Manuela Horn. We block them off, mark their account, and notify them by phone of why they lost internet access.
This is the very reason at the ISP I work for we cut our user’s access to the net once we discover they are spamming/botting/flooding anyone for any reason. We block them off, mark their account, and notify them by phone of why they lost internet access. Once they notify us they’ve had their PC cleaned we allow them access again. If they do it again though (and we monitor their bandwidth usage for two weeks to be sure they didn’t miss something) we require them to bring in a receipt showing they had their PC cleaned by professionals and that they have antivirus before turning them on again.
AT&T (if they really are attempting to protect them… which is likely BS) made the poor choice. We receive notification from AT&T when our customers SPAM or flood anyone about how they’ll blackhole their IP if we don’t stop them (effectively costing us an IP until we fix it), so I know they have an automated system for dumping individual attackers into a block list without interaction from us. This just seems like a power play to eliminate a server they don’t particularly like.
