Nobis Technology Group, LLC Nobis Technology Group, L.L.C., through its subsidiaries, provides data centers and virtual private servers. Additionally, the company offers web hosting and online gaming services. Its subsidiaries include Ubiquity Server Solutions, Ubiquity Hosting Solutions, and DarkStar Communications. Nobis Technology Group, L.L.C. was founded in 2006 and is based in Phoenix, Arizona. As of March 8, 2016, Nobis Technology Group, L.L.C. operates as a subsidiary of Leaseweb USA, Inc. 6930 East Chauncey Lane Suite 150 Phoenix, AZ 85054 United States
Founded in 2006
www.nobistech.net
Key Executives for Nobis Technology Group, L.L.C. Mr. Clint Chapman
Chief Executive Officer
Mr. Brett Guarnieri
Chief Information Officer
Compensation as of Fiscal Year 2017.
Spamming Bastards – The Saga Continue Update: Please note that the up-to-date version of this blocklist is maintained here, this post will not be updated with any future changes to the Nobis ranges.
Just when you think you’ve finally blocked all of the Nobis Technology Group’s (aka Ubiquity Server Solutions) IP ranges they go and take over another range and carry on merrily spamming your comments section. So, I’ve taken the nuclear option and blacklisted every IP range associated with AS15003 (which is their AS) as per the very helpful http://bgp.he.net/AS15003#_prefixes – yes, they really do have 867 IPv4 netblocks allocated to them. I’ve collapsed the ranges down to a slightly more manageable 119 (there are a lot of contiguous blocks in there) and added it to my blocklist page, it’s also reproduced below, so help yourselves. #Nobis/Ubiquity Ranges - http://bgp.he.net/AS15003#_prefixes Deny from 23.19.0.0/16 Deny from 23.80.0.0/16 Deny from 23.81.0.0/17 Deny from 23.81.128.0/18 Deny from 23.81.192.0/20 Deny from 23.81.216.0/21 Deny from 23.81.224.0/19 Deny from 23.82.0.0/16 Deny from 23.83.0.0/17 Deny from 23.83.128.0/18 Deny from 23.83.192.0/20 Deny from 23.104.0.0/14 Deny from 23.108.0.0/15 Deny from 23.110.0.0/16 Deny from 23.111.251.0/24 Deny from 23.224.0.0/15 Deny from 23.226.48.0/20 Deny from 23.235.128.0/18 Deny from 23.248.192.0/18 Deny from 64.120.1.0/24 Deny from 64.120.2.0/23 Deny from 64.120.4.0/22 Deny from 64.120.8.0/21 Deny from 64.120.16.0/20
Deny from 64.120.32.0/19 Deny from 64.120.64.0/19 Deny from 64.120.96.0/20 Deny from 64.120.112.0/21 Deny from 64.120.122.0/23 Deny from 64.120.124.0/22 Deny from 67.201.0.0/21 Deny from 67.201.48.0/23 Deny from 69.31.107.0/24 Deny from 69.147.224.0/23 Deny from 69.147.227.0/24 Deny from 69.147.228.0/22 Deny from 69.147.232.0/21 Deny from 69.147.240.0/22 Deny from 69.147.244.0/24 Deny from 69.147.246.0/23 Deny from 69.147.248.0/21 Deny from 69.174.60.0/22 Deny from 70.32.32.0/20 Deny from 72.37.204.0/24 Deny from 72.37.221.0/24 Deny from 72.37.222.0/23 Deny from 72.37.224.0/21 Deny from 72.37.237.0/24 Deny from 72.37.242.0/23 Deny from 72.37.246.0/23 Deny from 74.113.144.0/22 Deny from 108.62.0.0/16 Deny from 108.171.33.0/24 Deny from 108.171.34.0/23 Deny from 108.171.36.0/23 Deny from 108.171.38.0/24 Deny from 108.171.43.0/24 Deny from 108.171.44.0/22 Deny from 108.171.53.0/24 Deny from 108.171.54.0/23 Deny from 108.171.56.0/24 Deny from 108.171.59.0/24 Deny from 108.171.60.0/23 Deny from 108.171.63.0/24 Deny from 108.177.128.0/17 Deny from 108.187.0.0/16 Deny from 142.91.0.0/16
Deny from 142.234.0.0/16 Deny from 147.255.0.0/16 Deny from 162.209.128.0/17 Deny from 162.222.68.0/22 Deny from 172.240.0.0/15 Deny from 172.247.0.0/16 Deny from 172.255.0.0/16 Deny from 173.208.0.0/18 Deny from 173.208.64.0/19 Deny from 173.208.96.0/21 Deny from 173.208.104.0/24 Deny from 173.208.106.0/23 Deny from 173.208.108.0/22 Deny from 173.208.112.0/20 Deny from 173.234.0.0/18 Deny from 173.234.64.0/20 Deny from 173.234.80.0/21 Deny from 173.234.88.0/23 Deny from 173.234.90.0/24 Deny from 173.234.92.0/22 Deny from 173.234.96.0/21 Deny from 173.234.105.0/24 Deny from 173.234.109.0/24 Deny from 173.234.110.0/23 Deny from 173.234.112.0/20 Deny from 173.234.128.0/19 Deny from 173.234.160.0/20 Deny from 173.234.176.0/21 Deny from 173.234.184.0/22 Deny from 173.234.188.0/24 Deny from 173.234.190.0/23 Deny from 173.234.192.0/18 Deny from 174.34.128.0/19 Deny from 174.34.160.0/20 Deny from 174.34.176.0/21 Deny from 174.34.184.0/22 Deny from 174.34.188.0/23 Deny from 174.34.190.0/24 Deny from 192.151.224.0/20 Deny from 192.151.248.0/21 Deny from 192.161.80.0/20 Deny from 192.163.160.0/19 Deny from 192.229.64.0/18
Deny from 192.238.128.0/17 Deny from 192.253.240.0/21 Deny from 196.45.112.0/22 Deny from 198.48.96.0/20 Deny from 198.48.112.0/22 Deny from 216.6.224.0/20 Deny from 216.151.31.0/24 Deny from 216.152.224.0/20 Deny from 216.193.237.0/24 #End of Nobis/Ubiquity Ranges No doubt they’ll buy up more IP space as needed so they can continue to sell their services to spammers, malware distributors and other disgusting excuses for human beings.
Spamming Bastards: Part Deux My spam Blocklist has been slowly growing since I created it in order to stem the tide of comment spam coming from Nobis/Ubiquity Server-owned address blocks. Ultimately I made the choice to block all the netblocks that they had allocated from ARIN and that seemed to have worked, up until today when I started getting comment spam from some brand new Nobis/Ubiquity addresses. It would seem that they’ve got themselves a netblock from RIPE and started using that for spamming as well; the range in question is 176.31.50.64/27 but given their apparent dedication to illegal activity, it wouldn’t surprise me if others start popping up here and there as well. Thankfully, the relative scarcity of available IPv4 blocks is making it much tougher for these spamming fuckers to evade blocking mechanisms without resorting to botnets. That said, when you’re getting more than 10 times as many spam comments as legitimate ones, it doesn’t exactly fill you with confidence that we’ll ever get a real handle on the problem.
Spamming Bastards
Given that my blog is relatively low traffic, it’s remarkable just how many spam comments and hacking attempts I log daily. A good 50% or more of all the spam comments I get originate from the same place: Ubiquity Server Solutions/Nobis Technology Group, who share a couple of overlapping IP ranges and are somewhat notorious if my brief Googling is anything to go by. I’m a big fan of Hanlon’s Razor, but in this case I’m really not sure either way. So, as of today, their entire ranges are blacklisted: Deny from 173.208.100.0/22 #Ubiquity Server Solutions Deny from 108.62.0.0/16 #Nobis Technology Group I don’t like having to block entire /16 ranges because I know there are bound to be false positives in there somewhere, but frankly it’s the only way to make things manageable right now. I expect to see my error.log grow exponentially over the next few days. Update: And another range of theirs that was still spamming me… Deny from 173.234.0.0/16 #Nobis Technology Group Update: And yet another… Deny from 23.19.0.0/16 #Nobis Technology Group Update: Guess who… Deny from 64.120.0.0/17 #Nobis Technology Group Update: Right, let’s make this simple; courtesy of ARIN’s WHOIS Database #All Nobis/Ubiquity ARIN Netblocks Deny from 70.32.32.0/20 Deny from 67.201.48.0/23 Deny from 72.37.145.0/24 Deny from 173.208.0.0/17 Deny from 69.174.60.0/22 Deny from 174.34.128.0/18 Deny from 173.234.0.0/16 Deny from 108.62.0.0/16 Deny from 72.37.224.0/21 Deny from 23.19.0.0/16 Deny from 72.37.237.0/24 Deny from 72.37.218.0/23 Deny from 72.37.222.0/23 Deny from 72.37.221.0/24 Deny from 67.201.0.0/21 Deny from 72.37.242.0/23 Deny from 67.201.40.0/24 Deny from 72.37.246.0/23 Deny from 216.6.224.0/20 Deny from 72.37.204.0/24 Deny from 69.147.224.0/23 Deny from 64.120.0.0/17
Update: My complete comment spam blocklist is now available here. More on clickman, LLC spam https://goo.gl/41Rfyk https://goo.gl/MQGpTC https://goo.gl/tD4T3g https://goo.gl/nR5Bh5 https://goo.gl/Q5yfh9 https://goo.gl/sVE9Cb https://goo.gl/tjDzQg https://goo.gl/MEcK2f
