Suspicious IP reporting

Thu Feb 4 23:28:22 UTC 2021

So what? I’ve scanned the internet more than 100’ times on all ports/protocols than you can imagine with zmap and many other shabby tools.

I agree with Tom that these absue reports are totally useless and create so much noise that it feels like crying wolf.

Network operator are trained to absorb and protect against that.

Are you aware of the 4D rules?

Dether

Denied

Detect

Delay

Unless that you are a real threat to a nation… good luck.

There is a new submarine link that connect America with Europe. It is said to be 250 Tbps. 

https://cloud.google.com/blog/products/infrastructure/googles-dunant-subsea-cable-is-now-ready-for-service

Kill this link and I guess the industry will listen to you.

Good luck with your ip in China.

Jean St-Laurent

From: NANOG <nanog-bounces+jean=ddostest.me at nanog.org> On Behalf Of JoeSox
Sent: February 4, 2021 6:06 PM
To: Tom Beecher <beecher at beecher.cc>
Cc: NANOG <nanog at nanog.org>
Subject: Re: Suspicious IP reporting

Tom,

Others are seeing it as I provided the website that shows others are seeing it.

https://www.abuseipdb.com/check/79.124.62.86

I think it is pretty poor form to be ignorant.

Congrats you have been banned from my gmail account straight to the deleted.

On Thu, Feb 4, 2021 at 1:12 PM Tom Beecher <beecher at beecher.cc <mailto:beecher at beecher.cc> > wrote:

I think it's pretty poor form to ask people to report an IP for doing something they are not seeing themselves, and may not even be abuse. What does "hitting devices" mean? Pings? SNMP? 

This sort of thing contributes to abuse reponses being poor; lots of noise, not much signal. 

On Thu, Feb 4, 2021 at 1:22 PM JoeSox <joesox at gmail.com <mailto:joesox at gmail.com> > wrote:

This IP is hitting devices on cellular networks for the past day or so.

  https://www.abuseipdb.com/whois/79.124.62.86  

I think this is the info to report it to the ISP.  Any help or if everyone can report it, I would be a happy camper.

abuse at 4cloud.mobi <mailto:abuse at 4cloud.mobi> ; abuse at fiberinternet.bg <mailto:abuse at fiberinternet.bg> 

https://en.asytech.cn/check-ip/79.124.62.25#gsc.tab=0

--

Thank You,

Joe

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20210204/1861ec6a/attachment.html>