Suspicious IP reporting

Jean St-Laurent jean at
Fri Feb 5 00:22:04 UTC 2021

I do not know Tom personally, but I’ve been following his comments, hindsight and shared experience. Tom seems to be a bigger player than you on this mailing list.


Joe, you are only penalizing yourself by banning him. I would personally not ban him.




From: Jean St-Laurent <jean at> 
Sent: February 4, 2021 6:28 PM
To: 'JoeSox' <joesox at>; 'Tom Beecher' <beecher at>
Cc: 'NANOG' <nanog at>
Subject: RE: Suspicious IP reporting


So what? I’ve scanned the internet more than 100’ times on all ports/protocols than you can imagine with zmap and many other shabby tools.


I agree with Tom that these absue reports are totally useless and create so much noise that it feels like crying wolf.

Network operator are trained to absorb and protect against that.


Are you aware of the 4D rules?






Unless that you are a real threat to a nation… good luck.


There is a new submarine link that connect America with Europe. It is said to be 250 Tbps.


Kill this link and I guess the industry will listen to you.


Good luck with your ip in China.


Jean St-Laurent



From: NANOG < at < at> > On Behalf Of JoeSox
Sent: February 4, 2021 6:06 PM
To: Tom Beecher <beecher at <mailto:beecher at> >
Cc: NANOG <nanog at <mailto:nanog at> >
Subject: Re: Suspicious IP reporting



Others are seeing it as I provided the website that shows others are seeing it.

I think it is pretty poor form to be ignorant.


Congrats you have been banned from my gmail account straight to the deleted.



On Thu, Feb 4, 2021 at 1:12 PM Tom Beecher <beecher at <mailto:beecher at> > wrote:

I think it's pretty poor form to ask people to report an IP for doing something they are not seeing themselves, and may not even be abuse. What does "hitting devices" mean? Pings? SNMP? 


This sort of thing contributes to abuse reponses being poor; lots of noise, not much signal. 


On Thu, Feb 4, 2021 at 1:22 PM JoeSox <joesox at <mailto:joesox at> > wrote:


This IP is hitting devices on cellular networks for the past day or so.  

I think this is the info to report it to the ISP.  Any help or if everyone can report it, I would be a happy camper.


abuse at <mailto:abuse at> ; abuse at <mailto:abuse at>



Thank You,


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the NANOG mailing list