[toast0]

Hertzner says in the email that no response is necessary.

Automated abuse reports of things that are easily spoofed don't justify a report, but might justify a quick check to make sure your box is still operating correctly and hasn't been taken over.

[ziddoap]

>but we do expect you to check it and to resolve any potential issues.

That's the important part.

If they receive another one (or two, or a few) more abuse reports, they assume it is not fixed, and will expect a response then. Which ends up being annoying.

[iforgotpassword]

Well they are hetzner, they should understand the issue. I don't know if they would go through the hassle to verify by themselves by running a capture on a router leading to your server though... I had a similar problem a good decade ago. Was running a game server for a while, and as it is with competitive games, some people get really angry when they lose. At some point I got DDoSed by a udp reflection attack, and as if that wasn't annoying enough, I got relayed an abuse complaint from a Brazilian ISP who claimed I was DoSing one of the servers in his network, which was in reality one of the zombies getting hit by the spoofed packets containing my server's address as the source. I tried to explain to them twice how this works, linked them two different articles about it, told them to look at the traffic to and from this server so that they would be able to verify the server is actually sending much more traffic in my direction, but no dice, they just sent and even angrier mail to hetzner. I quickly contacted hetzner after that incident telling them the story and they said it's fine and apparently fully understood the issue, which really shouldn't be surprising for an ISP, but the previous exchange with the other ISP made me question my sanity a bit.

[IggleSniggle]

This kinda thing is so rough, and I can really relate to the questioning of your own sanity part when everyone around you is insisting something works in a particular way that is just factually incorrect.

I got hired into a pretty old small technology company that has over a decade of tech debt, and "how the whole system works" is different depending on which engineer you're talking to. You have to do a context shift to a different engineering reality just to do basic improvements to the system. Lots and lots of built up confusion over years of incremental changes, some of which under pressure no doubt, some well intentioned half-refactors, some almost dead code...imagine your well established corporate morass and then give it a shoestring budget.

It's scrappy in its own way, but the threads where people advocate "don't worry about the tech debt, if the company succeeds they will have the budget to fix it" don't account for the middle ground of not having huge success but having enough success to continue indefinitely. I guess that could mean you could fix the problem over longer time spans, but people do t stay at orgs like this long enough for that to happen, because the job of fixing it is no fun and you can't just throw huge amounts of money at the problem.

[immibis]

It's the converse - since they are Hetzner, I'd expect them to have an automatic system to delete servers if 2-3 abuse reports are received...