A2B Internet server.ccchost4.nl 126.96.36.199 - 188.8.131.52
10:19 pm on Mar 30, 2013 (gmt 0)
I posted the following in the amazon thread hereabouts...
"Spamhaus has been hit by DDoS attacks three times greater than those directed at US banks. From China? Russia? Nope. From Cyberbunker in Netherlands - another prime source of badness. Cyberbunker have a bad reputation for spamming as well as providing hosting for the infamous Russian Business Network."
Thanks for the IP. I have now blocked 184.108.40.206/17
1:49 am on Mar 31, 2013 (gmt 0)
Careful, that range *may* also accommodate connectivity for Dutch broadband users.
A more surgical 220.127.116.11/27 just gets the hosting servers (Cyberbunker and a few others that host at A2B.)
7:04 pm on Mar 31, 2013 (gmt 0)
I tend to the view, with rare exceptions, that the range owned by a company is monolithic: either broadband, servers or some other class. If a2b have mixed broadband in the midst of servers then it's for camouflage - hiding mines amongst the melons. In the case of a2b they KNOW what cyberbunker is so should in any case eject them. They are culpable.
In any case, NL is a major source of grief so serves them right. :)
5:45 am on Apr 4, 2013 (gmt 0)
cchosting.nl (possibly owned by a2b) 18.104.22.168 - 22.214.171.124 126.96.36.199/25
9:31 am on Apr 4, 2013 (gmt 0)
i3d.net (these all seem to be connected somehow) dedi servers/colo for games 188.8.131.52 - 184.108.40.206 220.127.116.11/24
8:38 pm on Apr 4, 2013 (gmt 0)
Thanks. I blocked 18.104.22.168/19. Already had 22.214.171.124/19 blocked.
5:27 am on May 11, 2013 (gmt 0)
Found one in a similar range of 126.96.36.199
7:00 am on May 11, 2013 (gmt 0)
188.8.131.52 belongs to a larger OVH range: 184.108.40.206 - 220.127.116.11 18.104.22.168/16