Any else seeing an attack by Inktomi originating from Exodus address space? I have had an average of 5 queries per second for over a day to one specific web site. I have them blocked at the router but they keep trying. Email to Inktomi doesn't seem to help. Roy Engehausen
On Tue, Dec 04, 2001 at 11:17:04PM -0800, Roy wrote:
Any else seeing an attack by Inktomi originating from Exodus address space? I have had an average of 5 queries per second for over a day to one specific web site. I have them blocked at the router but they keep trying. Email to Inktomi doesn't seem to help.
Roy Engehausen
Do the IPs resolve to like jxxx.inktomi.com or simular ? -- Regards, Ulf. --------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
On Tue, 4 Dec 2001, Ulf Zimmermann wrote:
Do the IPs resolve to like jxxx.inktomi.com or simular ?
Let me guess. j4006 and j4008. just drop inktomi packets on the floor at the borders. it will take you *MONTHS* to get any response from inktomi. -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]
On Tue, Dec 04, 2001 at 11:36:47PM -0800, Dan Hollis wrote:
On Tue, 4 Dec 2001, Ulf Zimmermann wrote:
Do the IPs resolve to like jxxx.inktomi.com or simular ?
Let me guess. j4006 and j4008.
just drop inktomi packets on the floor at the borders. it will take you *MONTHS* to get any response from inktomi.
the jxxx machine are the crawlers, but there are also some QA lab machines who have often done bad bad things ... just wondering what ran amok this time :-)
-Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]
-- Regards, Ulf. --------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
The addresses used doesn't seem to resolve at all. They are in the 64.75.36.0/24 range Ulf Zimmermann wrote:
On Tue, Dec 04, 2001 at 11:17:04PM -0800, Roy wrote:
Any else seeing an attack by Inktomi originating from Exodus address space? I have had an average of 5 queries per second for over a day to one specific web site. I have them blocked at the router but they keep trying. Email to Inktomi doesn't seem to help.
Roy Engehausen
Do the IPs resolve to like jxxx.inktomi.com or simular ?
-- Regards, Ulf.
--------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
Hi Roy, The machines in the subnet you listed are also crawlers. Please send an email to slurp@inktomi.com (this is our contact for "your crawler is abusing my site"). You'll get an auto-reply (sorry) with some good info and a contact email if you need more help. Let me know if you don't get your problem solved. -Adam -----Original Message----- From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Roy Sent: Wednesday, December 05, 2001 7:14 AM To: ulf@Alameda.net Cc: nanog@merit.edu Subject: Re: Attacked by Inktomi/Exodus The addresses used doesn't seem to resolve at all. They are in the 64.75.36.0/24 range Ulf Zimmermann wrote:
On Tue, Dec 04, 2001 at 11:17:04PM -0800, Roy wrote:
Any else seeing an attack by Inktomi originating from Exodus address space? I have had an average of 5 queries per second for over a day to one specific web site. I have them blocked at the router but they keep trying. Email to Inktomi doesn't seem to help.
Roy Engehausen
Do the IPs resolve to like jxxx.inktomi.com or simular ?
-- Regards, Ulf.
--------------------------------------------------------------------- Ulf Zimmermann, 1525 Pacific Ave., Alameda, CA-94501, #: 510-865-0204
participants (4)
-
Adam Bechtel -
Dan Hollis -
Roy -
Ulf Zimmermann