Suspicious IP reporting
jean at ddostest.me
Fri Feb 5 00:22:04 UTC 2021
I do not know Tom personally, but I’ve been following his comments, hindsight and shared experience. Tom seems to be a bigger player than you on this mailing list.
Joe, you are only penalizing yourself by banning him. I would personally not ban him.
From: Jean St-Laurent <jean at ddostest.me>
Sent: February 4, 2021 6:28 PM
To: 'JoeSox' <joesox at gmail.com>; 'Tom Beecher' <beecher at beecher.cc>
Cc: 'NANOG' <nanog at nanog.org>
Subject: RE: Suspicious IP reporting
So what? I’ve scanned the internet more than 100’ times on all ports/protocols than you can imagine with zmap and many other shabby tools.
I agree with Tom that these absue reports are totally useless and create so much noise that it feels like crying wolf.
Network operator are trained to absorb and protect against that.
Are you aware of the 4D rules?
Unless that you are a real threat to a nation… good luck.
There is a new submarine link that connect America with Europe. It is said to be 250 Tbps.
Kill this link and I guess the industry will listen to you.
Good luck with your ip in China.
From: NANOG <nanog-bounces+jean=ddostest.me at nanog.org <mailto:nanog-bounces+jean=ddostest.me at nanog.org> > On Behalf Of JoeSox
Sent: February 4, 2021 6:06 PM
To: Tom Beecher <beecher at beecher.cc <mailto:beecher at beecher.cc> >
Cc: NANOG <nanog at nanog.org <mailto:nanog at nanog.org> >
Subject: Re: Suspicious IP reporting
Others are seeing it as I provided the website that shows others are seeing it.
I think it is pretty poor form to be ignorant.
Congrats you have been banned from my gmail account straight to the deleted.
On Thu, Feb 4, 2021 at 1:12 PM Tom Beecher <beecher at beecher.cc <mailto:beecher at beecher.cc> > wrote:
I think it's pretty poor form to ask people to report an IP for doing something they are not seeing themselves, and may not even be abuse. What does "hitting devices" mean? Pings? SNMP?
This sort of thing contributes to abuse reponses being poor; lots of noise, not much signal.
On Thu, Feb 4, 2021 at 1:22 PM JoeSox <joesox at gmail.com <mailto:joesox at gmail.com> > wrote:
This IP is hitting devices on cellular networks for the past day or so.
I think this is the info to report it to the ISP. Any help or if everyone can report it, I would be a happy camper.
abuse at 4cloud.mobi <mailto:abuse at 4cloud.mobi> ; abuse at fiberinternet.bg <mailto:abuse at fiberinternet.bg>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the NANOG