On Wed, 13 Apr 2011, 07:15 -0400, Jeff Johnson wrote: > Sure its an interesting challenge to try and find a "smoking gun".
I guess that's it. The point of interest is where those 7,000 updates came from all at once and why. Software bug? Corrupted database? Big key-signing party? I've cobbled together any useful log information reported in this thread, added my own, endeavoured to convert report timestamps to UTC, and the earliest source thus far disclosed appears to be 68.55.125.169 [keyservers.org]. UTC Time Reported Source IP Updates Reporting Domain Report Timestamp -------- ------------------ ------- ---------------- ---------------- 2011-04-11 13:22 68.55.125.169 7297 surfnet.nl 2011-04-11 15:22:20 +0200 2011-04-11 14:31 145.100.185.229 7298 gingerbear.net 2011-04-11 09:31:44 -0500 2011-04-11 15:32 76.185.39.178 6544 riverwillow.net.au 2011-04-12 01:32:25 +1000 2011-04-11 16:50 83.169.43.165 7249 mallos.nl 2011-04-11 18:50:15 +0200 2011-04-11 17:28 213.239.210.122 6777 kfwebs.net 2011-04-11 19:28:14 +0200 2011-04-11 17:45 85.126.233.231 6854 mayfirst.org 2011-04-11 13:45:43 -0400 2011-04-11 17:53 2001:610:1:40cc::9164:b9e5 6760 niif.hu 2011-04-11 19:53:31 +0200 2011-04-11 18:03 2a01:4f8:110:1283::c401 6554 fryxell.ru 2011-04-11 22:03:20 +0400 -- John Marshall
pgpQeIbmmPs6Q.pgp
Description: PGP signature
_______________________________________________ Sks-devel mailing list Sks-devel@nongnu.org http://lists.nongnu.org/mailman/listinfo/sks-devel
