Well, when I say nothing is done, I mean the abuse continues after the
report is made to the contact listed in SWIP/WHOIS.
If you were the administrator and you did what you said after a report, I
would see the abuse stopped (in this case simply beacuse you cut that user
off), I would consider that a success, not a failure. When I send a
report, stopping the abuse is more important than an email response.
I average about 50/50 on abuse reports to other networks that are doing
things like dictionary attacks on my server. Usually I simply blacklist
the IP involved, but I can still see the connection attempts continue. At
that point is when I send a report. If a reasonable time goes by and I
still have not seen the connection attempts stop, I see this as ignoring
abuse reports, and this is what I speak of.
I do not require a response to know if the report was dealt with. I
consider the stopping of the bad behavior to be the indicator.
Albert Erdmann
Network Administrator
Paradise On Line Inc.
On Mon, 12 Jun 2017, Ted Mittelstaedt wrote:
On 6/3/2017 4:27 PM, [email protected] wrote:
If enforcement of SWIP would result in the elimination of network abuse,
I would not speak against it. However, even with valid contacts in SWIP,
abuse reports are ignored.
You have NO proof of that.
If you contacted me at one of my abuse contacts and I investigated and
discovered a bad user and gave them the boot, I wouldn't contact you back.
The reason? I don't have any assurance that you aren't the bad user I'm
booting (or a proxy of theirs) trying to get information on how
I police my servers.
Ted
_______________________________________________
PPML
You are receiving this message because you are subscribed to
the ARIN Public Policy Mailing List ([email protected]).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-ppml
Please contact [email protected] if you experience any issues.
_______________________________________________
PPML
You are receiving this message because you are subscribed to
the ARIN Public Policy Mailing List ([email protected]).
Unsubscribe or manage your mailing list subscription at:
http://lists.arin.net/mailman/listinfo/arin-ppml
Please contact [email protected] if you experience any issues.
