And just an addendum because we are talking about it..

#   46.4.161.98      89 static.98.161.4.46.clients.your-server.de
#   46.4.161.106     90 static.106.161.4.46.clients.your-server.de
#   46.4.161.112     87 static.112.161.4.46.clients.your-server.de

Maybe Hetzner can implement an egress reporting system that checks when large SMTP traffic originates from IP(s) that do not have their PTR records updated from the default.. When over 90 ISPs report that kind of volume, you KNOW that something is going on..

The number in the second column is how many North American ISP(s) (of the hundreds that provide us data) reported rate limiting those attackers.

That was from today..
That is REALLY abusive behavior that should be detectable at the source.

Dade2 S.A. 46.4.161.96 - 46.4.161.127

Historically, we see other ranges of theirs..

#  -- Dade2 S.A. 88.99.8.64 - 88.99.8.95
#  88.99.8.65          8   static.65.8.99.88.clients.your-server.de
#   88.99.8.69        11   static.69.8.99.88.clients.your-server.de
#   88.99.8.74        16   static.74.8.99.88.clients.your-server.de
#   88.99.8.77         2   static.77.8.99.88.clients.your-server.de
#   88.99.8.81        17   static.81.8.99.88.clients.your-server.de
#   88.99.8.85        17   static.85.8.99.88.clients.your-server.de
#   88.99.8.91        14   static.91.8.99.88.clients.your-server.de

Of course others are even worse than Hetzner..

108.61.160.149      (S)          50   108.61.160.149.vultr.com
108.61.161.199      (S)          49   108.61.161.199.vultr.com

Yeah, Choopa..

And of course ColoCrossing..

But, it isn't up to us to tell these people what business model they should operate, just don't cry when email providers get fed up and block all your IP Space...

And.. on that note, closing this thread, as it isn't really what this list is for.. Sorry folks, if I was noisy on this topic..






On 16-11-17 11:25 AM, Ken O'Driscoll wrote:
Hi Bastiaan,

Other data centres have the same challenge as you. Hosting providers have
historically had a bad reputation because a spammer can use a stolen or




--
"Catch the Magic of Linux..."
------------------------------------------------------------------------
Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
------------------------------------------------------------------------
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
------------------------------------------------------------------------
604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

_______________________________________________
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to