<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.st
{mso-style-name:st;}
span.HTML-voorafopgemaaktChar
{mso-style-name:"HTML - vooraf opgemaakt Char";
mso-style-priority:99;
mso-style-link:"HTML - vooraf opgemaakt";
font-family:Consolas;
color:black;}
span.E-mailStijl20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Sergey,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I want to include Thomas Strohe (one of the directors of Plusserver.de ) in this email for you.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I know Thomas for quite some years, as the director of PlusServer Germany. Among other things in the industry.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><a href="https://www.plusserver.com/impressum">https://www.plusserver.com/impressum</a>
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">I’m pretty sure that if if you take this offline with Thomas, that he can assist you on those abuse issues internally.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D">Regards,<br>
Erik Bais <o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">Van:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext"> anti-abuse-wg [mailto:anti-abuse-wg-bounces@ripe.net]
<b>Namens </b>Sergey<br>
<b>Verzonden:</b> maandag </span><span lang="NL" style="font-size:11.0pt;font-family:"Calibri",sans-serif;color:windowtext">17 oktober 2016 15:32<br>
<b>Aan:</b> anti-abuse-wg@ripe.net<br>
<b>Onderwerp:</b> [anti-abuse-wg] Host Europe GmbH AS8972 - seems to be fully rogue<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hello,<br>
<br>
First of all, I'm pretty sure nobody cares.<br>
<br>
However, I believe it's my obligation (at the very least) to report on massive abuse operation which I notice.<br>
<br>
I receive tons of spam e-mails from Russian or Ukrainian spammers sent from this allegedly "<span class="st">one of Europe's leading hosting providers". Below are just unique spam sources for last 24 hours, but I'm receiving tens of e-mails from each of them
and it lasts for a long time already:</span><o:p></o:p></p>
<pre>Received: from elefanters.eu (mail.elefanters.eu [85.25.155.41])<o:p></o:p></pre>
<pre>Received: from embarione.ru (mail.embarione.ru [62.75.236.150])<o:p></o:p></pre>
<pre>Received: from hebraica.eu (mail.hebraica.eu [62.75.236.204])<o:p></o:p></pre>
<pre>Received: from informazion.eu (mail.informazion.eu [188.138.127.156])<o:p></o:p></pre>
<pre>Received: from intermagic.eu (mail.intermagic.eu [62.75.236.205])<o:p></o:p></pre>
<pre>Received: from bookigemse.ru (mail.bookigemse.ru [85.25.226.162])<o:p></o:p></pre>
<pre>Received: from cooperhant.ru (mail.cooperhant.ru [62.75.236.138])<o:p></o:p></pre>
<pre>Received: from airpotes.ru (mail.airpotes.ru [62.75.236.136])<o:p></o:p></pre>
<pre>Received: from footingers.ru (mail.footingers.ru [85.25.208.94])<o:p></o:p></pre>
<pre>Received: from minderse.eu (mail.minderse.eu [85.25.226.216])<o:p></o:p></pre>
<pre>Received: from excluzivem.eu (mail.excluzivem.eu [85.25.226.204])<o:p></o:p></pre>
<pre><o:p> </o:p></pre>
<pre><o:p> </o:p></pre>
<p class="MsoNormal" style="margin-bottom:12.0pt">(Notice also that the .EU TLD seems to be another spammers' heaven.)<br>
<br>
All abuse complaints sent at <a href="mailto:abuse@plusserver.de">abuse@plusserver.de</a> are defiantly dismissed. By making this public I'd like to hear something from them. However, I have almost no doubt that this autonomous system advertising hundreds of
IPv4 prefixes is 100% rogue.<br>
<br>
<o:p></o:p></p>
</div>
</body>
</html>