<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-CA link=blue vlink=purple style='word-wrap:break-word'><div class=WordSection1><p class=MsoNormal><span style='mso-fareast-language:EN-US'>I do not know Tom personally, but I’ve been following his comments, hindsight and shared experience. Tom seems to be a bigger player than you on this mailing list.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Joe, you are only penalizing yourself by banning him. I would personally not ban him.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>J<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><div><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> Jean St-Laurent <jean@ddostest.me> <br><b>Sent:</b> February 4, 2021 6:28 PM<br><b>To:</b> 'JoeSox' <joesox@gmail.com>; 'Tom Beecher' <beecher@beecher.cc><br><b>Cc:</b> 'NANOG' <nanog@nanog.org><br><b>Subject:</b> RE: Suspicious IP reporting<o:p></o:p></span></p></div></div><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>So what? I’ve scanned the internet more than 100’ times on all ports/protocols than you can imagine with zmap and many other shabby tools.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>I agree with Tom that these absue reports are totally useless and create so much noise that it feels like crying wolf.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Network operator are trained to absorb and protect against that.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Are you aware of the 4D rules?<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Dether<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Denied<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Detect<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Delay<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Unless that you are a real threat to a nation… good luck.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>There is a new submarine link that connect America with Europe. It is said to be 250 Tbps. <o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><a href="https://cloud.google.com/blog/products/infrastructure/googles-dunant-subsea-cable-is-now-ready-for-service">https://cloud.google.com/blog/products/infrastructure/googles-dunant-subsea-cable-is-now-ready-for-service</a><o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Kill this link and I guess the industry will listen to you.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Good luck with your ip in China.<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'>Jean St-Laurent<o:p></o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><p class=MsoNormal><span style='mso-fareast-language:EN-US'><o:p> </o:p></span></p><div style='border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm'><p class=MsoNormal><b><span lang=EN-US>From:</span></b><span lang=EN-US> NANOG <<a href="mailto:nanog-bounces+jean=ddostest.me@nanog.org">nanog-bounces+jean=ddostest.me@nanog.org</a>> <b>On Behalf Of </b>JoeSox<br><b>Sent:</b> February 4, 2021 6:06 PM<br><b>To:</b> Tom Beecher <<a href="mailto:beecher@beecher.cc">beecher@beecher.cc</a>><br><b>Cc:</b> NANOG <<a href="mailto:nanog@nanog.org">nanog@nanog.org</a>><br><b>Subject:</b> Re: Suspicious IP reporting<o:p></o:p></span></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>Tom,<o:p></o:p></p></div><div><p class=MsoNormal>Others are seeing it as I provided the website that shows others are seeing it.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><a href="https://www.abuseipdb.com/check/79.124.62.86">https://www.abuseipdb.com/check/79.124.62.86</a><o:p></o:p></p></div><div><p class=MsoNormal>I think it is pretty poor form to be ignorant.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Congrats you have been banned from my gmail account straight to the deleted.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Thu, Feb 4, 2021 at 1:12 PM Tom Beecher <<a href="mailto:beecher@beecher.cc">beecher@beecher.cc</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><p class=MsoNormal>I think it's pretty poor form to ask people to report an IP for doing something they are not seeing themselves, and may not even be abuse. What does "hitting devices" mean? Pings? SNMP? <o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This sort of thing contributes to abuse reponses being poor; lots of noise, not much signal. <o:p></o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Thu, Feb 4, 2021 at 1:22 PM JoeSox <<a href="mailto:joesox@gmail.com" target="_blank">joesox@gmail.com</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-top:5.0pt;margin-right:0cm;margin-bottom:5.0pt'><div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>This IP is hitting devices on cellular networks for the past day or so.<o:p></o:p></p></div><div><p class=MsoNormal> <a href="https://www.abuseipdb.com/whois/79.124.62.86" target="_blank">https://www.abuseipdb.com/whois/79.124.62.86</a> <o:p></o:p></p></div><div><p class=MsoNormal>I think this is the info to report it to the ISP. Any help or if everyone can report it, I would be a happy camper.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="mailto:abuse@4cloud.mobi" target="_blank">abuse@4cloud.mobi</a>; <a href="mailto:abuse@fiberinternet.bg" target="_blank">abuse@fiberinternet.bg</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal><a href="https://en.asytech.cn/check-ip/79.124.62.25#gsc.tab=0" target="_blank">https://en.asytech.cn/check-ip/79.124.62.25#gsc.tab=0</a><o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><div><p class=MsoNormal>--<o:p></o:p></p></div><div><div><p class=MsoNormal><span style='font-size:9.5pt'>Thank You,<o:p></o:p></span></p></div></div><div><p class=MsoNormal><span style='font-size:9.5pt'>Joe<o:p></o:p></span></p></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></blockquote></div></blockquote></div></div></div></body></html>