Re: [gopher] if anyone on this list is 76.72.161.76, knock it off

[Kim Holviala <kim@holviala.com>]

On 05 Nov 2015, at 21:05, Cameron Kaiser <spectre@floodgap.com> wrote:

76.72.161.76 is being blacklisted due to some incredible system load. If
that's you, you'd better apologize and tell me how you're going to fix it.

I’m sure you’ve snooped around already, but that’s on Level3 network in Philly. The customer seems to be "Enciva LLC” - they have  76.72.161.72/29 range which that IP belongs to. Seems to be some Oracle hosting company….

http://whois.arin.net/rest/nets;q=76.72.161.76?showDetails=true&showARIN=false&showNonArinTopLevelNet=false&ext=netref2

https://www.enciva.com/

If I was you I’d shoot an email to all upstreams, one by one, to abuse@<domain>, and complain about a DDoS from that IP. That magical word usually gets people to do nice things...

- Kim

_______________________________________________
Gopher-Project mailing list
Gopher-Project@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/gopher-project