A suggestion I could make is do a traceroute to somewhere, like
google.com or something.  You will see it start at your router and then
continue out.  A lot of ISPs now have an outbound router that is on a
local subnet.  That would be the only valid explanation as to why you
would see these.  Any properly configured router on the internet will
not route those.  My router has a rule that actively blocks those
networks from the outside for this very reason.

Tim Shoppa wrote:
> I have seen an increase in NTP requests from addresses in the 10.0.0.* net
> in the past couple of weeks.
> 
> Typical poll frequency is once every 16 seconds although I see others.
> 
> Is this misconfigured networking on the client's end? They're probably running
> on a local network with 10.0.0.* addresses, and whatever routing/NAT they're
> using will send the UDP queries out with the original address, which is of 
> course
> unroutable from my end?
> 
> Any chance of tracking these clients down and helping them out? It's not 
> really
> abusive, just a little surprising that I hadn't really noticed so many until 
> a few
> weeks ago. (Some ignorant slashdotters?)
> 
> Tim.
> 
> 
> 
> _______________________________________________
> timekeepers mailing list
> [email protected]
> https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
> 

-- 
Todd
http://www.vrillusions.com/
My PGP Key ID: 0xBC90230C

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers

Reply via email to