Do You Report Malicious Actors to Their Providers?

I usually report them, especially if they're beyond Cloudflare because they tend to take action. It's not always guaranteed, but it’s worth a shot.

I consider it case by case. If there's an attempt to spoof our business domain, like a similar-looking domain name, I report that without hesitation.

It really depends. Sometimes I'll look into it if I’m bored or if the ASN name catches my interest; it can be fun to dig around.

I always report. Although responses can be lacking, one successful takedown can disrupt an ongoing campaign. I've automated my reports to save time during active incidents.

I do report them, but honestly, the response rate is pretty poor. Still, it’s better than doing nothing.

I generally only report enough to mitigate the threat. If a phishing email comes through, I focus on getting the links taken down or the email addresses suspended. Better to strike where it hurts!