Hetzner's automated abuse system is just as terrible. I did a write up on it a 
couple years ago, when it was being sold as a DoS method on certain nefarious 
forums, the malicious actor repeatedly spoofs your IP/ranges toward Hetzner 
ranges, generating abuse reports to your ISP, until your ISP 
nullroutes/suspends.

We immediately bin anything that hits our abuse mailbox from Hetzner since 
then, because it got to the point that daily we were receiving obviously 
spoofed logs of UDP traffic.

I tried to climb the ladder of bureaucracy at Hetzner, the highest point I was 
able to reach was a "senior network engineer," who told me to disable spoofing 
on my network, but could not comprehend that disabling spoofing on my network 
does not prevent other networks from spoofing our IPs.

Reply via email to