[gopher] if anyone on this list is 76.72.161.76, knock it off

[Kim Holviala]

> On 05 Nov 2015, at 21:05, Cameron Kaiser <spectre at floodgap.com> wrote:
> 
> 76.72.161.76 is being blacklisted due to some incredible system load. If
> that's you, you'd better apologize and tell me how you're going to fix it.


I’m sure you’ve snooped around already, but that’s on Level3 network in Philly. The customer seems to be "Enciva LLC” - they have  76.72.161.72/29 range which that IP belongs to. Seems to be some Oracle hosting company….

http://whois.arin.net/rest/nets;q=76.72.161.76?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2 <http://whois.arin.net/rest/nets;q=76.72.161.76?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2>
https://www.enciva.com/ <https://www.enciva.com/>

If I was you I’d shoot an email to all upstreams, one by one, to abuse@<domain>, and complain about a DDoS from that IP. That magical word usually gets people to do nice things...



- Kim



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/gopher-project/attachments/20151105/dec3eabb/attachment.html>