User talk:AntiCompositeBot/ASNBlock/config.json

AS23734

@AntiComposite: I'm not familiar enough with the way ASNs are assigned or registered or whatever to know how to do this, but it seems AS23734 should be added to this list – looks like lots of the stuff here is colocation hosting. Best, Kevin (aka L235 · t · c) 23:21, 26 October 2020 (UTC)

I have read the above message. I will reply when I have a moment. AntiCompositeNumber (talk) 04:34, 30 October 2020 (UTC)

@L235: I've added it. Most of the ranges they're advertising at the moment appear to be webhosts, but there's at least one potentially legitimate ISP in the mix. Those ranges should be excluded by the WHOIS search, but as always, check for legitimate use before blocking. --AntiCompositeNumber (talk) 20:23, 5 November 2020 (UTC)

Thank you! KevinL (aka L235 · t · c) 01:59, 8 November 2020 (UTC)

AS60068

@AntiComposite: I have another for you: AS60068. ToBeFree seems to have gotten all/almost all of them, but it should be added to the config for when the blocks expire in a year. Best, KevinL (aka L235 · t · c) 00:35, 25 December 2020 (UTC)

Also, AS212238 should be added as well. KevinL (aka L235 · t · c) 08:11, 25 December 2020 (UTC)

This is a thing? Nice – thanks. I have also made a request at meta:SRG to globally lock them. ~ ToBeFree (talk) 01:17, 25 December 2020 (UTC)

@ToBeFree: Yup, basically, when the ranges are not blocked they're reported by AntiComposite's bot to User:AntiCompositeBot/ASNBlock to be blocked. Best, KevinL (aka L235 · t · c) 02:05, 25 December 2020 (UTC)

 Done AntiCompositeNumber (talk) 04:26, 28 December 2020 (UTC)

Sprious

@AntiComposite: AS64267 Sprious should be flagged, their WHOIS contain "Blazing SEO", "Sprious", and "Emeigh Investments". Jon Kolbert (talk) 01:12, 26 February 2021 (UTC)

@Jon Kolbert:  Done AntiCompositeNumber (talk) 01:38, 26 February 2021 (UTC)

AS138011

@AntiComposite: Could you add AS138011 to the list? It's SpeedyCloud [1]. Search terms can include "Cloud", "SpeedyCloud", and "cloudtime". Best, KevinL (aka L235 · t · c) 07:56, 28 May 2021 (UTC)

Also, could you investigate AS134520, "GigsGigs Network Services"? They have cloud VPS hosting and colocation services [2] [3] so they definitely need to be on the list in some form, but I'm wondering whether they should all be blocked or whether the IPTelecom ones can be exempt. (Looks like IPTelecom is also a colocation host, so I think I'm on firm ground to block, but should it be added to the list?) KevinL (aka L235 · t · c) 08:09, 28 May 2021 (UTC)

At least one GigsGigs range is on AS55799 as well. KevinL (aka L235 · t · c) 08:47, 28 May 2021 (UTC)

 Done for both. It looks like IPTelecom/TechAvenue is the colocation (and network) provider for GigsGigs, so it wouldn't be unusual for some of the ranges to not have more specific WHOIS entries. AntiCompositeNumber (talk) 21:10, 5 June 2021 (UTC)

Oracle Cloud

@AntiComposite: Hi, hope you're doing well. Do you think you could add the public-facing Oracle Cloud IPs to ASNBlock? They publish a json file here: [4], and it's documented here. My understanding is that Oracle Cloud functions just like AWS in that anyone can sign up for an account (I've done so to test this), and there's even a free tier with a permanent free VPS. Best, KevinL (aka L235 · t · c) 20:21, 19 August 2021 (UTC)

Also, it might be worth it to consider blocking the Huawei Cloud IPs as well, given they also function as anonymizers and also have a free offering. I haven't found a public list of endpoints yet, and if no one can, it might be worth blocking by ASN. KevinL (aka L235 · t · c) 20:23, 19 August 2021 (UTC)

SQL says Huawei Cloud seems to be present on 55990 and 136907, fwiw. KevinL (aka L235 · t · c) 20:27, 19 August 2021 (UTC)

@L235: Doing... ^{!ɘM γɿɘυϘ}⅃ϘƧ 10:53, 20 August 2021 (UTC)

 Done: [5] ^{!ɘM γɿɘυϘ}⅃ϘƧ 10:56, 20 August 2021 (UTC)

Thanks SQL. Just have the Oracle list remaining for AntiComposite now. KevinL (aka L235 · t · c) 18:06, 20 August 2021 (UTC)

@L235  Done AntiCompositeNumber (talk) 16:45, 26 August 2021 (UTC)

@AntiCompositeNumber: Thank you very much! KevinL (aka L235 · t · c) 16:45, 26 August 2021 (UTC)

One more

AS204957 probably needs to be added. Pretty sure this is all hosting providers. KevinL (aka L235 · t · c) 17:45, 25 September 2021 (UTC)

Well, added KevinL (aka L235 · t · c) 17:58, 25 September 2021 (UTC)