Leaseweb please take down one of your clients who is attacking us
 

Since you don't have a 24 hours support number I make this request (besides our emails) here. One of your clients is attacking us. It is from IP-address : 5.79.76.80

I request you to take this host down asap. thank you!

root@ww3 rc.d]# whois 5.79.76.80
[Querying whois.arin.net]
[Redirected to whois.ripe.net]
[Querying whois.ripe.net]
[whois.ripe.net]
% This is the RIPE Database query service.
% The objects are in RPSL format.
%
% The RIPE Database is subject to Terms and Conditions.
% See http://www.ripe.net/db/support/db-terms-conditions.pdf

% Note: this output has been filtered.
% To receive output for a database update, use the "-B" flag.

% Information related to '5.79.64.0 - 5.79.123.255'

% Abuse contact for '5.79.64.0 - 5.79.123.255' is '[email protected]'

inetnum: 5.79.64.0 - 5.79.123.255
netname: LEASEWEB
descr: LeaseWeb Netherlands B.V.
remarks: Please send all abuse notifications to the following email address: [email protected]. To ensure proper processing of your abuse notification, please visit the website Abuse Procedures | LeaseWeb for notification requirements. All police and other government agency requests must be sent to [email protected].
country: NL
admin-c: LSW1-RIPE
tech-c: LSW1-RIPE
status: ASSIGNED PA
mnt-by: LEASEWEB-NL-MNT
created: 2012-09-04T09:02:14Z
last-modified: 2015-09-30T16:02:00Z
source: RIPE

person: RIP Mean
address: P.O. Box 93054
address: 1090BB AMSTERDAM
address: Netherlands
phone: +31 20 3162880
fax-no: +31 20 3162890
abuse-mailbox: [email protected]
nic-hdl: LSW1-RIPE
mnt-by: LEASEWEB-NL-MNT
created: 2005-06-07T14:36:03Z
last-modified: 2015-09-30T13:19:14Z
source: RIPE # Filtered

% Information related to '5.79.64.0/18AS16265'

route: 5.79.64.0/18
descr: LEASEWEB
origin: AS16265
remarks: LeaseWeb
mnt-by: OCOM-MNT
created: 2012-06-14T08:12:42Z
last-modified: 2012-06-14T08:12:42Z
source: RIPE # Filtered

% Information related to '5.79.64.0/18AS60781'

route: 5.79.64.0/18
descr: LEASEWEB
origin: AS60781
remarks: LeaseWeb
mnt-by: LEASEWEB-NL-MNT
created: 2014-03-10T12:46:38Z
last-modified: 2015-09-30T23:00:01Z
source: RIPE

% This query was served by the RIPE Database Query Service version 1.83-JAVA8

Good luck

leaseweb.com - reliable hosting for DDoS attackers | Web Hosting Talk

Have it filtered on your end?

Not sure if they are here, bump for you anyway.

Did you file a detailed abuse report with all necessary logs?

"For hacking, VOIP/SIP Scanning, (D)Dos and malicious software: a description of the illegal activities, including date and timestamp, the IP address of servers that are subject of the illegal activities, the destination port, source port and log files."

They are most likely getting in touch with the client, Leaseweb has an Abuse Portal in their control panel.

I will bump it for you, is there anyone here from leaseweb?

Leaseweb is proving to be pretty scummy, anyone doing business with them need to be really weary of their terms as they will try and screw you over any chance you get when you try and terminate your services

True story.. I know some people that used to work there and that company is shady as fuck. :2 cents:

You think they are prepared to go to court over a few K EUR?

Firewall block?

Leaseweb is shady af unless they did an about face

so much for trying new things............

If the attack is coming from one IP, it should be the easiest thing in the world to filter it on your end...

take cloudflare in the middle.,
enable request limiter.

a bump :warning

Gee,

I wonder what great & responsible host options there are out there... :winkwink:

Brad

What are they doing ?? Telling you you are a bunch of asseholes who have your stupid Mods ban in favor of your skanky content owners spamming your board with 1000s useless posts? Good riddance, you are dying business model and come to GFY to FY somebody who is FY you, now that is really desperate move and very sad :2 cents:

This is 2017! Why the FUCK dont you better security? Or at least a host that can drop the traffic at ISP level. - Even a mid-range hostingprovider would be able to do that.

How can you even think about relying on the attackers host, to mitigate an attack?

Whoever at Freeones draftet your business continuity plan, needs to get their head out of their asses, and understand how things work in 2017.

This thread is 2 years old :error

OP's post is from 2015.

mods, please ban retards bumping old threads.

Oops did not notice the age of this thread..:error

... mark din skovl!

That's where I host my Geocities websites. I connect using America Online and a dialup modem.

:D

LIES!!! - how can you host your geocities websites anywhere else than geocities.com?

Damn no wonder my dialup modem had trouble connecting. :(

I'm going to go on MySpace and write a song about it.
Tell everyone on Friendster at the very least.

:banana

Funny :thumbsup

GFY is a modless board ...

biggest idiot in this thread--- see above :1orglaugh

PN obviously joking,"dial up" gave it away :1orglaugh

I didn't realize it was an old bumped thread or I would never have posted.

Brad

I have trained myself to always look at thread date as soon as opening it.. :upsidedow

The only one not getting the joke here, is you.....