tis 2007-06-12 klockan 08:48 +0100 skrev Rob Oats: > I have addressed this issue with Ask over the last few days as result of my > modem/router being taken down. > > On Friday 1st June my router was taken down by a surge of requests exceeding > 36 000 requests/min. I have since been able to obtain a dump file from > another surge. The bulk of these requests are coming from Turk Telekom. > > I wanted to know whether others in the pool are seeing similar effects > (really > a DDOS) and whether they are able to handle this and what is the general > attitude is to commercial organisations effectively handing off a service to > us. I would have no problem with this organisation having a single box > pulling time from the pool and servicing their own networks from this box. > > Rob Oats > UK > _______________________________________________ > timekeepers mailing list > [email protected] > https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers >
I've been having problems with Turk Telecom also, and I've sent atleast two emails to their abuse adress but the do not reply. I got peaks about 10'000 connections from their netblocks, and finally I decided to drop packets from these netblocks in my firewall. It's not that my router can't handle 10'000 connections, but I'm on a DSL connection that wraps my ethernet packages in ATM on the way to the ISP. This seems to result in much more bandwidth being used than what I expected, and eventually led to very high delays to the internet (500 ms). I'm not sure if it's okay with the pool that I block these IPs, if it's not you can just remove me from the pool (80.252.175.45). But I don't think my server will do much good if it has delays up to 500 ms sometimes? I've attached a list of netblocks that I got from the RIPE whois database if someone else needs to block these IPs. Regards, Johan Marcusson
Netblocks belonging to Turk Telecom according to RIPE whois database: 212.156.0.0/16 212.174.0.0/16 212.175.0.0/16 194.9.174.0/24 213.138.0.0/19 193.218.200.0/24 194.54.32.0/19 62.248.0.0/17 195.174.0.0/16 195.175.0.0/17 195.175.128.0/18 195.175.192.0/18 193.201.128.0/22 81.212.0.0/16 81.213.0.0/16 81.214.0.0/16 81.215.0.0/16 193.254.252.0/23 193.254.252.0/24 195.174.153.0/24 193.254.253.0/24 193.254.252.0/24 195.128.32.0/24 195.128.33.0/24 195.128.34.0/24 195.128.35.0/24 195.128.36.0/24 195.128.37.0/24 195.128.38.0/24 195.128.39.0/24 195.128.32.0/22 195.128.36.0/22 195.128.32.0/21 195.174.0.0/17 195.174.128.0/18 195.174.192.0/18 81.215.0.0/17 81.215.128.0/17 85.96.0.0/16 85.96.0.0/17 85.96.128.0/17 85.97.0.0/17 85.97.128.0/17 85.98.0.0/17 85.98.128.0/17 81.212.0.0/17 81.212.128.0/17 81.213.0.0/17 81.213.128.0/17 81.214.0.0/17 81.214.128.0/17 212.156.0.0/17 212.156.128.0/17 212.174.0.0/17 212.174.128.0/17 212.175.0.0/17 212.175.128.0/17 85.99.0.0/17 85.99.128.0/17 85.100.0.0/17 85.100.128.0/17 85.111.0.0/17 85.111.128.0/17 85.105.0.0/17 85.105.128.0/17 85.101.0.0/17 85.101.128.0/17 85.106.0.0/17 85.106.128.0/17 212.174.190.0/24 195.140.196.0/24 212.174.190.0/24 85.110.0.0/17 85.110.128.0/17 85.107.0.0/17 85.107.128.0/17 88.224.0.0/17 88.224.128.0/17 88.225.0.0/17 88.225.128.0/17 88.247.0.0/17 88.247.128.0/17 88.240.0.0/17 88.240.128.0/17 88.233.0.0/17 88.233.128.0/17 88.226.0.0/17 88.226.128.0/17 88.227.0.0/17 88.227.128.0/17 88.228.0.0/17 88.228.128.0/17 88.232.0.0/17 88.232.128.0/17 88.239.0.0/17 88.239.128.0/17 88.246.0.0/17 88.246.128.0/17 88.241.0.0/17 88.241.128.0/17 88.248.0.0/17 88.248.128.0/17 88.229.0.0/17 88.229.128.0/17 88.234.0.0/17 88.234.128.0/17 85.108.0.0/17 85.108.128.0/17 85.109.0.0/17 85.109.128.0/17 88.230.0.0/17 88.230.128.0/17 88.231.0.0/17 88.231.128.0/17 88.235.0.0/17 88.235.128.0/17 88.236.0.0/17 88.236.128.0/17 88.237.0.0/17 88.237.128.0/17 88.238.0.0/17 88.238.128.0/17 88.242.0.0/17 88.242.128.0/17 88.243.0.0/17 88.243.128.0/17 88.244.0.0/17 88.244.128.0/17 88.245.0.0/17 88.245.128.0/17 88.249.0.0/17 88.249.128.0/17 88.250.0.0/17 88.250.128.0/17 88.251.0.0/16 88.252.0.0/16 88.253.0.0/16 88.254.0.0/16 88.255.0.0/16 88.251.0.0/17 88.251.128.0/17 88.252.0.0/17 88.252.128.0/17 88.253.0.0/17 88.253.128.0/17 88.254.0.0/17 88.254.128.0/17 78.160.0.0/11 78.160.0.0/17 78.160.128.0/17 78.186.0.0/17 78.186.128.0/17 78.161.0.0/17 78.161.128.0/17 78.171.0.0/17 78.171.128.0/17 78.172.0.0/17 78.172.128.0/17 78.180.0.0/17 78.180.128.0/17 78.181.0.0/17 78.181.128.0/17
_______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
