Super Fast Steemit Connection by Blocking Suspicious IPs Connecting to my Computer while using Steemit Full List and Connection Details
I've been watching my connection, as usual, and I noticed some strange addresses that keep coming up. Some of them are new but a few I have seen before. When I block these addresses it actually enhances my connection. I block google and facebook (nsa) by default so I did not list google here.
If I'm missing something or if a system admin cares to comment I welcome it. I am sure that my computer is running much faster when I block IPS except for the ones listed here at the bottom of the page.
I was only on steemit.com when collecting these IPS. Furthermore I have no other Internet accessable software running just a web browser connected to steemit. Finally I check my IP connections constantly.
Hope this helps some of you out. Please comment.
54.192.48.46 and 35.163.57.6 50.112.150.136 52.41.79.181
ALLOW
OrgName: Amazon.com, Inc.
OrgId: AMAZON-4
Address: 1918 8th Ave
City: SEATTLE
StateProv: WA
PostalCode: 98101-1244
Country: US
RegDate: 1995-01-23
Updated: 2015-04-23
Ref: https://whois.arin.net/rest/org/AMAZON-4
167.114.34.58 and 192.95.33.74
See everytime Im on Steemit. Assume for now it is a legit connection.
OrgName: OVH Hosting, Inc.
OrgId: HO-2
Address: 800-1801 McGill College
City: Montreal
StateProv: QC
PostalCode: H3A 2N4
Country: CA
RegDate: 2011-06-22
Updated: 2016-03-25
Ref: https://whois.arin.net/rest/org/HO-2
??199.212.0.46</> and 199.71.0.46
This is Arin. But my whois search still works when I block them...assuming it is really ARINOPs.
Blocked
BLOCKED # iptables -I INPUT -s 199.71.0.46/8 -j DROP
BLOCKED #iptables -I INPUT -s 199.212.0.46/8 -j DROP
OrgName: ARIN Operations
OrgId: ARINOPS
Address: PO Box 232290
City: Centreville
StateProv: VA
PostalCode: 20120
Country: US
RegDate: 2012-09-07
Updated: 2016-08-08
Ref: https://whois.arin.net/rest/org/ARINOPS
192.124.249.9
Multiple IPs have linked to Microsoft(nsa). Could be necessary for website functionality. For now I allow.
ALLOW
131.253.61.80 Microsoft
The following results may also be obtained via:
https://whois.arin.net/rest/nets;q=131.253.61.80?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 131.253.61.0 - 131.253.255.255
CIDR: 131.253.61.0/24, 131.253.62.0/23, 131.253.128.0/17, 131.253.64.0/18
NetName: MICROSOFT
NetHandle: NET-131-253-61-0-1
Parent: NET131 (NET-131-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: Microsoft Corp (MSFT-Z)
RegDate: 2011-06-21
Updated: 2017-01-13
Ref: https://whois.arin.net/rest/net/NET-131-253-61-0-1
93.184.220.29
BLOCKED
BLOCKED # iptables -I INPUT -s 93.184.220.29/8 -j DROP
Why is Derrick trying to connect to my computer?
% Information related to '93.184.220.0 - 93.184.223.255'
% Abuse contact for '93.184.220.0 - 93.184.223.255' is '[email protected]'
inetnum: 93.184.220.0 - 93.184.223.255
netname: EDGECAST-NETBLK-03
descr: NETBLK-03-EU-93-184-220-0-22
country: EU
admin-c: DS7892-RIPE
tech-c: DS7892-RIPE
status: ASSIGNED PA
mnt-by: MNT-EDGECAST
created: 2012-06-22T21:57:14Z
last-modified: 2012-06-22T21:57:14Z
source: RIPE # Filtered
person: Derrick Sawyer
address: 2850 Ocean Park Blvd., Suite 200, Santa Monica CA 90405 USA
phone: +18773343236
nic-hdl: DS7892-RIPE
created: 2010-08-25T18:44:19Z
last-modified: 2012-04-17T16:42:54Z
source: RIPE
mnt-by: MNT-EDGECAST
199.7.55.74
Allow
https://whois.arin.net/rest/nets;q=199.7.55.74?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 199.7.48.0 - 199.7.63.255
CIDR: 199.7.48.0/20
NetName: VGRSGTLD-15
NetHandle: NET-199-7-48-0-1
Parent: NET199 (NET-199-0-0-0-0)
NetType: Direct Assignment
OriginAS:
Organization: VeriSign Global Registry Services (VGRS)
RegDate: 2004-01-29
Updated: 2012-03-02
Ref: https://whois.arin.net/rest/net/NET-199-7-48-0-1
96.126.112.137
BLOCK
iptables -I INPUT -s 96.126.112.137 -j DROP
The following results may also be obtained via:
https://whois.arin.net/rest/nets;q=96.126.112.137?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2
NetRange: 96.126.96.0 - 96.126.127.255
CIDR: 96.126.96.0/19
NetName: LINODE-US
NetHandle: NET-96-126-96-0-1
Parent: NET96 (NET-96-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: Linode (LINOD)
RegDate: 2011-05-06
Updated: 2012-02-24
Comment: This block is used for static customer allocations.
Ref: https://whois.arin.net/rest/net/NET-96-126-96-0-1
OrgName: Linode
OrgId: LINOD
Address: 329 E. Jimmie Leeds Road
Address: Suite A
City: Galloway
StateProv: NJ
PostalCode: 08205
Country: US
RegDate: 2008-04-24
Updated: 2014-08-01
Comment: http://www.linode.com
Ref: https://whois.arin.net/rest/org/LINOD
Here is what my connections looked like after blocking strange connections.
Now it is light speed.
I'm surprised there is no response and don't know what to make of that.