Web Hosting Talk : Web Hosting Main Forums : Web Hosting : Xsserver.eu and abuse

[Zhang]

Sure, of course i do, in real life im a Chinese spam king swimming in my viagra earned money.

No, seriously, you have no idea what you are talking about - xsserver is *NOT* the problem here:

1.: They are not listed in the IP WHOIS, all abuse goes to their *UPSTREAM* who did decide to not react - not xsservers problem.
2.: The IPs you listed only belong VERY partially to xsserver, and to 98% to their upstream directly or other providers in their datacenter.
3.: You talk about their upstreams, accuse HE and other ISPs as spam supporters which is clearly dumb and not true - then you use traceroute and think you can see their upstreams over it and you could not even link "webtraffic" to Optimate-Server which is very easy over the RIPE DB or any better BGP viewer (HE BGP Viewer, Robtex etc.)

[cpanellover]

Originally Posted by Zhang

Sure, of course i do, in real life im a Chinese spam king swimming in my viagra earned money.

No, seriously, you have no idea what you are talking about - xsserver is *NOT* the problem here:

1.: They are not listed in the IP WHOIS, all abuse goes to their *UPSTREAM* who did decide to not react - not xsservers problem.
2.: The IPs you listed only belong VERY partially to xsserver, and to 98% to their upstream directly or other providers in their datacenter.
3.: You talk about their upstreams, accuse HE and other ISPs as spam supporters which is clearly dumb and not true - then you use traceroute and think you can see their upstreams over it and you could not even link "webtraffic" to Optimate-Server which is very easy over the RIPE DB or any better BGP viewer (HE BGP Viewer, Robtex etc.)

all those 109.230.x.x ip's show xsserver.eu in the whois .... why do you see something else ??

[Zhang]

ive put all their subnets in my firewall and I seriously suggest that everyone does the same.

31.214.128.0/19
46.251.224.0/20
46.251.240.0/21
109.230.208.0/20
109.230.240.0/20

There, only a small amount of them belongs to them.

[cpanellover]

Originally Posted by Zhang

There, only a small amount of them belongs to them.

oh my god you're right how could i be so stupid .... i feel ashamed

inetnum: 109.230.246.0 - 109.230.246.255
netname: XSSERVER-EU
descr: xsserver.eu Dedicated Servers
remarks: +---------------------------------------------------
remarks: | We are Server Provider |
remarks: +---------------------------------------------------
remarks: | |
remarks: | These IP-Numbers are in use by our customers. |
remarks: | In case of Spam/Virus/Portscan/Attack etc |
remarks: | please send an email to abuse@xsserver.eu |
remarks: | containing the IP-Number involved and timestamps. |
remarks: | |
remarks: +---------------------------------------------------
remarks: INFRA-AW
country: DE
admin-c: GB11245-RIPE
tech-c: GB11245-RIPE
status: ASSIGNED PA
mnt-by: MNT-XSSERVER
mnt-lower: MNT-XSSERVER
mnt-routes: MNT-XSSERVER
source: RIPE # Filtered


% Information related to '109.230.240.0/20AS197043'

route: 109.230.240.0/20 <<-- you listed this
descr: Route
origin: AS197043
mnt-by: MNT-WHITE
mnt-routes: MNT-STAHL
source: RIPE # Filtered

[Zhang]

Please learn how to correctly quote too.

Your (unreadable) quote says exactly what i said: they have this /20, and none of the other mentioned ranges.

[ModelWebHost]

Gryal is not present after the post in the begging to reply in this topic.

[f1lby]

XSSERVER.EU never reply or acknowledge my complaints about the level of spam & attacks from their hosts.

I have tried to communicate with them but a deathly silence follows.
Because of their inaction, I can only assume they are a spammers 'safe haven', and because of this I am forced to block their entire IP range on all the servers I manage.

Their IP range is 109.230.216.0-109.230.217.255

Last http attack attempt was made from 109.230.216.120 on 22Nov2011 at 12:38 UK time.

[public_html]

Originally Posted by f1lby

XSSERVER.EU never reply or acknowledge my complaints about the level of spam & attacks from their hosts.

I have tried to communicate with them but a deathly silence follows.
Because of their inaction, I can only assume they are a spammers 'safe haven', and because of this I am forced to block their entire IP range on all the servers I manage.

Their IP range is 109.230.216.0-109.230.217.255

Last http attack attempt was made from 109.230.216.120 on 22Nov2011 at 12:38 UK time.

may be they allow these activities on their servers.

[f1lby]

They DO appear to allow these activities on their servers, otherwise they would respond and take action to complaints.
So yes you're probably right in your assumption!

[rizzla]

it seems like there abuse@ goes to /dev/null

[TimothyH]

Perhaps you could attempt to email the RIPE abuse email address as per the IP addresses WHOIS. http://whois.domaintools.com/109.230.197.11