Get Paid to Participate - up to $1 per post!     Twitter     Facebook     Google+
Hosting Discussion
 

forgot password?



Reply


Old
  Post #1 (permalink)   01-02-2014, 03:52 AM
HD Amateur
 
Join Date: Jul 2009
Posts: 79

Status: neil.studyhost is offline
Hi, not sure this the correct forum, but

I've being getting hundreds of access attempts from a range IPs that originate from

Reverse DNS: stratoserver.net
Origin Country: Germany (DE)

I emailed the datacentre and there reply was:#


Quote:
> 85.214.85.40
> 85.214.84.44
> 85.214.108.168
> 85.214.246.193

these are ip addresses of our customers. Please send abuse reports to the
abuse email address that is mentioned in the RIPE database. NOC cannot help you.

Regards,

Christian Seitz
Head of Network

Surly this is incorrect and its the NOC responsibilty?

Kind Regrds
 
 
 


Old
  Post #2 (permalink)   01-02-2014, 04:25 AM
HD Guru
 
Join Date: Jan 2013
Posts: 756
Send a message via AIM to cheapdedicated Send a message via Yahoo to cheapdedicated Send a message via Skype™ to cheapdedicated

Status: cheapdedicated is offline
Interesting But I think someone is just running away from their responsibility. You can't say your clients are abusing your IP and you will wait and watch.
__________________
Techsys Ltd | Dedicated Servers | V.P.S | Free Plesk Panel
G8 Servers cPanel Reseller VPS Reseller Dedicated Server Resellers

G8 Host Cheap Domains | Shared Hosting | SSL
 
 
 


Old
  Post #3 (permalink)   01-03-2014, 06:53 AM
HD Newbie
 
Join Date: Nov 2013
Posts: 42

Status: Avuntia is offline
What you could only do is monitor what is happening. Make sure you take the appropriate action in the right time and make duplicates of anything that is super important. Any sensitive data, encrypt NOW. Report the issue, as your not the dc admin you cant do much
__________________
Avuntia - Specialists in Internet Advertising
 
 
 


Old
  Post #4 (permalink)   01-03-2014, 09:58 AM
HD Addict
 
Join Date: Dec 2003
Location: Oslo, Norway
Posts: 178

Status: gate2vn is offline
It happened to me before with another vendor. Their customer's IPs attacked us. When I emailed them, they just asked me to send report to another email. I didn't bother to do that, simply blocking that vendor.

Why? Because it showed me that they don't really care about their IP, network quality. Since they replied, they knew about the issue and they could quickly to forward it to people in charge. But they chose not-to-do that. A bad business action.
__________________
Managed WordPress | Advanced anti-spam

Connect us at https://twitter.com/oslonap
 
 
 


Old
  Post #5 (permalink)   01-03-2014, 11:13 AM
Account Disabled
 
Join Date: May 2012
Posts: 969

Status: Collabora is offline
As long as the datacenter's customer is not abusing the datacenter resources (or doing anything outright illegal), why should they care about your servers? There could be many reasons why you are seeing high number of access attempts from those IPs. Go through the proper channels. NOCs are not internet cops.

Last edited by Collabora : 01-03-2014 at 11:15 AM.
 
 
 


Old
  Post #6 (permalink)   01-05-2014, 10:36 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,950
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by Collabora View Post
As long as the datacenter's customer is not abusing the datacenter resources (or doing anything outright illegal), why should they care about your servers? There could be many reasons why you are seeing high number of access attempts from those IPs. Go through the proper channels. NOCs are not internet cops.
strange check 85.214.85.40 through a whois

http://whois.domaintools.com/85.214.85.40

Quote:
remarks: ************************************************** **********
remarks: * Please send abuse complaints to abuse-server@strato.de *
remarks: * or fax +49-30-88615-755 ONLY. *
remarks: * Abuse reports to other e-mail addresses will be ignored. *
remarks: ************************************************** **********
so they are telling you to report to them and yet tell you to go away when you do file a report.
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #7 (permalink)   01-07-2014, 03:50 AM
HD Amateur
 
Join Date: Jul 2009
Posts: 79

Status: neil.studyhost is offline
Hi, yes I sent to that Abuse@ email aswell and never heard anything back. I did that after I'd sent to the info@ on there website as the abuse@ is not listed anywhere


As for

Quote:
As long as the datacenter's customer is not abusing the datacenter resources (or doing anything outright illegal), why should they care about your servers?
The reason for contacting, was due to receiving hundreds of the following, all from a range of IPs from the following trying different login names



Subject: Large Number of Failed Login Attempts from IP 85.214.108.168

2 failed login attempts to account aaa () -- Large number of attempts from this IP: 85.214.108.168

Reverse DNS: h1793883.stratoserver.net

Origin Country: Germany (DE)

Please use the following links to add to the black list:

Single IP: https://primary.studyhost.net:2087/c...85.214.108.168
/24: https://primary.studyhost.net:2087/c...5.214.108.0/24
/16: https://primary.studyhost.net:2087/c...=85.214.0.0/16



Please use the following links to add to the white list:

Single IP: https://primary.studyhost.net:2087/c...85.214.108.168
/24: https://primary.studyhost.net:2087/c...5.214.108.0/24
/16: https://primary.studyhost.net:2087/c...=85.214.0.0/16
 
 
 


Old
  Post #8 (permalink)   01-13-2014, 07:38 AM
HD Newbie
 
Join Date: Sep 2011
Posts: 23

Status: multiplecloud is offline
Any update for each issue?
__________________
MultipleCloud - Multiple location SEO hosting
100+ worldwide location | different machine for each
7-Days money back, bi-weekly backup, monitoring system, standby server and more
Contact: sales@multiplecloud.com | support@multiplecloud.com
 
 
 


Old
  Post #9 (permalink)   01-14-2014, 06:33 AM
HD Amateur
 
Join Date: Jul 2009
Posts: 79

Status: neil.studyhost is offline
I never got anymore access attempts from those servers, but neither did I get any response from abuse@ or any other email addresses from the datacentre or hosting companies.
 
 
 


Old
  Post #10 (permalink)   01-14-2014, 09:58 AM
Account Disabled
 
Join Date: May 2012
Posts: 969

Status: Collabora is offline
Quote:
Originally Posted by easyhostmedia View Post
strange check 85.214.85.40 through a whois

http://whois.domaintools.com/85.214.85.40

so they are telling you to report to them and yet tell you to go away when you do file a report.
OP said he complained to datacenter (NOC) not the email address you posted. It was the NOC that told him "go away [your words]" You have a nasty habit of rewording people's posts to suit your agenda
 
 
 


Old
  Post #11 (permalink)   01-14-2014, 10:10 AM
HD Wizard
 
easyhostmedia's Avatar
 
Join Date: Mar 2011
Location: Northumberland, UK
Posts: 4,950
Send a message via MSN to easyhostmedia

Status: easyhostmedia is offline
Quote:
Originally Posted by Collabora View Post
OP said he complained to datacenter (NOC) not the email address you posted. It was the NOC that told him "go away [your words]" You have a nasty habit of rewording people's posts to suit your agenda
rather than try and start arguments which you like doing on here do some research

stratoserver.net is the DC and their abuse email is abuse-server@strato.de listed against their IPS

so not reworded anything, just gave the information which is available on the whois

http://whois.domaintools.com/stratoserver.net lists abuse@strato.de.

so once again it is you trying to start an argument on an OLD thread
__________________
Terry Robertson - CEO The Easyhost Media Group
Niceday Hosting - Affordable Hosting
PowerSSL - - We Secure your World
The Scamlist Forum - Fighting against scammers
 
 
 


Old
  Post #12 (permalink)   01-14-2014, 10:44 AM
Account Disabled
 
Join Date: May 2012
Posts: 969

Status: Collabora is offline
Quote:
Originally Posted by easyhostmedia View Post
rather than try and start arguments which you like doing on here do some research

stratoserver.net is the DC and their abuse email is abuse-server@strato.de listed against their IPS

so not reworded anything, just gave the information which is available on the whois

http://whois.domaintools.com/stratoserver.net lists abuse@strato.de.

so once again it is you trying to start an argument on an OLD thread
In a later post the OP mentions that had sent that email to info@ instead of abuse@. Thus you are wrong again, but try to reword and context switch again to make yourself appear correct
 
 
 


Old
  Post #13 (permalink)   01-14-2014, 01:42 PM
HD Amateur
 
Join Date: Jul 2009
Posts: 79

Status: neil.studyhost is offline
I sent a email to info@ first as that was only email address listed upon their website.

I then also found the abuse@ email from a whois and sent to that (20 minutes later).

The only response was from the info@ and that was to go away.
 
 
 


Old
  Post #14 (permalink)   01-14-2014, 06:25 PM
Account Disabled
 
Join Date: May 2012
Posts: 969

Status: Collabora is offline
Quote:
Originally Posted by neil.studyhost View Post
I sent a email to info@ first as that was only email address listed upon their website.

I then also found the abuse@ email from a whois and sent to that (20 minutes later).

The only response was from the info@ and that was to go away.
Yes, thanks. That is how I interpreted the events.
 
 
 
Reply

Thread Tools

New Post New Post   Old Post Old Post
Posting Rules:
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Sponsored By: