# Magento Managed Hosting by and for shop owners

> We design, build and operate a tailored managed hosting architecture for your Magento online shop — for performance, scalability and security.

PARC Network designs, builds and operates managed hosting architectures for Magento 2 shops. We use open-source components, are GDPR-compliant, and avoid vendor lock-in.

## Key pages

- [Homepage](https://www.parc-network.com/): Overview of our managed Magento hosting architecture with two examples and pricing.

- [A10 Networks — per-IP self-ID via a10protects.com](https://www.parc-network.com/a10/): PTR autoscan-*.research.a10protects.com (self-ID): 5 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. diverse Linode (AS63949).
- [Adyen — official IP ranges (webhook/API)](https://www.parc-network.com/adyen/): Offizielle IP-Ranges von Adyen (11 Einträge), aus Adyen-Doku (Allowlisting) + out.adyen.com normalisiert.
- [Alpha Strike Labs — the /22 is interleaved, not block-foreign](https://www.parc-network.com/alphastrike/): How the PARC feed for Alpha Strike Labs (AS208843) came about — and why only the per-IP ASN check finds the ~1,700 real IPs: one /22 is interleaved with foreign ASNs address by address, not split block-wise.
- [BinaryEdge — official minion API, FCrDNS-confirmed](https://www.parc-network.com/binaryedge/): Offizielle Minion-API (api.binaryedge.io/v1/minions) + FCrDNS: 4.149 von 6.412 bidirektional bestätigt (PTR prod-*-<region>-N.awp.binaryedge.ninja, Forward zurück auf dieselbe IP). Plus IPv6 (api.binaryedge.io/v1/minions-ipv6): 2.623 von 2.702 self-ID per Reverse-PTR *.binaryedge.ninja, davon 1.148 voll FCrDNS (IPv6-Forward-Zone nur teilweise befüllt). Gesamt 4.149 IPv4 + 2.623 IPv6.
- [BitSight Internet Census — the 17 scanner /24, ASN ownership and FCrDNS methodology](https://www.parc-network.com/bitsight/): The empirically determined IP ranges of the BitSight Internet Census scanner (Internet Census Group, NSEC Portugal, AS211680) to block or allowlist — plus why BitSight publishes no official IP list and how to verify the 17 /24 via ASN ownership and FCrDNS against *.internet-census.org.
- [Braintree — official IP ranges (webhook/API)](https://www.parc-network.com/braintree/): Offizielle IP-Ranges von Braintree (46 Einträge), aus assets.braintreegateway.com/json/ips.json normalisiert.
- [bruteforceblocker — SSH brute-force blacklist](https://www.parc-network.com/bruteforceblocker/): SSH brute-force blacklist by Daniel Gerzo (FreeBSD committer, danger.rulez.sk) — profile and cross-check with AbuseIPDB.
- [BufferOver — per-IP self-ID via bufferover.run](https://www.parc-network.com/bufferover/): PTR *.scan.bufferover.run (self-ID): 28 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. diverse Linode (AS63949).
- [Cdiscount (Octopia) — documented caller IPs](https://www.parc-network.com/cdiscount-marketplace/): Die offiziellen Quell-IPs, von denen die Octopia-/Cdiscount-Systeme den Verkäufer anrufen, aus der Octopia-Doku.
- [Checkout.com — official IP ranges (webhook/API)](https://www.parc-network.com/checkout/): Offizielle IP-Ranges von Checkout.com (3 Einträge), aus checkout.com/docs/files/ip-lists/webhooks-live.txt normalisiert.
- [CINS Army (CI Army List) — threat-intel blacklist](https://www.parc-network.com/cins/): CI Army List (ci-badguys) from the CINS Score system by Sentinel IPS — profile and cross-check with AbuseIPDB.
- [CocCocBot (Cốc Cốc) — the verified crawler block and how we proved it via FCrDNS](https://www.parc-network.com/coccoc/): How the PARC feed for CocCocBot was built: Cốc Cốc publishes no official IP list and runs no ASN of its own — we verified the crawler block 103.131.71.0/24 fully and bidirectionally via FCrDNS against *.coccoc.com.
- [Cookie-Script — documented scanner IP](https://www.parc-network.com/cookiescript/): Die offizielle Scanner-IP von Cookie-Script (Consent-Management), aus der Cookie-Script-Doku.
- [Cortex Xpanse — the ASN lies, RDAP ownership identifies](https://www.parc-network.com/xpanse/): RDAP-Netzblock-Eigentum: 6 dokumentierte Scan-Blöcke (147.185.132.0/22, 144.86.173.0/24, 172.105.147.0/24, 198.235.24.0/24, 205.210.31.0/24, 216.25.88.0/21) sind ARIN-registriert auf Palo Alto Networks (PAN-22) bzw. Expanse (EXPAN-13). ASN zeigt Google Cloud (geleast) — irreführend; PTR existiert praktisch nicht. Identifikation per RDAP-Org, nicht ASN/DNS. Palo Alto führt die Range offiziell als Scan-Infrastruktur.
- [Criminal IP — per-IP self-ID via criminalip.com](https://www.parc-network.com/criminalip/): PTR security.criminalip.com (self-ID): 291 von 584 IPs reversen auf criminalip.com. Nur die self-identifizierenden.
- [CyberGreen — per-IP self-ID via cybergreen.net](https://www.parc-network.com/cybergreen/): PTR scanner*.scanning.cybergreen.net (self-ID): 1 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. AWS (AS14618).
- [CyberResilience — per-IP self-ID via cyberresilience.io](https://www.parc-network.com/cyberresilience/): PTR portscanner-*.prod.cyberresilience.io (self-ID): 8 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. DigitalOcean (AS14061).
- [DotBot (Moz) — the verified crawler range, four-source methodology and why the whole /24](https://www.parc-network.com/dotbot/): The IP range of the Moz crawler DotBot (Moz Link Explorer) to block or allowlist — plus why Moz publishes no official IP list and how we verified the range 216.244.66.0/24 across four independent sources, including our own SafeLine WAF telemetry.
- [F6 Security — per-IP self-ID via f6.security](https://www.parc-network.com/f6/): PTR scan.f6.security (self-ID): 7 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. diverse.
- [Group-IB — per-IP self-ID via group-ib.com](https://www.parc-network.com/group-ib/): PTR group-ib.com (self-ID): 19 von 21 IPs reversen auf group-ib.com. Nur die self-identifizierenden.
- [Infrawatch — verifying a scanner with no forward DNS via authoritative reverse DNS](https://www.parc-network.com/infrawatch/): How the PARC feed for Infrawatch came about: a threat-intel scanner leasing scattered single IPs across the Hydra Communications network. No FCrDNS possible — identified via authoritative reverse DNS *.infrawat.ch. 581 IPs, derived from the CINS blacklist and confirmed stable.
- [Internet Census Group — per-IP self-ID via internet-census.org](https://www.parc-network.com/internet-census/): PTR internet-census.org (self-ID): 267 von 630 IPs reversen auf internet-census.org. Nur die self-identifizierenden (die übrigen tragen fremde Hoster-PTR).
- [InternetData.io — per-IP self-ID via internetdata.io](https://www.parc-network.com/internetdata/): PTR *-scan-*.io.internetdata.io (self-ID): 2 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. DigitalOcean (AS14061).
- [InterneTTL Project — per-IP self-ID via internettl.org](https://www.parc-network.com/internettl/): PTR internettl.org (self-ID): 221 von 254 IPs des /24 (104.152.52.0/24, Rethem Hosting AS14987) reversen auf internettl.org. Nur die self-identifizierenden.
- [Intrinsec — per-IP self-ID via intrinsec.com](https://www.parc-network.com/intrinsec/): PTR scan*.intrinsec.com (self-ID): 36 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. OVH (AS16276).
- [IPIP.net — only the own ASN (AS136180), rented Linode excluded](https://www.parc-network.com/ipip/): Eigen-ASN AS136180 (IPIP-CN, Beijing Tiantexin = ipip.nets Betreiberfirma): 5 CN-/24-Blöcke = 1.280 IPs, per-IP-ASN geprüft (alle 1.270 Host-IPs geantwortet, alle AS136180; Reverse zeigt auf den Netzbetreiber misaka.io, also Eigentums- statt DNS-Beweis). Plus 35 self-identifizierende IPs auf gemietetem Linode (PTR scan-N.security.ipip.net, reverse-only). Gesamt 1.315. Gemietete Linode-IPs ohne ipip-PTR ausgeschlossen.
- [Kaufland Global Marketplace — official egress IPs](https://www.parc-network.com/kaufland-marketplace/): 20 offizielle Egress-IPs der Kaufland Marketplace Seller API (Google Cloud), aus der Kaufland-API-Doku.
- [Klarna — official IP ranges (webhook/API)](https://www.parc-network.com/klarna/): Offizielle IP-Ranges von Klarna (10 Einträge), aus Klarna-Doku (Callbacks) normalisiert.
- [Legal Notice](https://www.parc-network.com/legal-notice/): Legal notice for PARC Network GmbH & Co. KG — provider identification according to § 5 DDG (German Digital Services Act).
- [LinkedInBot — IP ranges, ASN verification and the Microsoft / AI context](https://www.parc-network.com/linkedin/): The IP ranges of the LinkedIn crawler (LinkedInBot) to allowlist or block — plus why LinkedIn publishes no official IP list, how to verify by ASN (AS14413 + AS13443) and reverse DNS against *.fwd.linkedin.com, and what Microsoft ownership means for AI training.
- [M2E Pro — official server IPs (cron/API/repricer)](https://www.parc-network.com/m2epro/): Offizielle Server-IPs von M2E Pro (Cron/API/Repricer), aus der M2E-Pro-Doku.
- [Magento Hosting Architecture Models](https://www.parc-network.com/magento-architecture/): Our Magento hosting architecture in several stages — from a lean dedicated entry-level setup to a geo-distributed high-availability architecture.
- [Max-Planck-Institut für Informatik — per-IP self-ID via mpi-inf.mpg.de](https://www.parc-network.com/mpi-inf/): PTR inet-research-scan-*.mpi-inf.mpg.de (self-ID): 26 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. MPG (AS5345).
- [Meta crawlers (Facebook · Instagram · WhatsApp · Threads) — the 5 bots, ASN verification and IP ranges](https://www.parc-network.com/meta/): The five crawlers of Meta Platforms (FacebookExternalHit, Meta-WebIndexer, Meta-ExternalAds, Meta-ExternalAgent, Meta-ExternalFetcher) — to allowlist or block, why Meta publishes no official IP list, and how the PARC feed aggregates the prefixes of all five Meta ASNs (AS-FACEBOOK).
- [MJ12bot — "not IP-identifiable" is wrong: 90 FCrDNS nodes](https://www.parc-network.com/mj12bot/): Majestic calls MJ12bot a distributed crawler with no IP list. Empirically wrong: the live core self-identifies via FCrDNS crawl-*.mj12bot.com, 72% on OVH. Triangulated from logs, multilingual research and 1.7M blacklist IPs → 90 nodes.
- [Modat — the scanner that publishes its list and actually sticks to it](https://www.parc-network.com/modat/): How the PARC feed for Modat came about: an attack-surface scanner by Modat B.V. (NL) with its own ASN. Modat publishes an official IP list — and this time it is complete and fully FCrDNS-verifiable. 186 IPs.
- [Mollie — official IP ranges (webhook/API)](https://www.parc-network.com/mollie/): Offizielle IP-Ranges von Mollie (16 Einträge), aus ip-ranges.mollie.com/ips.txt normalisiert.
- [Naver Yeti — how we verified all 618 crawler IPs via FCrDNS](https://www.parc-network.com/naver/): How the PARC feed for Naver Yeti was built: Naver publishes no official IP list and points to reverse DNS against *.web.naver.com instead — we swept four crawler blocks in full and confirmed every one of the 618 IPs bidirectionally.
- [NETSCOUT ATLAS — own Arbor block (AS20052), PTR internet-albedo.net](https://www.parc-network.com/netscout/): Eigen-ASN AS20052 (ARBOR-AS = NETSCOUT) + PTR internet-albedo.net (455/510). /23-Block 146.88.240.0/23 = 512 IPs, per-IP-ASN: alle 510 Host-IPs einzeln bestätigt (alle AS20052, 0 Fremd-IPs, vollständig).
- [netsecscan.net — per-IP self-ID via netsecscan.net](https://www.parc-network.com/netsecscan/): PTR netsecscan.net (self-ID): 14 von 16 IPs (89.248.167.x) reversen auf netsecscan.net. Nur die self-identifizierenden.
- [Nexi — official IP ranges (webhook/notifications)](https://www.parc-network.com/nexi/): Offizielle IP-Ranges von Nexi (16 Einträge), aus ip-ranges.nex.io/ip-ranges.json normalisiert.
- [Nokia Deepfield (Cloud Genome) — the verified scanner block and how we proved it via FCrDNS](https://www.parc-network.com/deepfield/): How the PARC feed for Nokia Deepfield was built: Deepfield publishes no official IP list — we verified the active scanner blocks (Google Cloud + Scaleway) fully bidirectionally via FCrDNS against *.deepfield.net. 280 IPv4 + 31 IPv6, every address individually confirmed.
- [Nuvei — official IP ranges (webhook/notifications)](https://www.parc-network.com/nuvei/): Offizielle IP-Ranges von Nuvei (7 Einträge), aus Nuvei-Doku (DMN/Webhooks) normalisiert.
- [OnlyScans — per-IP self-ID via onlyscans.net](https://www.parc-network.com/onlyscans/): PTR *.scanners.onlyscans.net (self-ID): 8 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. diverse Linode (AS63949).
- [ONYPHE — the verified scanner block and why the official list isn't enough](https://www.parc-network.com/onyphe/): How the PARC feed for ONYPHE was built: ONYPHE publishes an official list, but it is incomplete. Via multilingual forum/search-engine research + bidirectional FCrDNS against *.probe.onyphe.net we confirmed 8 additional active probe blocks, including customer-dedicated US scanners.
- [Open Port Statistics — per-IP self-ID via openportstats.com](https://www.parc-network.com/openportstats/): PTR openportstats.com (self-ID): 132 von 144 IPs reversen auf openportstats.com. Nur die self-identifizierenden.
- [OPNsense Firewall for your Magento Shop Infrastructure](https://www.parc-network.com/magento-firewall/): Why Magento needs a dedicated network firewall: OPNsense filters bad IPs at Layer 3–4, separates the networks with default-deny, and stays lean while doing it.
- [PARC Security — verified and normalised IP feeds for your Magento hosting infrastructure](https://www.parc-network.com/parc-security/): Free curated IP lists for OPNsense, SafeLine and many other firewalls and WAFs — over 15 million addresses in 73 feeds from 59 sources, by category. Official sources plus reliable PARC feeds where official JSONs are missing.
- [PAYONE — official IP ranges (notifications)](https://www.parc-network.com/payone/): Offizielle IP-Ranges von PAYONE (4 CIDRs), aus der Firewall-Doku normalisiert.
- [PayPal — official IP ranges (webhook/API)](https://www.parc-network.com/paypal/): Offizielle IP-Ranges von PayPal (8 Einträge), aus PayPal-Doku (ts1056) normalisiert.
- [Pentest-Tools.com — official source-IP list](https://www.parc-network.com/pentest-tools/): Offizielle Quell-IP-Liste (support.pentest-tools.com) + eigener FQDN scanners.pentest-tools.com. 126 IPs, alle Linode (AS63949). Verifikation = offizielle Liste + eigener Hostname (kein FCrDNS möglich, generische Linode-PTR).
- [Ping-Dash — per-IP self-ID via ping-dash.com](https://www.parc-network.com/ping-dash/): PTR scanner-*.ping-dash.com (self-ID): 1 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. DigitalOcean (AS14061).
- [Privacy Policy](https://www.parc-network.com/privacy-policy/): Privacy policy of PARC Network GmbH & Co. KG under the GDPR — information on server logs, anonymized web analytics and data subject rights.
- [Rapid7 (Project Sonar) — scanner via reverse DNS scanners.labs.rapid7.com](https://www.parc-network.com/rapid7/): How the PARC feed for Rapid7 came about: the Project Sonar / Labs scanner, 24 CIDR blocks, all self-identifying via reverse DNS scanners.labs.rapid7.com — 108 of 108 IPs confirmed individually.
- [Reposify (CrowdStrike) — the verified scanner block and how we proved it via FCrDNS](https://www.parc-network.com/reposify/): How the PARC feed for Reposify was built: Reposify publishes no official IP list — we verified the scanner EIPs in AWS fully bidirectionally via FCrDNS against *.reposify.net. 449 IPv4, every address individually confirmed.
- [research-scanner.com — per-IP self-ID via research-scanner.com](https://www.parc-network.com/research-scanner/): PTR *.research-scanner.com (self-ID): 12 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. DigitalOcean (AS14061).
- [Semrush Bot — verified IP ranges, ASN verification and the Googlebot impersonation](https://www.parc-network.com/semrush/): Verified IP ranges of the Semrush crawler (SemrushBot, SiteAuditBot and others) to block or allowlist — plus why you can only identify Semrush reliably by source IP / ASN and not by user-agent, because Semrush has impersonated Googlebot for years.
- [Shadowforce — per-IP self-ID via shadowforce.io](https://www.parc-network.com/shadowforce/): PTR *.scan.shadowforce.io (self-ID): 15 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. DigitalOcean (AS14061).
- [Shadowserver — scanner ranges via ASN ownership (AS22168), checked per IP](https://www.parc-network.com/shadowserver/): How the PARC feed for the Shadowserver Foundation came about: 26 prefixes announced by AS22168, every IP confirmed individually as AS22168 — 8,704 of 8,704, fully homogeneous.
- [Shodan — verifying the best-known internet scanner via reverse DNS](https://www.parc-network.com/shodan/): How the PARC feed for Shodan came about: distributed census nodes with no dedicated range, identified via authoritative reverse DNS *.census.shodan.io / *.scanf.shodan.io. Every IP confirmed individually.
- [Stretchoid — making an anonymous Azure scanner verifiable without an official list](https://www.parc-network.com/stretchoid/): How the PARC feed for Stretchoid came about: an opaque recon scanner with no official list, on rotating Azure IPs. We derive the active IPs from two sources (CINS blacklist + OTX) and verify them by FCrDNS against *.stretchoid.com — 1,909 confirmed IPs.
- [Stripe — official IP ranges (webhook/API)](https://www.parc-network.com/stripe/): Offizielle IP-Ranges von Stripe (15 Einträge), aus stripe.com/files/ips/ips_webhooks.txt normalisiert.
- [The Recyber Project — per-IP self-ID via recyber.net](https://www.parc-network.com/recyber/): PTR recyber.net (self-ID): 350 von 508 IPs der beiden /24 (89.248.163/165, IP Volume inc AS202425) reversen auf recyber.net. Nur die self-identifizierenden.
- [Twitterbot / X crawler — IP ranges, ASN verification and the Grok AI-training risk](https://www.parc-network.com/twitter-x/): The IP ranges of the X / Twitter crawler (Twitterbot) to allowlist or block — plus why X publishes no official IP list, how to verify by ASN (AS-TWITTER), and why since the xAI acquisition Grok AI-training traffic can come from the same networks.
- [University of Michigan — scan research from own /16 (AS36375)](https://www.parc-network.com/umich/): Eigen-ASN AS36375 (eigenes /16 141.212.0.0/16), 6 /24-Blöcke = 1.536 IPs. Per-IP-ASN: alle 1.524 Host-IPs einzeln bestätigt (nach Mehrfach-Shot vollständig, alle AS36375, 0 Fremd-IPs). 700 self-identifizieren zusätzlich per PTR umich.edu.
- [Visionheight — per-IP self-ID via visionheight.com](https://www.parc-network.com/visionheight/): PTR scan.visionheight.com (self-ID): 15 IPs aus dem CINS-Abgleich + Nachbar-Range-Scan, jede einzeln reverse-bestätigt. AWS (AS14618/16509).
- [Worldline (Direct) — official IP ranges (webhook/notifications)](https://www.parc-network.com/worldline/): Offizielle IP-Ranges von Worldline (Direct) (4 Einträge), aus Worldline-Direct-Doku (Firewall configuration) normalisiert.
- [XoviBot (XOVI) — the verified crawler ranges, smoking-gun PTR and the mixed-pool trick](https://www.parc-network.com/xovibot/): The IP ranges of XoviBot (XOVI SEO suite, Cologne) to block or allowlist — plus why XOVI publishes no official IP list and how we proved the main pool 78.138.117.0/24 via subnet scan, ASN aggregation and a smoking-gun reverse DNS.

## About

PARC Network GmbH & Co. KG — Process and Research Center for Magento hosting architecture.
A three-person team (Luisa, Louis, Paul) running Magento shops ourselves for over 16 years.
Registered office: Am Weidengraben 27, 97297 Waldbüttelbrunn, Germany.
We host exclusively in Europe, never on AWS/Azure/GCP.
Contact: hallo@parc-network.com — 0049 931 / 970 913 31

This site is built with Hugo (a static site generator). The German version is available at https://parc-network.de/.