Significant web activity from 2x ip blocks

General
1

Hello,

I have daily report at our facility of web activity with the following ip address blocks recently that have no category, host name, or site name.

The only information listed is: AS33438 - StackPath, LLC.

Could someone please who knows or find out how-to verify who the following ip blocks/addresses belong to so I may better categorize this activity?

151.139.124.0/24

Example:

151.139.124.43

151.139.124.59

151.139.124.66

151.139.124.67

151.139.124.68

151.139.48.0/22

Example:

151.139.51.180

151.139.51.182

151.139.51.185

151.139.51.188

151.139.51.190

151.139.51.196

thank you,

Justin

2

Hey Justin,

Thank you for posting to the community. I really appreciate it.

I ran the summarize command using our CLI on the mentioned IP addresses and the CIDR block.

ipinfo summarize ips.txt

This is the result:

Summary
- Total   1291
- Unique  1280
- Anycast 0
- Bogon   0
- Mobile  0
- VPN     0
- Proxy   0
- Hosting 1291
- Tor     0
- Relay   0

Top ASNs
- AS33438 StackPath, LLC. 1291 (100.0%)

Top Usage Types
- Hosting 1291 (100.0%)

Top Routes
- 151.139.48.0/22 (AS33438)  1030 (79.8%)
- 151.139.124.0/24 (AS33438) 261 (20.2%)

Top Countries
- United States 1291 (100.0%)

Top Cities
- Ashburn, Virginia, US            1028 (79.6%)
- Seattle, Washington, US          261 (20.2%)
- Washington, Washington, D.C., US 1 (0.1%)
- Reston, Virginia, US             1 (0.1%)

Top Regions
- Virginia, US         1029 (79.7%)
- Washington, US       261 (20.2%)
- Washington, D.C., US 1 (0.1%)

Top Domains
- hwcdn.net 231 (17.9%)
- hwng.net  2 (0.2%)
ips.txt

151.139.124.0/24
151.139.124.43
151.139.124.59
151.139.124.66
151.139.124.67
151.139.124.68
151.139.48.0/22
151.139.51.180
151.139.51.182
151.139.51.185
151.139.51.188
151.139.51.190
151.139.51.196

It looks like all the IPs belong to AS33438 StackPath, LLC. details - IPinfo.io.

Check out our summary tool as well:

Do you want the list of all the ranges they own? I can get you those IPs using our free database.

3

Hello,

I did see most of this info when I searched also.

So are these ip blocks Microsoft; updates, content delivery, etc?

Thank you,

Justin

4

Not sure about that. Stackpath is owned by IBM and it is their edge computing service.

StackPath is an American edge computing platform provider headquartered in Dallas, Texas. Its founding team was led by Lance Crosby, who also co-founded SoftLayer Technologies, acquired by IBM in 2013