| 10:19 pm on Mar 30, 2013 (gmt 0)|
I posted the following in the amazon thread hereabouts...
"Spamhaus has been hit by DDoS attacks three times greater than those directed at US banks. From China? Russia? Nope. From Cyberbunker in Netherlands - another prime source of badness. Cyberbunker have a bad reputation for spamming as well as providing hosting for the infamous Russian Business Network."
Thanks for the IP. I have now blocked 126.96.36.199/17
| 1:49 am on Mar 31, 2013 (gmt 0)|
Careful, that range *may* also accommodate connectivity for Dutch broadband users.
A more surgical 188.8.131.52/27 just gets the hosting servers (Cyberbunker and a few others that host at A2B.)
| 7:04 pm on Mar 31, 2013 (gmt 0)|
I tend to the view, with rare exceptions, that the range owned by a company is monolithic: either broadband, servers or some other class. If a2b have mixed broadband in the midst of servers then it's for camouflage - hiding mines amongst the melons. In the case of a2b they KNOW what cyberbunker is so should in any case eject them. They are culpable.
In any case, NL is a major source of grief so serves them right. :)
| 5:45 am on Apr 4, 2013 (gmt 0)|
cchosting.nl (possibly owned by a2b)
184.108.40.206 - 220.127.116.11
| 9:31 am on Apr 4, 2013 (gmt 0)|
i3d.net (these all seem to be connected somehow) dedi servers/colo for games
18.104.22.168 - 22.214.171.124
| 8:38 pm on Apr 4, 2013 (gmt 0)|
Thanks. I blocked 126.96.36.199/19. Already had 188.8.131.52/19 blocked.
| 5:27 am on May 11, 2013 (gmt 0)|
Found one in a similar range of 184.108.40.206
| 7:00 am on May 11, 2013 (gmt 0)|
220.127.116.11 belongs to a larger OVH range:
18.104.22.168 - 22.214.171.124