Re: [Sks-devel] Big amount of updated keys yesterday?

[John Marshall]

On Wed, 13 Apr 2011, 07:15 -0400, Jeff Johnson wrote:
> Sure its an interesting challenge to try and find a "smoking gun".

I guess that's it. The point of interest is where those 7,000 updates
came from all at once and why. Software bug? Corrupted database?  Big
key-signing party?

I've cobbled together any useful log information reported in this
thread, added my own, endeavoured to convert report timestamps to UTC,
and the earliest source thus far disclosed appears to be 68.55.125.169
[keyservers.org].

 UTC Time          Reported Source IP          Updates  Reporting Domain    
Report Timestamp
 --------          ------------------          -------  ----------------    
----------------
 2011-04-11 13:22  68.55.125.169                  7297  surfnet.nl          
2011-04-11 15:22:20 +0200
 2011-04-11 14:31  145.100.185.229                7298  gingerbear.net      
2011-04-11 09:31:44 -0500
 2011-04-11 15:32  76.185.39.178                  6544  riverwillow.net.au  
2011-04-12 01:32:25 +1000
 2011-04-11 16:50  83.169.43.165                  7249  mallos.nl           
2011-04-11 18:50:15 +0200
 2011-04-11 17:28  213.239.210.122                6777  kfwebs.net          
2011-04-11 19:28:14 +0200
 2011-04-11 17:45  85.126.233.231                 6854  mayfirst.org        
2011-04-11 13:45:43 -0400
 2011-04-11 17:53  2001:610:1:40cc::9164:b9e5     6760  niif.hu             
2011-04-11 19:53:31 +0200
 2011-04-11 18:03  2a01:4f8:110:1283::c401        6554  fryxell.ru          
2011-04-11 22:03:20 +0400

-- 
John Marshall

pgpchWMqy3cKo.pgp
Description: PGP signature