Quite a lot actually. Those servers are fine seedboxes. People also use them 
for media storage, i.e. online galleries and smaller video streaming sites.   

  

  
Filip
  
  
  

    
  
  
>   
> On 4 Jan 2018 at 6:46 am,  <Tim Burke>  wrote:
>   
>   
>  AS12876 is online.net... home of the €2.99 physical server, perfect for all 
> of your favorite illegitimate activity. I’m curious how much traffic 
> originates from that ASN that is actually legitimate... probably close to 
> none. Sent from my iPhone  >  On Jan 3, 2018, at 1:35 AM, Troy Mursch wrote:  
> >   >  Dovid,  >   >  Back in September, I documented my poor experience with 
> AS12876 here:  >  https://badpackets.net/ongoing-large-scale-sip-attack-  >  
> campaign-coming-from-online-sas-as12876/  >  Since then, their handling of 
> abuse notifications (or lack thereof) has  >  largely remained the same. The 
> volume of malicious traffic from their  >  network hasn't decreased either.  
> >   >  As you noted, others have reported similar issues with AS12876, 
> including  >  my associate Dr. Neal Krawetz: https://twitter.com/h  >  
> ackerfactor/status/932593355648667649. I've also compiled a list of  >  
> complaints regarding AS12876 in this thread: https://twitter.com/ba  >  
> d_packets/status/937220987371732992  >   >   >  Thanks,  >  __  >   >  *Troy 
> Mursch*  >   >  @bad_packets  >   >>  On Tue, Jan 2, 2018 at 6:51 PM, Dovid 
> Bender wrote:  >>   >>  Hi All,  >>   >>  Lately we have seen a lot of 
> attacks from IPs where the PTR record ends in  >>  poneytelecom.eu to PBX 
> systems. A quick search on twitter (  >>  
> https://twitter.com/hashtag/poneytelecom) shows multiple people  >>  
> complaining  >>  that they reported the IP's yet nothing happens. Has anyone 
> had the  >>  pleasure of dealing with them and have you gotten anywhere? I 
> wonder if the  >>  only option is public shaming.  >>   >>  I would rather 
> not ban their AS as it may hurt legit traffic but I am out  >>  of ideas at 
> this point....  >>   >>  TIA.  >>   >>  Dovid  >>   
>   

Reply via email to