[anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also hosts the official site for the terrorist group Hamas

[image: image.png]


*Rui A. S. Esteves*


On Sun, Jan 17, 2021 at 2:17 PM Michele Neylon - Blacknight via
anti-abuse-wg <anti-abuse-wg at ripe.net> wrote:

> Looks like Parler is now using them as well:
>
>
>
> parler.com has address 190.115.31.151
>
>
>
>
>
> --
>
> Mr Michele Neylon
>
> Blacknight Solutions
>
> Hosting, Colocation & Domains
>
> https://www.blacknight.com/
>
> https://blacknight.blog/
>
> Intl. +353 (0) 59  9183072
>
> Direct Dial: +353 (0)59 9183090
>
> Personal blog: https://michele.blog/
>
> Some thoughts: https://ceo.hosting/
>
> -------------------------------
>
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty
>
> Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
>
>
>
>
> *From: *anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> on behalf of
> Ronald F. Guilmette <rfg at tristatelogic.com>
> *Date: *Wednesday, 13 January 2021 at 02:59
> *To: *Siyuan Miao <siyuan at misaka.io>
> *Cc: *anti-abuse-wg at ripe.net <anti-abuse-wg at ripe.net>
> *Subject: *Re: [anti-abuse-wg] DDoS-Guard, a dodgy Russian firm that also
> hosts the official site for the terrorist group Hamas
>
> In message <CAO3CAMr15ZzKzEqvObchLUZ9Q8F5Xqts+9WGJy=
> ZbnDA0qZZGQ at mail.gmail.com>, you wrote:
>
> >hamas.ps seems to be hosted on Sucuri ... a doggy US based firm?
>
> According to data provided by Farsight Security, Inc. the site was
> formerly located at 190.115.18.139, which is indeed DDos-Guard,
> up until 2020-11-12, and it was then moved to its current location,
> 192.124.249.13, which is indeed, Securi.
>
>
> ----------------------------------------------------------
> ;;  bailiwick: hamas.ps.
> ;;      count: 70144
> ;; first seen: 2019-05-14 23:18:11 -0000
> ;;  last seen: 2020-11-12 13:40:58 -0000
> hamas.ps. IN A 190.115.18.139
>
> ;;  bailiwick: hamas.ps.
> ;;      count: 11017
> ;; first seen: 2020-11-12 13:45:02 -0000
> ;;  last seen: 2021-01-12 14:21:11 -0000
> hamas.ps. IN A 192.124.249.13
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20210117/8bd35ff9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image.png
Type: image/png
Size: 89484 bytes
Desc: not available
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20210117/8bd35ff9/attachment.png>