Crimeware friendly ISP's: NetDirekt

[MysteryFCM]

Because there are a slew of ISP's providing homes to criminals, seemingly without giving a hoot about the victims being affected by their customers, I thought I'd try a name and shame approach, and to start it off, I thought we'd name and shame German ISP, NetDirekt.

Now, you'll have to bear with me here as I've not got this blog pre-written or prepared, I'm sort of, writing it as I go.

NetDirekt have a well known and well publicized reputation as far as criminal activities go, due to their long standing housing of the well known Internet Service Team (commonly referred to as the IST).

The IST, amongst others, are just some of the folks behind the Google, Bing and Yahoo etc etc, blackhat SEO campaigns, that lead unsuspecting folks to fake malware and more recently, the likes of the Koobface exploit.

Now, given the amount of activity there is within NetDirekt's network, on behalf of the IST, and the amount of publicity their network has received over the years, because of such activity, leads to the obvious question of - why? Why are they allowing this? Why are they not taking steps to boot the IST off of their network?

http://hphosts.blogspot.com/2009/10/crimeware-friendly-isps-netdirekt.html

[SysAdMini]

I don't share you opinion.
From my point of view Netdirekt has an excellent abuse handling.
They respond very quick and take down malware hosts asap.

It' not fair to invoke blackholing of their ip ranges.

[cleanmx]

Hi Steven,

I strongly agree to Holger!

netdirekt is quick in takedowns, and they acknowledge every complain i sent to them.

also blackholing a AS like netdirekt will lead you into serious troubles.

I'm generally against blackholing, this affects innocent content to be delivered and will call the lawyers to the game....


-- gerhard

[MysteryFCM]

Sorry for taking so long guys. Connection on the train was useless and the mobile connection kept crapping out.

Sadly, my experience with NetDirekt has been completely the opposite. One of their guys has commented on the blog however.

[MysteryFCM]

Speaking of ........ this one spammed the MDL forums .......

[cleanmx]

Hi

Here  a example Update quick example at end of posting from today

complain sent: status: As of 2009-10-06 20:17:42 CEST
complain acknowledge: 07.10.2009 10:36 ( next morning...)

Dear Ladies and Gentlemen,

Thank you for the report an abuse.
We have opened a ticket (server/IP 212.95.60.233) for this incident and currently are waiting for feedback from our customer. Should we receive no feedback within the given time limit of 24 hours we will block the IP until the issue is solved.

--

Mit freundlichen Gruessen / Best regards
Abuse Team

netdirekt e.K.
Kleyerstrasse 79 / Tor 13
60326 Frankfurt am Main
Germany

Phone: +49 69 9055688-0
Fax: +49 69 9055688-22
Mail: abuse@netdirekt.de

Registernummer: HRA 30056
Gericht: Amtsgericht Frankfurt am Main
Inhaber: Wiethold Wagner

complain resolved: 15:47 today .. 8th of October..

Dear Ladies and Gentlemen,

They had us recently to an abuse of IP 212.95.60.233 reported that we have prosecuted accordingly.
The customer or administrator of the server has indicated that the problem is resolved.
If you re-establish an abuse, then please contact us.

--

Mit freundlichen Gruessen / Best regards
Abuse Team

netdirekt e.K.
Kleyerstrasse 79 / Tor 13
60326 Frankfurt am Main
Germany

Phone: +49 69 9055688-0
Fax: +49 69 9055688-22
Mail: abuse@netdirekt.de

Registernummer: HRA 30056
Gericht: Amtsgericht Frankfurt am Main
Inhaber: Wiethold Wagner

I think this is good, not really fast, but acceptable !

-- gerhard

Update
Complain sent : 02:12 today
Acknowlege: 10:09 Today
Solved: 19:47 Today