------------------------------------------------
nic-hdl:        EL25-RIPE
mnt-by:         ECATEL-MNT
created:        2006-07-14T17:18:00Z
last-modified:  2015-11-07T22:55:08Z
source:         RIPE # Filtered

% Information related to '80.82.65.0/24AS29073'

route:          80.82.65.0/24
descr:          AS29073 Route object
origin:         AS29073
mnt-by:         ECATEL-MNT
created:        2010-09-30T19:52:43Z
last-modified:  2010-09-30T19:52:43Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-3)

54.221.0.0/16 (54.221.0.0 - 54.221.255.255) NEW
54.212.0.0/15 (54.212.0.0 - 54.213.255.255) NEW
54.218.0.0/16 (54.218.0.0 - 54.218.255.255) NEW
54.219.0.0/16 (54.219.0.0 - 54.219.255.255) NEW
54.220.0.0/16 (54.220.0.0 - 54.220.255.255) NEW
54.238.0.0/16 (54.238.0.0 - 54.238.255.255) NEW

last0 and last1 are not set in the safety check loop

Hey,

I landed on this project from the Etsy blog. I see that you had not set the last0, last1 values in the for loop to validate the data. I shall submit a pull request.

Azure URL outdated or broken

Looks like this is the new URL:

https://download.microsoft.com/download/0/1/8/018E208D-54F8-44CD-AA26-CD7BC9524A8C/PublicIPs_20161110.xml

@client9 I can update if it makes sense?

possible a bug in IpDbGenerate.php

php code:

$rowstr = file_get_contents('https://raw.github.com/client9/ipcat/master/datacenters.csv');
$rows = explode("\n", $rowstr);
foreach ($rows as $row) {
    if (strlen($row) == 0 || $row[0] == '#') {
        continue;
    }
    $parts = explode(',', $row);  // it breaks rows to arrays divided by ","

there is one company named as "ThePlanet.com Internet Services, Inc." in datacenters.csv, and it will result in failed on generating code.

Missing Server Network Technologies, Inc

https://myip.ms/view/web_hosting/364527/Server_Network_Technologies_Inc.html

104.248.0.0 - 104.248.255.255
104.233.0.0 - 104.233.63.255
45.43.128.0 - 45.43.191.255
104.222.160.0 - 104.222.191.255
104.239.0.0 - 104.239.127.255
104.167.0.0 - 104.167.15.255

U.S. Dept. of Commerce range

I'd love to see this one get added to the list :)

NetRange: 170.110.0.0 - 170.110.255.255
CIDR: 170.110.0.0/16
OrgName: U.S. Dept. of Commerce - ITA

Why not just CIDR blocks?

I am using https://github.com/yl2chen/cidranger to look up IPs inside of CIDR blocks and I think having the CIDR blocks on the CSV file would make much more sense. Any reason for using ranges over CIDR blocks?

Additional Rackspace range

It would be nice to get this additional Rackspace range in:
Rackspace Hosting RACKS-8-NET-11 (NET-166-78-0-0-1) 166.78.0.0 - 166.78.255.255

Missing part of an Amazon range

Is currently:
79.125.64.0,79.125.127.255,Amazon AWS,http://www.amazon.com/aws/

Should be:
79.125.0.0,79.125.127.255,Amazon AWS,http://www.amazon.com/aws/

According to https://forums.aws.amazon.com/ann.jspa?annID=1528

EU (Ireland): 
79.125.0.0/17 (79.125.0.0 - 79.125.127.255)

OVH (51.254.151.0 - 51.254.151.63)

whois 51.254.151.5
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '51.254.151.0 - 51.254.151.63'

% Abuse contact for '51.254.151.0 - 51.254.151.63' is '[email protected]'

inetnum:        51.254.151.0 - 51.254.151.63
netname:        OVH_91075336
descr:          OVH Static IP
country:        FR
org:            ORG-SS520-RIPE
admin-c:        OTC2-RIPE
tech-c:         OTC2-RIPE
status:         LEGACY
mnt-by:         OVH-MNT
created:        2015-09-28T19:51:40Z
last-modified:  2015-09-28T19:51:40Z
source:         RIPE # Filtered

organisation:   ORG-SS520-RIPE
org-name:       SeFlow s.n.c.
org-type:       OTHER
address:        v. Alberici 20
address:        26845 Codogno
address:        IT
abuse-mailbox:  [email protected]
phone:          +33.256566235
mnt-ref:        OVH-MNT
mnt-by:         OVH-MNT
created:        2015-07-23T07:16:04Z
last-modified:  2015-07-23T07:16:04Z
source:         RIPE # Filtered

role:           OVH Technical Contact
address:        OVH SAS
address:        2 rue Kellermann
address:        59100 Roubaix
address:        France
admin-c:        OK217-RIPE
tech-c:         GM84-RIPE
tech-c:         SL10162-RIPE
nic-hdl:        OTC2-RIPE
abuse-mailbox:  [email protected]
mnt-by:         OVH-MNT
created:        2004-01-28T17:42:29Z
last-modified:  2014-09-05T10:47:15Z
source:         RIPE # Filtered

% Information related to '51.254.0.0/15AS16276'

route:          51.254.0.0/15
descr:          OVH
origin:         AS16276
mnt-by:         OVH-MNT
created:        2015-05-28T17:50:05Z
last-modified:  2015-05-28T17:50:05Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-2)

Amazon Ranges now available via JSON

Thought I'd post this. Not an issue, but that might makes things easier for however this list gets created :)

--> https://ip-ranges.amazonaws.com/ip-ranges.json

datacenters added for FireHOL IP Lists

Hi,

thank you for maintaining this IP feed.

I have just added it to FireHOL IP Lists at https://iplists.firehol.org/?ipset=datacenters

On that site you can see its geographic coverage and how it correlates to other publicly available IP Feeds.
As time passes and this list gets updated, the site will also track its progress, changesets and retention policy.

Thank you!

Missing AWS ranges

https://ip-ranges.amazonaws.com/ip-ranges.json contains a number of EC2 marked ranges but they do not appear in your datacenters.csv file.

For example (this was found at a large with my log data):

35.160.0.0/13
54.153.0.0/17
54.200.0.0/15

Do you manually update the datacenters.csv? Can I do anything to help?

Missing Digital Ocean, Inc ranges

138.68.0.0 - 138.68.255.255
207.154.192.0 - 207.154.255.255
104.236.0.0 - 104.236.255.255
45.55.0.0 - 45.55.255.255
159.203.0.0 - 159.203.255.255

https://myip.ms/view/ip_owners/38903/Digital_Ocean_Inc.html

More IP ranges

I have a bunch of ranges built up from my 'bad boy' logs that mostly are not caught by your list; also just recently complimented with some of the recent WhiteOps hooray ranges (expanded according to the whois to catch the whole organisation).

How do you want to accept this list? This good enough, who validates I have not messed up and do I need to do a PR?

<<"208.73.200.0/21">>,  % interserver.net 
<<"216.158.224.0/20">>, % interserver.net 
<<"162.244.8.0/21">>,   % poweruphosting.com
[snipped to be replaced with latest below]

109.190.64.0 - 109.190.127.255 false positive

Hello, thank you for your great service! Apparently, the range 109.190.0.0 - 109.190.255.255 (OVH, http://www.ovh.co.uk/) includes legitimate DSL users in the range 109.190.64.0 - 109.190.127.255 (OVH-DSL static IP). I just wanted to report this false positive. Thanks again for your kind consideration.

Volume Drive (104.255.64.0 - 104.255.71.255)

whois 104.255.71.251

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=104.255.71.251?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       104.255.64.0 - 104.255.71.255
CIDR:           104.255.64.0/21
NetName:        VOLUM-ARIN
NetHandle:      NET-104-255-64-0-1
Parent:         NET104 (NET-104-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS46664
Organization:   VolumeDrive (VOLUM-2)
RegDate:        2015-01-22
Updated:        2015-01-22
Ref:            http://whois.arin.net/rest/net/NET-104-255-64-0-1


OrgName:        VolumeDrive
OrgId:          VOLUM-2
Address:        1143 Northern Blvd
City:           Clarks Summit
StateProv:      PA
PostalCode:     18411
Country:        US
RegDate:        2008-08-26
Updated:        2011-09-24
Ref:            http://whois.arin.net/rest/org/VOLUM-2


OrgTechHandle: VOLUM1-ARIN
OrgTechName:   VolumeDrive POC
OrgTechPhone:  +1-862-266-1083 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/VOLUM1-ARIN

OrgAbuseHandle: VOLUM1-ARIN
OrgAbuseName:   VolumeDrive POC
OrgAbusePhone:  +1-862-266-1083 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/VOLUM1-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Vultr cloud vps missing

Got connections from at least two IP's:

45.77.68.23
45.32.90.198

Range 207.46.13.0 - 207.46.13.255 false positive

Hi, you have 207.46.13.0/24 flagged as Microsoft Azure IPs belonging to http://www.windowsazure.com/en-us/, however it's been reported to me that this is a false positive and these IPs are used by Bing search engine spiders. Unlike typical Azure IPs, these IPs resolve to search.msn.com.

Edit: also 157.55.39.0/24 and 40.77.167.0/24

My site is blacklisted

I'm not sure where to put such a request but I notice your service has blacklisted my site (mycockerspaniel.com, 67.225.160.120). My site has very little traffic and my email is handled by mandrillapp. My site sent out a total of 47 email last week and that's about the norm. Mandrill lists my mailserver as excellent with zero complaints in the past 3 months.

Could you please tell me why this happenend so I can inform mandrillapp?

CSV not sorted correctly according to IpDbGenerate.php

When attempting to use the script, it outputs the following:

Array
(
    [_ip0] => -2143170560
    [_ip1] => -2143166465
    [owner] => http://www.link11.de/
)

This appears to be because $last1 >= $i0 evaluates to true.

Cannot run `make generate`

I've honestly tried to update the stats, but could not –

$ make generate
go run ./cmd/ipcat/main.go
# command-line-arguments
cmd/ipcat/main.go:82: undefined: ipcat.DownloadCloudflare
cmd/ipcat/main.go:86: undefined: ipcat.UpdateCloudflare
make: *** [generate] Error 2

Add BlackMesh as a provider

This is what I could come up with:

199.167.72.1,199.167.79.254,BlackMesh,http://www.blackmesh.com/
69.174.51.1,69.174.51.254,BlackMesh,http://www.blackmesh.com/
74.121.192.1,74.121.199.254,BlackMesh,http://www.blackmesh.com/

Cheers,
Marc

Ruby client chokes importing datacenters.csv

Found a fun little bug with the Ruby client tonight. Some provider names have a comma in them, which breaks the Ruby client:

2.2.1 :001 > require './ipcat.rb'
 => true
2.2.1 :002 > dc = IPCat::Datacenters.new('./datacenters.csv')
ArgumentError: wrong number of arguments (5 for 3..4)
	from /Users/mawagner/src/ipcat/ipcat.rb:16:in `add'
	from /Users/mawagner/src/ipcat/ipcat.rb:12:in `block in initialize'
	from /Users/mawagner/src/ipcat/ipcat.rb:11:in `map'
	from /Users/mawagner/src/ipcat/ipcat.rb:11:in `initialize'
	from (irb):2:in `new'
	from (irb):2
	from /Users/mawagner/.rvm/rubies/ruby-2.2.1/bin/irb:11:in `<main>'

The CSV is (I presume) valid, but the Ruby client just splits on commas. Trivial PR incoming with a fix.

Ranges for micfo and contina

Hi!

Micfo have a very huge list of ip: https://ipinfo.io/AS53889#Blocks

And Contina is similar: https://ipinfo.io/AS63008#blocks

I'm thinking that maybe is a good idea maintain a database for identify by ASN

Why are all Google and Facebook ranges missing?

Thanks for sharing this as it is a good set of quickly and easily classifying addresses, but seeing as there are Azure, AWS and other big cloud provider datacenters - it seems very strange that no Google or Facebook ranges at all are present in the dataset. There is a pull request (more exist?) from last year - #14 - with a few Google addresses, but it could be very useful with 1e100.net and other Google sources. Any reason why Google and Facebook are not part of the set - they have their own datacenters and infrastructure? 😃

Would CDNs also be part of this set - seeing as there is Akamai already?

OVH (51.254.0.0 - 51.255.255.255)

whois 51.254.212.184
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '51.254.0.0 - 51.255.255.255'

% Abuse contact for '51.254.0.0 - 51.255.255.255' is '[email protected]'

inetnum:        51.254.0.0 - 51.255.255.255
netname:        FR-OVH-20150522
descr:          OVH SAS
country:        FR
admin-c:        OTC2-RIPE
tech-c:         OTC2-RIPE
status:         LEGACY
mnt-by:         OVH-MNT
created:        2015-05-26T08:55:56Z
last-modified:  2015-05-27T15:52:47Z
source:         RIPE # Filtered
org:            ORG-OS3-RIPE

organisation:   ORG-OS3-RIPE
org-name:       OVH SAS
org-type:       LIR
address:        2 rue Kellermann
address:        59100
address:        Roubaix
address:        FRANCE
phone:          +333974531323
fax-no:         +33320200958
abuse-c:        AR15333-RIPE
admin-c:        GM84-RIPE
admin-c:        OTC2-RIPE
admin-c:        OK217-RIPE
mnt-ref:        OVH-MNT
mnt-ref:        RIPE-NCC-HM-MNT
mnt-by:         RIPE-NCC-HM-MNT
abuse-mailbox:  [email protected]
created:        2004-04-17T11:23:17Z
last-modified:  2015-03-24T14:19:23Z
source:         RIPE # Filtered

role:           OVH Technical Contact
address:        OVH SAS
address:        2 rue Kellermann
address:        59100 Roubaix
address:        France
admin-c:        OK217-RIPE
tech-c:         GM84-RIPE
tech-c:         SL10162-RIPE
nic-hdl:        OTC2-RIPE
abuse-mailbox:  [email protected]
mnt-by:         OVH-MNT
created:        2004-01-28T17:42:29Z
last-modified:  2014-09-05T10:47:15Z
source:         RIPE # Filtered

% Information related to '51.254.0.0/15AS16276'

route:          51.254.0.0/15
descr:          OVH
origin:         AS16276
mnt-by:         OVH-MNT
created:        2015-05-28T17:50:05Z
last-modified:  2015-05-28T17:50:05Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-4)

Overlapping blocks in AS

Related to #34. Since you are thinking about enhancements to the structures, I'd like to throw one more suggestion to consider.

Sometimes a large block owned by a hosting provider may contain few smaller blocks designated for other data centers or even other clients who potentially use the addresses for other purposes (i.e. offices, individual customers, whatever). The current structure of datacenters.csv is not a good fit to express such data.

One of the possible workarounds is the format used by Nginx for its geo module. It's possible not only to "include" a block, but also mark a block as "excluded". Here it is the module documentation if you'd want to see it.

AppEngine - recursive include

If you look at the output of nslookup -q=TXT _cloud-netblocks1.googleusercontent.com 8.8.8.8, it includes _cloud-netblocks6.googleusercontent.com as well.

These IP ranges are currently skipped.

IPv6

Can you suggest IPv6 subnets list for similar purposes?

Automatic PRs for updating known ranges

I've been updating AWS, Azure, etc. ranges manually for a while now. It would be nice to have some sort of cron that polls for changes and automatically makes a PR when new ranges are added. Then I would get a notification and just merge the PR, rather than checking for changes manually and pushing them up myself.

I have a script that uses the hub tool to automatically gofmt and make a PR to a given repo. Could probably use something similar. The question is where to run it.

Some comments breaking godoc.org formatting

Not incredibly urgent/a bit of a weird one:

https://godoc.org/github.com/client9/ipcat

generic.. does not care if ipv4 or ipv6 should not be in a code block, but it looks like godoc.org treats comments that begin with an extra space differently. I'll try to fix.

Hosting Solutions International Inc (209.126.96.0 - 209.126.127.255)

whois 209.126.117.99


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=209.126.117.99?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#

NetRange:       209.126.96.0 - 209.126.127.255
CIDR:           209.126.96.0/19
NetName:        HSI-7
NetHandle:      NET-209-126-96-0-1
Parent:         NET209 (NET-209-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS30083
Organization:   Hosting Solutions International, Inc. (SERVE-6)
RegDate:        2013-12-26
Updated:        2013-12-26
Ref:            http://whois.arin.net/rest/net/NET-209-126-96-0-1



OrgName:        Hosting Solutions International, Inc.
OrgId:          SERVE-6
Address:        210 North Tucker Blvd.
Address:        Suite 910
City:           Saint Louis
StateProv:      MO
PostalCode:     63101
Country:        US
RegDate:        2003-04-15
Updated:        2014-11-13
Ref:            http://whois.arin.net/rest/org/SERVE-6


OrgAbuseHandle: HAD16-ARIN
OrgAbuseName:   HSI Abuse Department
OrgAbusePhone:  +1-314-266-3638 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/HAD16-ARIN

OrgTechHandle: SWI19-ARIN
OrgTechName:   Wintz, Sascha 
OrgTechPhone:  +1-314-480-6840 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/SWI19-ARIN

OrgNOCHandle: SWI19-ARIN
OrgNOCName:   Wintz, Sascha 
OrgNOCPhone:  +1-314-480-6840 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/SWI19-ARIN


#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

inmotionhosting.com (192.249.112.0 - 192.249.127.255)

whois 192.249.124.37

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=192.249.124.37?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#


# start

NetRange:       192.249.112.0 - 192.249.127.255
CIDR:           192.249.112.0/20
NetName:        IMH-LAX
NetHandle:      NET-192-249-112-0-2
Parent:         IMH-LAX (NET-192-249-112-0-1)
NetType:        Reallocated
OriginAS:       AS54641
Organization:   InMotion Hosting, Inc. (INMOT-1)
RegDate:        2013-08-20
Updated:        2013-11-01
Ref:            http://whois.arin.net/rest/net/NET-192-249-112-0-2


OrgName:        InMotion Hosting, Inc.
OrgId:          INMOT-1
Address:        6100 Center Drive
Address:        Suite 1190
City:           Los Angeles
StateProv:      CA
PostalCode:     90045
Country:        US
RegDate:        2008-06-03
Updated:        2012-05-03
Ref:            http://whois.arin.net/rest/org/INMOT-1


OrgTechHandle: SYSTE299-ARIN
OrgTechName:   Systems Team
OrgTechPhone:  +1-888-321-4678 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

OrgNOCHandle: SYSTE299-ARIN
OrgNOCName:   Systems Team
OrgNOCPhone:  +1-888-321-4678 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

OrgAbuseHandle: SYSTE299-ARIN
OrgAbuseName:   Systems Team
OrgAbusePhone:  +1-888-321-4678 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

# end


# start

NetRange:       192.249.112.0 - 192.249.127.255
CIDR:           192.249.112.0/20
NetName:        IMH-LAX
NetHandle:      NET-192-249-112-0-1
Parent:         NET192 (NET-192-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS22611
Organization:   InMotion Hosting, Inc. (INMOT-1)
RegDate:        2013-07-31
Updated:        2013-11-01
Ref:            http://whois.arin.net/rest/net/NET-192-249-112-0-1



OrgName:        InMotion Hosting, Inc.
OrgId:          INMOT-1
Address:        6100 Center Drive
Address:        Suite 1190
City:           Los Angeles
StateProv:      CA
PostalCode:     90045
Country:        US
RegDate:        2008-06-03
Updated:        2012-05-03
Ref:            http://whois.arin.net/rest/org/INMOT-1


OrgTechHandle: SYSTE299-ARIN
OrgTechName:   Systems Team
OrgTechPhone:  +1-888-321-4678 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

OrgNOCHandle: SYSTE299-ARIN
OrgNOCName:   Systems Team
OrgNOCPhone:  +1-888-321-4678 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

OrgAbuseHandle: SYSTE299-ARIN
OrgAbuseName:   Systems Team
OrgAbusePhone:  +1-888-321-4678 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/SYSTE299-ARIN

# end


# start

NetRange:       192.249.124.0 - 192.249.124.255
CIDR:           192.249.124.0/24
NetName:        WHH-WEST
NetHandle:      NET-192-249-124-0-1
Parent:         IMH-LAX (NET-192-249-112-0-2)
NetType:        Reallocated
OriginAS:       AS22611
Organization:   Web Hosting Hub, Inc (WHH6)
RegDate:        2014-12-11
Updated:        2014-12-11
Ref:            http://whois.arin.net/rest/net/NET-192-249-124-0-1


OrgName:        Web Hosting Hub, Inc
OrgId:          WHH6
Address:        3629 Sentara Way
City:           Virginia Beach
StateProv:      VA
PostalCode:     23452
Country:        US
RegDate:        2010-08-27
Updated:        2011-08-08
Ref:            http://whois.arin.net/rest/org/WHH6


OrgAbuseHandle: SYSTE297-ARIN
OrgAbuseName:   Systems  Team
OrgAbusePhone:  +1-877-595-4482 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/SYSTE297-ARIN

OrgTechHandle: SYSTE297-ARIN
OrgTechName:   Systems  Team
OrgTechPhone:  +1-877-595-4482 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/SYSTE297-ARIN

OrgNOCHandle: SYSTE297-ARIN
OrgNOCName:   Systems  Team
OrgNOCPhone:  +1-877-595-4482 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/SYSTE297-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#

Hostgrad (185.40.4.0 - 185.40.4.255)

whois 185.40.4.29
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '185.40.4.0 - 185.40.4.255'

% Abuse contact for '185.40.4.0 - 185.40.4.255' is '[email protected]'

inetnum:        185.40.4.0 - 185.40.4.255
org:            ORG-HL100-RIPE
netname:        Hostgrad
descr:          Hostgrad
country:        RU
admin-c:        EH3355-RIPE
tech-c:         EH3355-RIPE
status:         ASSIGNED PA
mnt-by:         HOSTGRAD-MNT
created:        2015-07-03T11:55:45Z
last-modified:  2015-07-03T11:55:45Z
source:         RIPE # Filtered

organisation:   ORG-HL100-RIPE
org-name:       Hostgard LLC
org-type:       OTHER
address:        Ivanovo, Dzerzhinskogo st., 39
abuse-mailbox:  [email protected]
abuse-c:        ARH29-RIPE
mnt-ref:        HOSTGRAD-MNT
mnt-by:         HOSTGRAD-MNT
created:        2015-07-03T11:52:31Z
last-modified:  2015-07-03T15:24:31Z
source:         RIPE # Filtered

person:         Evgeniy Horoshev
address:        Ivanovo, Dzerzhinskogo st., 39
phone:          +74957874224
nic-hdl:        EH3355-RIPE
mnt-by:         HOSTGRAD-MNT
created:        2015-07-03T11:50:26Z
last-modified:  2015-07-03T11:50:26Z
source:         RIPE # Filtered

% Information related to '185.40.4.0/24AS50113'

route:          185.40.4.0/24
descr:          Hostgrad
origin:         AS50113
mnt-by:         MNT-NTX
created:        2015-04-01T17:44:34Z
last-modified:  2015-07-03T15:49:43Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-1)

Adjust csv output

Is it possible to have another file where the output is displayed without the Name & Domain and a dash or CIDR notation?

For example:
Original
52.249.168.0,52.249.168.255,Microsoft Azure,http://www.windowsazure.com/en-us/

Proposed
52.249.168.0-52.249.168.255
OR
52.249.168.0/24

www.ikoula.com (80.93.80.0 - 80.93.90.255)

whois 80.93.90.96
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '80.93.80.0 - 80.93.90.255'

% Abuse contact for '80.93.80.0 - 80.93.90.255' is '[email protected]'

inetnum:        80.93.80.0 - 80.93.90.255
netname:        IKOULA
descr:          ikoula france serveur virtuel
country:        FR
admin-c:        JG10236-RIPE
tech-c:         NI181-RIPE
status:         ASSIGNED PA
mnt-by:         IKOULA-MNT
mnt-lower:      IKOULA-MNT
mnt-routes:     IKOULA-MNT
created:        2007-07-26T15:28:29Z
last-modified:  2013-12-17T13:18:30Z
source:         RIPE # Filtered

role:           NOC IKOULA
address:        175 rue d?Aguesseau
address:        92100 Boulogne Billancourt
address:        Fr
remarks:        trouble: Information : http://www.ikoula.fr
remarks:        trouble: Spam : mailto:[email protected]
admin-c:        JG10236-RIPE
tech-c:         JDS15-RIPE
tech-c:         AP4912-RIPE
nic-hdl:        NI181-RIPE
mnt-by:         IKOULA-MNT
created:        1970-01-01T00:00:00Z
last-modified:  2014-10-09T15:22:17Z
source:         RIPE # Filtered
abuse-mailbox:  [email protected]
phone:          +33184010250
remarks:        http://express.ikoula.com
remarks:        For any question contact [email protected]
remarks:        or http://express.ikoula.com
remarks:        For Dedicated Server http://express.ikoula.com/serveur-dedie
remarks:        For Domain Name http://express.ikoula.com/nom-de-domaine
remarks:        For Virtual Server http://express.ikoula.com/serveur-virtuel
remarks:        For Managed Hosting http://ies.ikoula.com/
remarks:        For Managed Hosting http://ies.ikoula.com/
remarks:        For Cloud Storage http://www.ikeepincloud.com/
remarks:        For MailService http://www.ex10.biz/
remarks:        For Public Cloud http://express.ikoula.com/cloud-public
remarks:        For Private Cloud http://ies.ikoula.com/cloud-prive

person:         Jules-Henri Gavetti
address:        Ikoula / Gamikzone
address:        175 rue d�Aguesseau
address:        92100 Boulogne Billancourt
address:        Fr
mnt-by:         IKOULA-MNT
phone:          +33 1 71 14 00 01
fax-no:         +33 1 71 14 00 05
nic-hdl:        JG10236-RIPE
created:        2001-09-25T17:11:49Z
last-modified:  2008-12-09T11:28:18Z
source:         RIPE # Filtered

% Information related to '80.93.80.0/20AS21409'

route:          80.93.80.0/20
descr:          Ikoula Ripe Block
origin:         AS21409
remarks:        Abuse reports to [email protected]
remarks:        Peering contact is [email protected]
mnt-by:         IKOULA-MNT
created:        2008-06-30T16:21:03Z
last-modified:  2008-06-30T16:21:03Z
source:         RIPE # Filtered

% This query was served by the RIPE Database Query Service version 1.83-JAVA8 (DB-3)

21vianet

inetnum: 211.151.0.0 - 211.151.255.255
netname: CHINA-21VIANET
descr: 21ViaNet(China),Inc.
country: CN
admin-c: ML1808-AP
tech-c: BW667-AP
status: ALLOCATED PORTABLE
mnt-lower: MAINT-CN-21VIANET
mnt-routes: MAINT-CNNIC-AP
mnt-by: MAINT-CNNIC-AP
mnt-irt: IRT-CNNIC-CN
changed: [email protected] 20081030
changed: [email protected] 20110311
changed: [email protected] 20121017
source: APNIC

route: 211.151.224.0/19
descr: CHINA-ABITCOOL
descr: Abitcool(China) Inc.
country: CN
origin: AS17428
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20040213
source: APNIC

person: Yang Jun
address: No. 15 Tongji Road,Yizhuang Economic and Technological Development Zone,Beijing, PRC 100176
country: CN
phone: +86-10-84562121
fax-no: +86-10-84564234
e-mail: [email protected]
nic-hdl: ML1808-AP
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20121017
source: APNIC

person: Cao Wentao
address: No. 15 Tongji Road,Yizhuang Economic and Technological Development Zone,Beijing, PRC 100176
country: CN
phone: +86-10-84562121
fax-no: +86-10-84564234
e-mail: [email protected]
nic-hdl: BW667-AP
mnt-by: MAINT-CNNIC-AP
changed: [email protected] 20121017
source: APNIC

AWS Sydney range

Straight from the Amazon forums:

Asia Pacific (Sydney)
54.252.0.0/16 (54.252.0.0 – 54.252.255.255) NEW

Lots of inaccuracies

I just started checking this list to see how accurate it is. But only in the first couple of lines I already see a lot of wrong data.

12.54.126.240 - 12.54.126.247 is not godaddy anymore according to https://www.ip2location.com/demo/12.54.126.240 or https://ipinfo.io/12.54.126.240
12.68.118.64 - 12.68.118.95 is not mediatemple anymore.
12.177.232.232 - 12.177.232.239 is not Peak10 anymore.

These are all entries from 6 years ago so based on this quick look I'm afraid a lot entries from 6 years ago will be wrong now. Is it maybe an idea to remove these old entries?

Amazon AWS (54.224.0.0 - 54.239.255.255)

whois 54.231.19.128

#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml
#


#
# The following results may also be obtained via:
# http://whois.arin.net/rest/nets;q=54.231.19.128?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
#


# start

NetRange:       54.224.0.0 - 54.239.255.255
CIDR:           54.224.0.0/12
NetName:        AMAZON-2011L
NetHandle:      NET-54-224-0-0-1
Parent:         NET54 (NET-54-0-0-0-0)
NetType:        Direct Allocation
OriginAS:       AS16509
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:        2012-03-01
Updated:        2012-04-02
Ref:            http://whois.arin.net/rest/net/NET-54-224-0-0-1



OrgName:        Amazon Technologies Inc.
OrgId:          AT-88-Z
Address:        410 Terry Ave N.
City:           Seattle
StateProv:      WA
PostalCode:     98109
Country:        US
RegDate:        2011-12-08
Updated:        2014-10-20
Comment:        All abuse reports MUST include:
Comment:        * src IP
Comment:        * dest IP (your IP)
Comment:        * dest port
Comment:        * Accurate date/timestamp and timezone of activity
Comment:        * Intensity/frequency (short log extracts)
Comment:        * Your contact details (phone and email) Without these we will be unable to identify the correct owner of the IP address at that point in time.
Ref:            http://whois.arin.net/rest/org/AT-88-Z


OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-266-2187 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/AANO1-ARIN

OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/AEA8-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-266-4064 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/ANO24-ARIN

# end


# start

NetRange:       54.230.0.0 - 54.231.255.255
CIDR:           54.230.0.0/15
NetName:        AMAZO-ZL4
NetHandle:      NET-54-230-0-0-1
Parent:         AMAZON-2011L (NET-54-224-0-0-1)
NetType:        Reassigned
OriginAS:       AS16509
Organization:   Amazon.com, Inc. (AMAZO-4)
RegDate:        2012-07-30
Updated:        2012-07-30
Ref:            http://whois.arin.net/rest/net/NET-54-230-0-0-1



OrgName:        Amazon.com, Inc.
OrgId:          AMAZO-4
Address:        Amazon Web Services, Inc.
Address:        P.O. Box 81226
City:           Seattle
StateProv:      WA
PostalCode:     98108-1226
Country:        US
RegDate:        2005-09-29
Updated:        2015-09-30
Comment:        For details of this service please see
Comment:        http://ec2.amazonaws.com/
Ref:            http://whois.arin.net/rest/org/AMAZO-4


OrgAbuseHandle: AEA8-ARIN
OrgAbuseName:   Amazon EC2 Abuse
OrgAbusePhone:  +1-206-266-4064 
OrgAbuseEmail:  [email protected]
OrgAbuseRef:    http://whois.arin.net/rest/poc/AEA8-ARIN

OrgNOCHandle: AANO1-ARIN
OrgNOCName:   Amazon AWS Network Operations
OrgNOCPhone:  +1-206-266-2187 
OrgNOCEmail:  [email protected]
OrgNOCRef:    http://whois.arin.net/rest/poc/AANO1-ARIN

OrgTechHandle: ANO24-ARIN
OrgTechName:   Amazon EC2 Network Operations
OrgTechPhone:  +1-206-266-4064 
OrgTechEmail:  [email protected]
OrgTechRef:    http://whois.arin.net/rest/poc/ANO24-ARIN

# end



#
# ARIN WHOIS data and services are subject to the Terms of Use
# available at: https://www.arin.net/whois_tou.html
#
# If you see inaccuracies in the results, please report at
# http://www.arin.net/public/whoisinaccuracy/index.xhtml

New Akamai Range?

From an EC2 instance this resolves to akamai:
$ ping software.intel.com
PING a163.b.akamai.net (165.254.27.97) 56(84) bytes of data.
64 bytes from 165.254.27.97: icmp_seq=1 ttl=54 time=2.23 ms

Strangely enough 165.254.27.97, seems to be owned by "NTT America, Inc.".
Not sure how to deal with this.

MaxCDN IP ranges

Helpfully MaxCDN include their IP ranges on their website.

A machine digestable link is at https://www.maxcdn.com/one/assets/ips.txt