<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:Helvetica;
panose-1:0 0 0 0 0 0 0 0 0 0;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal">They have the skills and the ability to stop it but the people who report the traffic represent 0% of their revenue so they could care less. It�s the same actors every single day. Microsoft, Amazon, Google, Phychz Networks, Digital
Ocean, etc. that spew garbage from their networks. For a while we would send abuse reports because management felt it would do nothing even though we told them it wouldn�t. Out all of the reports sent I only ever saw one response that wasn�t a canned
response and it was from Microsoft that basically said �Yea, we know it�s an issue but they pay us and you don�t so block it yourself�.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Of course it it�s your customer that�s sending them crap traffic they will go nuclear if you don�t remove the offending traffic in .1337 seconds.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">-richey<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">Mike Hammett <nanog@ics-il.net><br>
<b>Date: </b>Monday, February 28, 2022 at 10:43 AM<br>
<b>To: </b>richey goldberg <richey.goldberg@gmail.com><br>
<b>Cc: </b>North American Network Operators Group <nanog@nanog.org><br>
<b>Subject: </b>Re: Russian aligned ASNs?<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">So the providers most likely to have the skills and capabilities to automate abuse mitigation are the least likely to do anything about
it, even when asked?<br>
<br>
</sarcasm><o:p></o:p></span></p>
<div>
<p class="MsoNormal"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
<br>
-----<br>
Mike Hammett<br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="http://www.ics-il.com/" target="_blank"><span style="font-size:13.5pt;font-family:"Times New Roman",serif">Intelligent Computing Solutions</span></a></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="https://www.facebook.com/ICSIL" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1034" src="http://www.ics-il.com/images/fbicon.png"></span></span></a><a href="https://plus.google.com/+IntelligentComputingSolutionsDeKalb" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1033" src="http://www.ics-il.com/images/googleicon.png"></span></span></a><a href="https://www.linkedin.com/company/intelligent-computing-solutions" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1032" src="http://www.ics-il.com/images/linkedinicon.png"></span></span></a><a href="https://twitter.com/ICSIL" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1031" src="http://www.ics-il.com/images/twittericon.png"></span></span></a></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="http://www.midwest-ix.com/" target="_blank"><span style="font-size:13.5pt;font-family:"Times New Roman",serif">Midwest Internet Exchange</span></a></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="https://www.facebook.com/mdwestix" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1030" src="http://www.ics-il.com/images/fbicon.png"></span></span></a><a href="https://www.linkedin.com/company/midwest-internet-exchange" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1029" src="http://www.ics-il.com/images/linkedinicon.png"></span></span></a><a href="https://twitter.com/mdwestix" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1028" src="http://www.ics-il.com/images/twittericon.png"></span></span></a></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="http://www.thebrotherswisp.com/" target="_blank"><span style="font-size:13.5pt;font-family:"Times New Roman",serif">The Brothers WISP</span></a></span><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:black"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><a href="https://www.facebook.com/thebrotherswisp" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1027" src="http://www.ics-il.com/images/fbicon.png"></span></span></a><a href="https://www.youtube.com/channel/UCXSdfxQv7SpoRQYNyLwntZg" target="_blank"><span style="color:black;text-decoration:none"><span style="font-size:13.5pt;font-family:"Times New Roman",serif;color:blue"><img border="0" id="_x0000_i1026" src="http://www.ics-il.com/images/youtubeicon.png"></span></span></a><o:p></o:p></span></p>
</div>
<div class="MsoNormal" align="center" style="text-align:center"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black">
<hr size="0" width="100%" align="center">
</span></div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;font-family:Helvetica;color:black">From:
</span></b><span style="font-size:12.0pt;font-family:Helvetica;color:black">"richey goldberg" <richey.goldberg@gmail.com><br>
<b>To: </b>"North American Network Operators Group" <nanog@nanog.org><br>
<b>Sent: </b>Thursday, February 24, 2022 9:16:13 PM<br>
<b>Subject: </b>Re: Russian aligned ASNs?</span><span style="font-size:12.0pt;font-family:Helvetica;color:black"><o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">I don�t think that refusing Russian ASNs will do much to stop any kind of attacks. They are going to attack from botnets that are global so that�s not going to stop them. If anything blocking Russian ASNs
will stop the flow of information going into Russia. I think we�re better off doing what we can to take down any machines that are participating in attacks if they live on machines that are downstream from you. One of the biggest issues I face in my
daily tasks is getting other provers to take down machines. I�m talking to you Microsoft, Amazon, Digital Ocean and the likes�..<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black">-richey<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black"> <o:p></o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="margin-bottom:12.0pt"><b><span style="font-size:12.0pt;color:black">From:
</span></b><span style="font-size:12.0pt;color:black">NANOG <nanog-bounces+richey.goldberg=gmail.com@nanog.org> on behalf of William Allen Simpson <william.allen.simpson@gmail.com><br>
<b>Date: </b>Thursday, February 24, 2022 at 7:41 PM<br>
<b>To: </b>North American Network Operators Group <nanog@nanog.org><br>
<b>Subject: </b>Russian aligned ASNs?</span><span style="color:black"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">There have been reports of DDoS and new targeted malware attacks.<br>
<br>
There were questions in the media about cutting off the Internet.<br>
<br>
Apparently some Russian government sites have already cut themselves<br>
off, presumably to avoid counterattacks.<br>
<br>
Would it improve Internet health to refuse Russian ASN announcements?<br>
<br>
What is our community doing to assist Ukraine against these attacks?<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:black"><o:p> </o:p></span></p>
</div>
</div>
</body>
</html>