Poneytelecom.eu / Online SAS: Hosting Botnets, Scrappers, Spammers and Hacking Scripts

For the last two years we had almost daily attacks from specific IPs. All kind of attacks like targeting WordPress sites and WP plugin vulnerabilities. More than 3-4 per day. The IPs belong to Poneytelecom.eu but their webpage redirects to Online SAS in France. They “claim” to be a hosting company, offering also dedicated servers. ROFL.

Online SAS – BP 438 – 75366 Paris CEDEX 08 – RCS Paris B 433 115 904

There is plenty of information about the above if you google “PoneyTelecom.eu”. A lot of people are reporting server abuse and hacking attempts from Online SAS / Iliad-Entreprises IPs.

poneytelecomSo we decided to use their abuse ticketing and see what happens. We did that for a hundred times and the result was the same, a reply that the “issue has be resolved”. And after a few days we got a new attack for some-kind.

This must be one of the worst hosting companies i have ever seen. And it is rather strange because they are located in France and not in Ukraine. France is a European country, am i right ? They do have laws in France, don’t they ?

online_sasI think Online SAS / PoneyTelecom.eu / Iliad-Entreprises (or whatever other funny names they have) are just a hosting company that tolerate spamming, hacking tools hosting and botnets. So they have built a reputation for that and they attract all kind of illegal internet activities.

So i will dedicate a few pages and comments for that crappy ONLINE SAS French company. With details, IPs and their reply. If i was in France i would sue them also, since we have huge log file just for them.

Here is a small sample from their attacks. At some point we will (try to) block all their IPs since all those daily attacks pose heavy load to our server and sites.


You can also discuss this topic in our Forums.

24 thoughts on “Poneytelecom.eu / Online SAS: Hosting Botnets, Scrappers, Spammers and Hacking Scripts”

  1. Johannes de Sacrobosco says:

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse request

    Dear Sir or Madam,

    Thank you for your abuse request on server ip address 163.172.51.23.

    We have record it with reference A-147576.

    __________________________________

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse notification resolved

    Dear Sir or Madam,

    Your abuse number 147576 is now closed.

    Here is a comment left by our customer:
    —————————————————————-

    forwarded to client for a solution

    —————————————————————-

  2. Johannes de Sacrobosco says:

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse request

    Dear Sir or Madam,

    Thank you for your abuse request on server ip address 195.154.181.162.

    We have record it with reference A-147575.

    __________________________________

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse notification resolved

    Dear Sir or Madam,

    Your abuse number 147575 is now closed.

    Here is a comment left by our customer:
    —————————————————————-

    It has been resolved.

    —————————————————————-

  3. Johannes de Sacrobosco says:

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse request

    Dear Sir or Madam,

    Thank you for your abuse request on server ip address 195.154.199.154.

    We have record it with reference A-146754.

    ___________________________________

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse notification resolved

    Dear Sir or Madam,

    Your abuse number 146754 is now closed.

    Here is a comment left by our customer:
    —————————————————————-

    It has been resolved.

    —————————————————————-

  4. Johannes de Sacrobosco says:

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse request

    Dear Sir or Madam,

    Thank you for your abuse request on server ip address 62.210.75.243.

    We have record it with reference A-146513.

    ___________________________________________

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse notification resolved

    Dear Sir or Madam,

    Your abuse number 146513 is now closed.

    Here is a comment left by our abuse team:
    —————————————————————-

    Service has been locked after 48 hours.

    —————————————————————-

  5. Johannes de Sacrobosco says:

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse request

    Dear Sir or Madam,

    Thank you for your abuse request on failover ip address 212.129.56.90.

    We have record it with reference A-146511.

    ___

    ONLINE SAS
    Technical assistance
    BP 438 – 75366 Paris CEDEX 08
    France

    Tel: 01 84 13 00 00

    Subject : Abuse notification resolved

    Dear Sir or Madam,

    Your abuse number 146511 is now closed.

    Here is a comment left by our customer:
    —————————————————————-

    The email was sent as a newsletter to registered users. It seems that due to a system failure the newsletter was sent to some unsubscribed users. The failure was fixed and the email is removed from the list. We are sorry for the inconvinience

    —————————————————————-

Leave a Reply

Your email address will not be published. Required fields are marked *