Chuck wrote:
> still would like advice if this is or is not abuse and its severity.
> i blocked them because in 10 min the count went from 925k to 936k.

An ntpd in default configuration does one request/minute or less
ntpdate does a single burst of a few requests

I start complaining when I see more than 4 requests per minute from a 
single IP for 5 minutes or longer.

In most of the cases writing a polite letter to "abuse"@"provider" helps 
to get usage down. "Dear abusedesk, One of your customers..."
Good things to mention:
        IP-address, date, time + timezone, number of requests
        pool.ntp.org is volunteer run
        this use is excessive
        bring it down to less than one request per minute

I attach some (filtered!) tcpdump output showing the issue.

Peter.
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers

Reply via email to