From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from emea01-am1-obe.outbound.protection.outlook.com (mail-am1on0100.outbound.protection.outlook.com [157.56.112.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id 14C763B2A0 for ; Sat, 18 Jun 2016 04:43:34 -0400 (EDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=darbyshire-bryant.me.uk; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=g0X+bwG/t6apPWevSkehZaQYINEQ6Kc+bpByc89QP5o=; b=qs9jvehgD38MK5Qg0Y9MpDZ3TsLvnkTjVywgKwjSkPp7KJ77CVYeglFJ+JROvOrJk7asKS2Yz7JvsZ9iuyKtKsb9ZFsNBes5ST4T6Ye2foJxVnAJkDxZCEbFYeibhYz1ezYLgNLZyK9v9JHz34UDyW9YgL3kVNF50IBUcpLH3bI= Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=kevin@darbyshire-bryant.me.uk; Received: from [IPv6:2001:470:183f:da2b::4007:25d] (2001:470:183f:da2b::4007:25d) by AM2PR07MB0932.eurprd07.prod.outlook.com (10.162.37.14) with Microsoft SMTP Server (TLS) id 15.1.523.12; Sat, 18 Jun 2016 08:43:33 +0000 To: References: <0E1152D2-F8C2-490E-B9A4-81B74DA539DC@gmail.com> From: Kevin Darbyshire-Bryant Message-ID: <576509B1.4060509@darbyshire-bryant.me.uk> Date: Sat, 18 Jun 2016 09:43:29 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: <0E1152D2-F8C2-490E-B9A4-81B74DA539DC@gmail.com> Content-Type: text/plain; charset="utf-8"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [2001:470:183f:da2b::4007:25d] X-ClientProxiedBy: HE1PR0701CA0023.eurprd07.prod.outlook.com (10.165.214.161) To AM2PR07MB0932.eurprd07.prod.outlook.com (10.162.37.14) X-MS-Office365-Filtering-Correlation-Id: 194cf690-5dbf-4db4-8110-08d39754a1db X-Microsoft-Exchange-Diagnostics: 1; AM2PR07MB0932; 2:jDMVANfN9TtURYbPgNAc5IGOSJ8YiKCcCuGXq7YhbzUvk3jUOjySd0Swgw4WjvlODBPxKfVnWwoyXGOsmjxAGG44LU02xzV88gXeE0El3ST+nIKCkRgqtaInm2S4Ravn0XSPDmhaTMzGM70fLDABzE321VerMPw4qpi7wwPsDjGvpOHDJn0H9gvofuYj54jl; 3:Zs5b/+3wfs5M/K0NAHbMT3yK3MseASsV3Eg2RFfCXoQrxfOMH4oHr4JsN79x6AGlLA0A6aaNIj9gbLo2D/RTtcHkau44ifH7BxwZsizS7W1RqL8WWC2/i6eEy6QH+JvM; 25:5H4w3pKBluzyXxCTa8x7JIaJVroQJ9ZsmseUovXDwuYS2KvJPmDoYkE1Jg6JKbAqW+r2FqisRi8SLYlOPa3MKO9D3SfSEet+VdX9GQL+x5qyYkAWqWTQ3aMkIwK9ZqNFwyD/jh/hh8NHftntZw/Gjxh/70zhgh7V8m/gKHkIfDDEoNTcbm5mVPK3NHF89Sfk0fk/ZzqsmgRDOLlofXGo/sYxsr1wFqoJboBLXbRuFiG8BDTjX2lIeRiDMLPFfS5BX4SpP4CPKFF67LNgmLKLsLADVwQ2JNt31UZSlFitqyCGtHNs1xF136/c5Npkh1+xPLdeQ5mCD1khSnm6EGJ8SdN/qid8pc5LS5KLTpefDSZCJDgLyOORMyTUqh8b5mNCUxKQNlJHBuPKy+tG2tUEq5h+IxurTDvsDTZd6CXtNOE= X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM2PR07MB0932; X-Microsoft-Antispam-PRVS: X-Exchange-Antispam-Report-Test: UriScan:; X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040130)(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6041072)(6043046); SRVR:AM2PR07MB0932; BCL:0; PCL:0; RULEID:; SRVR:AM2PR07MB0932; X-Microsoft-Exchange-Diagnostics: 1; AM2PR07MB0932; 4:vR3qgMOY0B0TusF82wjv5rcNk+BUXJ4MgYwHqJadMExJj3/NiwJeZba+0wIzPJAvFiKGYm3yPUTAQwfHunBTKascDLTeXQKDH21SbwStKpVW+ahQsG1jJEWpmjEhLbLZtoj8doIKobGO/PIR1kdk3o79ob4O+NmtC6sQB8wZdCVXEuz5QX3RWBXhkDyL+G5qhtCRgNwChBH7K6s/Ka/ikXigSWZ9yrVnXa6iWpIClFsm5UmRb3eUQd8bvPcRCrmRX1zR+AmhpRRuJ4mYmsRYyK53aneOi2GIsNEvLtFY/LbzknRx/jwnfeRrUNFJCTiTCH1j9ScCdLkpoMFQNK5NjyW0Y4NVsLQVLv8Hk2l2XymDTu3G6gh6ZqUjwNV4MwlnFNzVbQaFJPm4VibD4QAqz770s3sWG5OVXTexoI/dxwQ= X-Forefront-PRVS: 09778E995A X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10009020)(4630300001)(6009001)(7916002)(66654002)(199003)(189002)(24454002)(80316001)(64126003)(50466002)(2351001)(87266999)(54356999)(65816999)(76176999)(42186005)(50986999)(5004730100002)(83506001)(65956001)(106356001)(19580395003)(92566002)(101416001)(105586002)(7846002)(33656002)(86362001)(65806001)(47776003)(23676002)(74482002)(97736004)(2906002)(2950100001)(36756003)(4001350100001)(59896002)(99136001)(81156014)(586003)(77096005)(450100001)(81166006)(2870700001)(1706002)(8676002)(189998001)(6116002)(68736007)(107886002)(110136002)(3826002); DIR:OUT; SFP:1101; SCL:1; SRVR:AM2PR07MB0932; H:[IPv6:2001:470:183f:da2b::4007:25d]; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; Received-SPF: None (protection.outlook.com: darbyshire-bryant.me.uk does not designate permitted sender hosts) X-Microsoft-Exchange-Diagnostics: =?utf-8?B?MTtBTTJQUjA3TUIwOTMyOzIzOmU3eVRuK0xUbkppeHJIUmJwQjcxME5Cczkx?= =?utf-8?B?dW9KdDdSQ3lQOW1zMDM1ZUpadmpPcVk4ZXFtSE9uTmpEeXMyRnF2b1NOV2lT?= =?utf-8?B?QjRVUEFEWUNXR1FFQkVYelBucElsdUlycnhESkNYUTljeUVVdllXSENwOVlr?= =?utf-8?B?RGlwTzhtclNMM3RsUUpIdkp5ZXoyam56STFIbC8wT1BmQnNxTndkMndyVHNO?= =?utf-8?B?NnpMRHRlQW1qTjFmSkRKeGd1QW9xc0YwOVBFSjFPek43TTEzc2traFJkR1R0?= =?utf-8?B?UHdDZlhUVEN0M2YzZXBYYmNxSmczcmsxcUpOcUNXODg2TkZQaFV0TlBVUHpH?= =?utf-8?B?aDAzNEw0dHZZUFdlS2hIRnNidmNpa09ueEJWNGdxMWxTMjVzTzh1d2YwRndu?= =?utf-8?B?c1U1QmxHMld5NGorT1p5R0RaRmI1K0VDQzVtd1lhYmVJOG9xaFpRUlVneHFB?= =?utf-8?B?a2ZUbU03KzdUN0REeVdKYnJHNGFxdTNWSUZNRGN1aGpFb1c4aWRoVWhtR0xv?= =?utf-8?B?Slp4aTJCSXIrTE4rRm9GVjArc3pIakZzYjJTOFlNYjlZczlRM3UyNlJOWjJ4?= =?utf-8?B?YkVBVEsrK3VDZGNWSkdDT2hlMFRVQ2FoVHFMZW80SWpKSUVBYy9BQTNOMm1p?= =?utf-8?B?eEMvT2NCUTl5YVphWDRiZTJwTkxvNEFxUVVGanNDTTF1dzltSE42YVpBWTFU?= =?utf-8?B?RFo5MGV6c2N4UkFoTG5KeS8rR01aRXFnQzI2MjZDSkh0OXR3VEdSaXRpVHBz?= =?utf-8?B?QTkzNGVlN0lIclI5cjJJbHdLRzBkb05tZ2FUQmNXMTJJRXdYbEJsSjVsYTJZ?= =?utf-8?B?YXdMUU9sWE5KUExwaU1WMW4zOGVpcDNQbEZTN25yTVRXbGQ5bTJZMERxYVMr?= =?utf-8?B?eHczdDBLN2pFWXhOR3UxYjhSb3pWbTJ5WFA2bmdaWHVLOHQwdUdJVUYzQjZM?= =?utf-8?B?SEtQUkRFN05qamRuWFFacW03NzdFbFBRMUh6dzN0SVNydGw2cngrYk1zT3NT?= =?utf-8?B?M1g4RWVTU3NCWDFST1BsOUdhaVJXWkEyb3dKT3RjdHg0L0tCa2R2R2ZsdFB5?= =?utf-8?B?ckw4RG5GVVdBVDRQMzBVUndwNlhnbGNBQkI2K0UvS2d0SnkzMUt0elVGTXhT?= =?utf-8?B?NVg0eTd6TDJycGthU3lBbkhuK1RXSDRqaU54QjU1R1BETTJFZ2ovYlo5YkFH?= =?utf-8?B?V0hJb2x0S3N0RlFFYzdTYVh1YnJMdWdVYjBnWlBxY0I3M0RtYVdZa2FuRktT?= =?utf-8?B?SHFWTG5sQjNDYmk4RjU1bDJrZzFoMTQrWVkvaXNQcFpUaXVMNVRDbGRacFlF?= =?utf-8?B?MWw0Q1V1QmREWVZvZXJzNjFuVzZTK3BCbTBDNDZQSlhCNURYN2NiVlhWSmI4?= =?utf-8?B?STlFRlVJUkNMMHFhSHQxbExkS3Q3Z3JpME55RWpYZmJ4SFVZUEcyUnMvcFEw?= =?utf-8?B?UGZMT3M3TEhJRGNDdzRPZXV4T1czSE9RTWorcVFIeW1yVk9hcUk0YnE1Q0Mx?= =?utf-8?B?OWFnOUZCRGZrZ1ozOVpUYnNxbUlrN0JLY2xkVUtVNm9KTXo5VXNiYmpzalFs?= =?utf-8?B?S1Q4bE5ESUxidnVzeDcxUWFIbitJaHVaZXdxNnF3RVdWbUFmd1ZIWUdXUHdy?= =?utf-8?B?SzV2UllTQzIvUGFXbk54RExYdHV3b29ocFJWc2YrWUo4U3R5QXhvZFE2WHkz?= =?utf-8?B?Y3k4bThIYnlQejJXMllmcjVibHlvRFVMdzJLcXZTdThBWTQydm9XcGVzbms3?= =?utf-8?Q?4+aPjxjsXT+G4O8yNVxIo0W8vn+JxTmzhSw9Q=3D?= X-Microsoft-Exchange-Diagnostics: 1; AM2PR07MB0932; 6:VXdBQO9OoTohj+NshUqipOw7urry06GOj/e5nUfqugvJIUt4mU/aS3Nr+5gpe8u2AVF/SbZWmLkO2g1IU2Q+ciHLsIPSrLKYAeXxoiC0qGF7AYp+iBZaNm3rx2qeNRf7+bNV8HLLM6zhYtkOlRPQf30Ip8MECDpw5D0hkIrja68IlRY0A/mUGF8QTX7JmePRWJkxb8v2egXxyiinZt6H9sI8X/af3QvHWCQaVX/pdlfJN8BPbNG9JWh90P/W/2aiPkQwuFk4Oz6DUJj1SK/ovb8dyOxBMm98wep22LQH8rQgVl2Eyp7/Sl+QIIX6WCUu; 5:q69AVPZVNaDRRku9x+VBn2jL5RguJLayS4fMsrM0nehoK1Z5776C5XF3TJcvpCL+v0CSQ1kdG47QgIIPfbzZ+DhTolzdBMZJJMOh+C2R829/BwoWZ/5hK4agPvQB/6GkLAR7m2tvp6kEbHaD1Zql/w==; 24:aq/17cfAf1rhGE05LwWMaUhETBZwG/ssyQ/Xlq+WV0XEIdQhNwvt0o+DehVRBx3rw0ouSGTHA6a48cbJQFJU2i80ePm7ZyyFqJcKlzpOz3Y=; 7:4udSNI/egmS5fOFhXCsVtbc0rCwbKSv/BByV/KgqZns/drnY75cAJ3OT8E2q2pThL5BhX6IMXMGhOOrFGUMmOIgVDUJhhKbM3WOacXkuueiFe19Es2c6GymTguEioeu+pUwRYWHwJTVa87gB3QCTF/3mxINmqXrIonC/AeTYEfVGnSoxOPSEVPKhDY5N1+y2NQpjMBFYatS54s9wVjoxKRFRZAhkNmk5guyOcvt/YdRHDwc1u6iZlG4O80OL1t3N SpamDiagnosticOutput: 1:99 SpamDiagnosticMetadata: NSPM X-OriginatorOrg: darbyshire-bryant.me.uk X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Jun 2016 08:43:33.5574 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM2PR07MB0932 Subject: Re: [Bloat] statistics for netperf.bufferbloat.net X-BeenThere: bloat@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: General list for discussing Bufferbloat List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 08:43:35 -0000 On 18/06/16 04:06, Rich Brown wrote: > Folks, > > I host netperf.bufferbloat.net on a VPS (using Ramnode.com - highly reliable) I regularly get close to, or run over my monthly data transfer limit for my VPS. (When this happens, they suspend my VPS until the end of the month. I have already added an additional $4/month for additional data, but now I'm running into a 5 TB limit.) > > > My questions to this august group: > > - Are any of you in Portugal? If so, are you really testing this frequently? > - If not, is there any reason not to add an iptables rule for the addresses below to drop those incoming connections from those addresses? > - Any other thoughts for slowing down this "abusive" behavior? > > Many thanks, > > Rich > > 11-Feb-16 17-Jun-16 5-Jun 13-Jun > 127 days > 109433 176.78.183.238 x 57693 193.126.23.244 > 107384 109.49.94.196 x 50131 109.49.94.196 > 105936 193.126.23.244 x 47033 68.238.49.248 > 91787 68.238.49.248 x 42329 176.78.183.238 > 56184 193.126.22.52 x 42064 88.210.82.86 > 54395 88.210.82.86 x 35877 93.102.137.61 > 35877 93.102.137.61 x 34672 193.126.22.52 > 32919 89.154.251.179 x 21213 89.181.102.43 > 32400 93.102.205.115 16226 93.102.236.246 > 27917 78.99.248.25 x 15008 89.154.251.179 > 654232 top 10 14667 78.99.248.25 > 1098020 All… It ain't me. And I'd have blocked those addresses just before writing the email....see who screams :-) I hope this isn't some DDoS scheme someone has cooked up using netperf servers. Kevin