[Pool] flood from 126.96.36.199
albyva at empire.org
Wed May 8 14:53:39 UTC 2013
I would contact your provider's abuse/security group about a possible DDoS
attack from this address.
They should be able to filter the traffic before it eats up your bandwidth.
AS | IP | AS Name
12083 | 188.8.131.52 | WOW-INTERNET - WideOpenWest Finance LLC
On Wed, May 8, 2013 at 10:03 AM, <ntppool at arpage.org> wrote:
> For the last six hours or so I have seen an obnoxious rate of requests
> (ranging from 60 to 300 per second) from the aforementioned IP. Not sure
> if it's a badly implemented client or someone trying to use my server for
> some sort of reflective attack. It has long since been blocked by my
> firewall but I've been running servers in the pool for a few years now and
> never had to deal with this before.
> Curious if anybody else has seen this? Any suggestions for what to do
> about it other than block the traffic at my edge and wait for it to die
> pool mailing list
> pool at lists.ntp.org
> http://lists.ntp.org/listinfo/**pool <http://lists.ntp.org/listinfo/pool>
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the pool