[Pool] flood from 75.76.155.206

AlbyVA albyva at empire.org
Wed May 8 14:53:39 UTC 2013


 I would contact your provider's abuse/security group about a possible DDoS
attack from this address.
They should be able to filter the traffic before it eats up your bandwidth.

AS      | IP               | AS Name
12083   | 75.76.155.206    | WOW-INTERNET - WideOpenWest Finance LLC


-Alby




On Wed, May 8, 2013 at 10:03 AM, <ntppool at arpage.org> wrote:

> For the last six hours or so I have seen an obnoxious rate of requests
> (ranging from 60 to 300 per second) from the aforementioned IP.  Not sure
> if it's a badly implemented client or someone trying to use my server for
> some sort of reflective attack.  It has long since been blocked by my
> firewall but I've been running servers in the pool for a few years now and
> never had to deal with this before.
>
> Curious if anybody else has seen this?  Any suggestions for what to do
> about it other than block the traffic at my edge and wait for it to die
> down?
> ______________________________**_________________
> pool mailing list
> pool at lists.ntp.org
> http://lists.ntp.org/listinfo/**pool <http://lists.ntp.org/listinfo/pool>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ntp.org/pipermail/pool/attachments/20130508/b55e0c18/attachment.html>


More information about the pool mailing list