Chuck wrote:
> still would like advice if this is or is not abuse and its severity.
> i blocked them because in 10 min the count went from 925k to 936k.
An ntpd in default configuration does one request/minute or less
ntpdate does a single burst of a few requests
I start complaining when I see more than 4 requests per minute from a
single IP for 5 minutes or longer.
In most of the cases writing a polite letter to "abuse"@"provider" helps
to get usage down. "Dear abusedesk, One of your customers..."
Good things to mention:
IP-address, date, time + timezone, number of requests
pool.ntp.org is volunteer run
this use is excessive
bring it down to less than one request per minute
I attach some (filtered!) tcpdump output showing the issue.
Peter.
_______________________________________________
timekeepers mailing list
[email protected]
https://fortytwo.ch/mailman/cgi-bin/listinfo/timekeepers