<div dir="ltr">List of of AS12876 networks<br>
<p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><font face="monospace">$ whois -h <a href="http://whois.radb.net">whois.radb.net</a> -- '-i origin AS12876' | grep 'route:'<br></font></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://212.155.196.0/23">212.155.196.0/23</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://195.154.0.0/16">195.154.0.0/16</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://62.4.0.0/19">62.4.0.0/19</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://212.83.128.0/19">212.83.128.0/19</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://212.129.0.0/18">212.129.0.0/18</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://212.83.160.0/19">212.83.160.0/19</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://62.210.0.0/16">62.210.0.0/16</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://212.47.224.0/19">212.47.224.0/19</a><br></span><span style="font-family:monospace">route:</span><span class="inbox-inbox-Apple-converted-space" style="font-family:monospace"> </span><span style="font-family:monospace"><a href="http://163.172.0.0/16">163.172.0.0/16</a></span></p><p class="inbox-inbox-p1"><span class="inbox-inbox-s1"><br></span></p><p class="inbox-inbox-p1"><span class="inbox-inbox-s1">Sergey</span></p><br><div class="gmail_quote"><div dir="ltr">пт, 3 мар. 2017 г. в 22:24, Ken Rice <<a href="mailto:krice@freeswitch.org">krice@freeswitch.org</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Yes that AS is <a href="http://online.net" rel="noreferrer" class="gmail_msg" target="_blank">online.net</a>'s AS Number... I'm seriously considering<br class="gmail_msg">
blackholing them across multiple networks...<br class="gmail_msg">
<br class="gmail_msg">
-----Original Message-----<br class="gmail_msg">
From: <a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" class="gmail_msg" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a><br class="gmail_msg">
[mailto:<a href="mailto:freeswitch-users-bounces@lists.freeswitch.org" class="gmail_msg" target="_blank">freeswitch-users-bounces@lists.freeswitch.org</a>] On Behalf Of jungle<br class="gmail_msg">
Boogie<br class="gmail_msg">
Sent: Friday, March 3, 2017 12:59 PM<br class="gmail_msg">
To: FreeSWITCH Users Help <<a href="mailto:freeswitch-users@lists.freeswitch.org" class="gmail_msg" target="_blank">freeswitch-users@lists.freeswitch.org</a>><br class="gmail_msg">
Subject: Re: [Freeswitch-users] FS account got hacked **urgent**<br class="gmail_msg">
<br class="gmail_msg">
On 3 March 2017 at 10:45, Ken Rice <<a href="mailto:krice@freeswitch.org" class="gmail_msg" target="_blank">krice@freeswitch.org</a>> wrote:<br class="gmail_msg">
> The problem with <a href="http://online.net" rel="noreferrer" class="gmail_msg" target="_blank">online.net</a> isn't necessarily one of their clients,<br class="gmail_msg">
> they tend to no respond to the reports they get via the link you<br class="gmail_msg">
> posted nor do they respond to emails to their abuse@ email address as<br class="gmail_msg">
> per their whois records...<br class="gmail_msg">
<br class="gmail_msg">
I think I tried the email address once or twice until I found the form. IME,<br class="gmail_msg">
the online customers resolve the situation and I stop seeing the attacks.<br class="gmail_msg">
<br class="gmail_msg">
><br class="gmail_msg">
> I have received multiple attacks from various IPs on their network<br class="gmail_msg">
> (the only thing in common with them is its originating from their AS)<br class="gmail_msg">
<br class="gmail_msg">
hmm, that AS is with <a href="http://online.net" rel="noreferrer" class="gmail_msg" target="_blank">online.net</a>?<br class="gmail_msg">
<br class="gmail_msg">
><br class="gmail_msg">
> I have seen these attacks across multiple networks... I wish there was<br class="gmail_msg">
> a way we could would with them to help mitigate this but it doesn't<br class="gmail_msg">
> seem they are interested in it<br class="gmail_msg">
><br class="gmail_msg">
<br class="gmail_msg">
I wish there was something like denyhosts for sip traffic that would sync up<br class="gmail_msg">
and download known offenders.<br class="gmail_msg">
<br class="gmail_msg">
_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<br class="gmail_msg">
<br class="gmail_msg">
_________________________________________________________________________<br class="gmail_msg">
Professional FreeSWITCH Consulting Services:<br class="gmail_msg">
<a href="mailto:consulting@freeswitch.org" class="gmail_msg" target="_blank">consulting@freeswitch.org</a><br class="gmail_msg">
<a href="http://www.freeswitchsolutions.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitchsolutions.com</a><br class="gmail_msg">
<br class="gmail_msg">
Official FreeSWITCH Sites<br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
<a href="http://confluence.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://confluence.freeswitch.org</a><br class="gmail_msg">
<a href="http://www.cluecon.com" rel="noreferrer" class="gmail_msg" target="_blank">http://www.cluecon.com</a><br class="gmail_msg">
<br class="gmail_msg">
FreeSWITCH-users mailing list<br class="gmail_msg">
<a href="mailto:FreeSWITCH-users@lists.freeswitch.org" class="gmail_msg" target="_blank">FreeSWITCH-users@lists.freeswitch.org</a><br class="gmail_msg">
<a href="http://lists.freeswitch.org/mailman/listinfo/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/listinfo/freeswitch-users</a><br class="gmail_msg">
UNSUBSCRIBE:<a href="http://lists.freeswitch.org/mailman/options/freeswitch-users" rel="noreferrer" class="gmail_msg" target="_blank">http://lists.freeswitch.org/mailman/options/freeswitch-users</a><br class="gmail_msg">
<a href="http://www.freeswitch.org" rel="noreferrer" class="gmail_msg" target="_blank">http://www.freeswitch.org</a><br class="gmail_msg">
</blockquote></div></div>