I contacted their upstream provider, ripe -tel-nr of them is not allocated ....
update: I reached optimate-server.de on their cell phone, they promised to shut down this server
-- gerhard
A number of the domains from this thread/attack that were formerly hosted on 46.251.237.240 appear to be moving over to 91.220.0.35 / AS51630, which is another Latvian network.
avipornoonline.ru
camshotporno.ru
dadnmomsporno.ru
megasyperxxx.ru
ooopsmypusy.ru
pornoagentx.ru
pornoseksas.ru
pornyxaavi.ru
redpussyx.ru
ssssaniedirki.ru
utubexxxvideo.ru
videopornocam.ru
youngpornoseks.ru
They are all still active.
aut-num: AS51630
as-name: SIABAS-AS
descr: SIA BUSINESS AVIATION SERVICES
org: ORG-BASL1-RIPE
import: from AS24589 action pref=120; accept ANY
import: from AS8285 action pref=120; accept ANY
import: from AS21156 action pref=120; accept ANY
export: to AS24589 announce AS51630
export: to AS8285 announce AS51630
export: to AS21156 announce AS51630
admin-c: VLAS1-RIPE
tech-c: VLAS1-RIPE
mnt-by: RIPE-NCC-END-MNT
mnt-by: SIABAS-MNT
mnt-routes: SIABAS-MNT
source: RIPE # Filtered
organisation: ORG-BASL1-RIPE
org-name: SIA BUSINESS AVIATION SERVICES
org-type: OTHER
address: Graudu str. 48A, Riga, LV-1058, Latvia
mnt-ref: SIABAS-MNT
mnt-by: SIABAS-MNT
source: RIPE # Filtered
person: Vadims Vlasovs
address: Graudu str. 48A, Riga, LV-1058, Latvia
phone: +371 29528757
nic-hdl: VLAS1-RIPE
mnt-by: SIABAS-MNT
source: RIPE # Filtered
Topic: Trojan Ransom (Read 421025 times)
