Heyho! On Monday 15 June 2009 20.55:36 Patrick Domack wrote: > hmm, a strange ntp client > > CPE000fb06f0904-CM000f21775e92.cpe.net.cable.rogers.com > > 99.241.71.252 > > I noticed my traffic went from around 150kbps to well over 450kbps, > and this one client was responsible, over 3000 requests per second.
I know this might sound like a silly idea given the state of the ISP
landscape, but have you tried to contact the abuse contact listed in whois
for this IP?
I don't know rogers.com, but I actually did get a response every now and
then when I tried to do that. (Admittedly in a minority of the cases, but
still...)
A 300kbps flooding *should* be enough to get an abuse desks attention, the
biggest problem will probably be to actually reach somebody who doesn't just
response with "Dear cable customer, please switch your DSL modem off and on
and then try again setting the time on the VCR sometimes helps, too."
cheers
-- vbi
>
> 14:54:13.152841 IP 99.241.71.252.123 > 38.117.195.101.123: NTPv3,
> symmetric active, length 48
> 0x0000: 4500 004c 203c 0000 7311 919d 63f1 47fc E..L.<..s...c.G.
> 0x0010: 2675 c365 007b 007b 0038 438b 1903 04fa &u.e.{.{.8C.....
> 0x0020: 0000 2c56 0000 2a4c d04b 5804 cde1 096a ..,V..*L.KX....j
> 0x0030: adec bb7f 0000 0000 0000 0000 0000 0000 ................
> 0x0040: 0000 0000 cde1 1755 1545 4d11 .......U.EM.
>
>
> _______________________________________________
> timekeepers mailing list
> [email protected]
> https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
--
When Al sends me patches, I apply them.
I worry what would happen if I didn't.
-- Linus Torvalds
signature.asc
Description: This is a digitally signed message part.
_______________________________________________ timekeepers mailing list [email protected] https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers
