This is a “What do you think of this #infosec practice, and what do you think I should do about it?” thread. Please boost! Executive summary: When an ISP forwards an abuse report to its customer to do something about, is it OK to include the host name and IP address of the server that was attacked and other sensitive details from the abuse report? If not, is it worth complaining and trying to get a huge ISP to do something about it? 1/9