A2B Internet server.ccchost4.nl 220.127.116.11 - 18.104.22.168
10:19 pm on Mar 30, 2013 (gmt 0)
I posted the following in the amazon thread hereabouts...
"Spamhaus has been hit by DDoS attacks three times greater than those directed at US banks. From China? Russia? Nope. From Cyberbunker in Netherlands - another prime source of badness. Cyberbunker have a bad reputation for spamming as well as providing hosting for the infamous Russian Business Network."
Thanks for the IP. I have now blocked 22.214.171.124/17
1:49 am on Mar 31, 2013 (gmt 0)
Careful, that range *may* also accommodate connectivity for Dutch broadband users.
A more surgical 126.96.36.199/27 just gets the hosting servers (Cyberbunker and a few others that host at A2B.)
7:04 pm on Mar 31, 2013 (gmt 0)
I tend to the view, with rare exceptions, that the range owned by a company is monolithic: either broadband, servers or some other class. If a2b have mixed broadband in the midst of servers then it's for camouflage - hiding mines amongst the melons. In the case of a2b they KNOW what cyberbunker is so should in any case eject them. They are culpable.
In any case, NL is a major source of grief so serves them right. :)
5:45 am on Apr 4, 2013 (gmt 0)
cchosting.nl (possibly owned by a2b) 188.8.131.52 - 184.108.40.206 220.127.116.11/25
9:31 am on Apr 4, 2013 (gmt 0)
i3d.net (these all seem to be connected somehow) dedi servers/colo for games 18.104.22.168 - 22.214.171.124 126.96.36.199/24
8:38 pm on Apr 4, 2013 (gmt 0)
Thanks. I blocked 188.8.131.52/19. Already had 184.108.40.206/19 blocked.
5:27 am on May 11, 2013 (gmt 0)
Found one in a similar range of 220.127.116.11
7:00 am on May 11, 2013 (gmt 0)
18.104.22.168 belongs to a larger OVH range: 22.214.171.124 - 126.96.36.199 188.8.131.52/16