🚀 go-pugleaf

Hi!

Im working for a major ISP in sweden and this thing have happend for
us as well. The thing i did was to do a whois at rs.internic.net and
search for all of microsofts c-nets. After that i blocked all of their
c-nets in our routers and denied their adresses as well to connect to
our servers. That resulted in a blocking of about 98% of their
IP adresses. Now and then there is still a few requests originating from
the states (Seattle? looks like that on a traceroute) but that solved it
for us. It can be hard to find out all c-nets for a company, but if you
keep an eye on the logs i shouldnt be to hard to find them all.
For adresses coming from europe you have to look at whois.ripe.net

I found out that there is a few other out there doing the same thing
so keep an eye on them.

/Amar

PS.excuse me for my poor english.DS