Abuse policy

How reports reach us, and what happens after they do.

01 — Where to send a report
abuse@istmonetworks.net

Network abuse, in any volume

noc@istmonetworks.net

Routing, reachability, incidents

postmaster@istmonetworks.net

Mail delivery and RFC 2142 correspondence

The abuse address accepts mail from anyone. It is not behind a web form, a ticket portal, a login, or a captcha, and it is read by a person.

02 — Response commitment

Every report is acknowledged within one business day.

Acknowledgement carries a reference the reporter can quote in follow-up. It is not a verdict; it confirms the report reached a human and is being looked at.

Where a report is confirmed, the reporter is told what action was taken. Where it is not confirmed, the reporter is told why. Silence is not one of the outcomes.

03 — What makes a report actionable

Anything is accepted. This gets acted on the same day.

  • Timestamps, with the time zone stated or in UTC.
  • Source and destination addresses, and the ports and protocol involved.
  • Relevant log excerpts, in plain text rather than as screenshots.
  • For mail complaints, the full headers of the offending message.

Automated reports are welcome, including X-ARF and the common feedback-loop formats. There is no rate limit on legitimate reporting and no requirement to register first.

04 — What we do about it

Confirmed abuse suspends the allocation.

We do not require a court order, a subpoena, or a lawyer’s letter to act on a well-evidenced report.

Repeat abuse ends the customer relationship rather than producing a second warning. Where abuse originates from a customer’s own compromised system rather than from intent, the first step is notification and a remediation window; that discretion does not extend to a second occurrence.

Every allocation is traceable to an identified customer. We do not assign addressing to parties we cannot identify, which is what allows any of the above to be more than a statement of intent.

05 — Scope and limits

The carrier remains the operator of record.

Addressing described on this site is assigned by an upstream Nicaraguan carrier, which remains the holder registered against the prefix. Reports about the prefix may also be sent to that carrier’s own abuse contact, published in the regional registry. Sending to both is not duplication and does not slow anything down.

Service is provided under Nicaraguan law, and the obligations that carry with it are stated in full to prospective customers before commitment rather than discovered afterwards.

Reporting something right now?

Send it straight to the abuse desk. It is read by a person and acknowledged within one business day.