Just blocked 95.131.[184|185|186|190|191].0/24 on my firewall because suspicious port scanning @WillHillBet
Posted by jpluimers on 2016/11/02
I just blocked these IP subnets on my routers:
- 95.131.184.0/24
- 95.131.185.0/24
- 95.131.186.0/24
- 95.131.190.0/24
- 95.131.191.0/24
Within a day they managed to get 60+ IP addresses from these subnets into my port-scanner blacklists because of suspicious port scanning activities.
They mostly belong to Whg (International) Limited, Gibraltar and Whg (International) Limited, United Kingdom which seem to be related to William Hill Organization Ltd, United Kingdom that I just blocked before.
- [WayBack] 95.131.184.0 – 95.131.184.63 – Ip Address Search, United Kingdom
- [WayBack] 95.131.184.64 – 95.131.184.95, United Kingdom
- [WayBack] 95.131.184.96 – 95.131.184.111 – Whg (International) Limited | Myip.ms
- [WayBack] 95.131.184.112 – 95.131.184.119 Lookup Ip Address
- [WayBack] 95.131.184.120 – 95.131.184.127 | Myip.ms
- [WayBack] Source: 95.131.184.128 – 95.131.184.255 – Whg (International) Limited | Myip.ms
- [WayBack] Source: 95.131.185.0 – 95.131.185.255 – Whg (International) Limited | Myip.ms
- [WayBack] Source: 95.131.186.0 – 95.131.186.63 | Myip.ms
- [WayBack] Source: 95.131.186.64 – 95.131.186.127 – William Hill Organisation Limited | Myip.ms
- [WayBack] Source: 95.131.186.128 – 95.131.186.191 – William Hill Network Services United Kingdom
- [WayBack] Source: 95.131.186.192 – 95.131.186.192 – Gibraltar | Myip.ms
- [WayBack] Source: 95.131.186.193 – 95.131.186.255 – Gibraltar | Myip.ms
- [WayBack] Source: 95.131.187.0 – 95.131.187.255 – IP Address Whois – Whg (International) Limited
- [WayBack] Source: 95.131.188.0 – 95.131.188.127 Whois
- [WayBack] Source: 95.131.188.128 – 95.131.188.255 – Ip Address – Whg (International) Limited
- [WayBack] Source: 95.131.189.0 – 95.131.189.255 – Who Is IP Address Lookup | Myip.ms
- [WayBack] Source: 95.131.190.0 – 95.131.190.31 – Playtech Gaming | Myip.ms
- [WayBack] Source: 95.131.190.32 – 95.131.190.63 | Myip.ms
- [WayBack] Source: 95.131.190.64 – 95.131.190.127 – United Kingdom | Myip.ms
- [WayBack] Source: 95.131.190.128 – 95.131.190.255 – Whg (International) Limited | Myip.ms
- [WayBack] Source: 95.131.191.0 – 95.131.191.31 Lookup Ip
- [WayBack] Source: 95.131.191.32 – 95.131.191.255 Internet Addresses
If the situation continues I’m going to block the 95.131.184.0/26 superblock as well:
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment