[Scspamcop] Re: Kudos again to zombie-slaying Sky.com

[John Malmberg]

Sofa King Tyred of Lar Ting wrote:
> John Malmberg wrote:
> [interesting stuff snipped]
>> So a commercial ISP really has no excuse to allow a zombied machine to 
>> remain accessible more than a few minutes after they receive an abuse 
>> report, or for more than an hour after it shows up on a popular public 
>> DNSbl.
> 
> Agreed. I got the "kill report" within 4-5 days of the SC report. CBL 
> showed the IP detected 1.5 days ago I think, so I suspect that Sky let 
> it go for more than 3 days. You're dead-on about ISPs having a financial 
> interest in pro-actively hunting zombies.

While they have a financial interest in doing so, it seems that only the 
ones that are small enough that the owner(s) directly notice the costs 
of the bandwidth theft and potential paying customer loss seem to 
actually act that way.

In the case of the ISPs that own the last mile of wire to the home user, 
it seems that they act like the theft of bandwidth does not matter, as 
it does not affect anyone's pay or bonuses, and that because they have 
an effective monopoly, they do not have to worry about losing customers.

So the extra costs of ignoring zombie machines on their networks will 
show up in poor service to their paying customers and loss of profits to 
their shareholders.

And many of them seem to prefer spending money on hiring phone operators 
to try to convince their customers that poor performance is normal 
instead of fixing the problem.

Which is something to remember when they go to your franchise board to 
ask for a rate increase because of soaring costs.

It could be useful to show up with statistics about how long it takes 
for them to respond to problems that can be fixed almost immediately 
through automation.

At my former location, the franchise boards for three towns declined to 
grant a long term renewal because of customer complaints until the cable 
company actually started delivering on the stuff they had been promising 
for years.

> Still, I wonder what the average "kill time" is. Sky must be on the 
> better end of the spectrum?

I would not be surprised if someone is not keeping statistics on 
cbl.abuseat.org I.P. addresses.  You can also look at senderbase histories.

-John
wb8tyw at qsl.network
Personal Opinion Only