We had to implement equivalent filtering rules during the weekend from network 223.67.0.0/16... and after your experience, we will start blocking 182.255.33.0/24 too. regards ariel On 25/10/23 8:24, Alex Iribarren wrote: > Hi all, > > This morning we stopped a DDoS attack on our mirror coming from China. > The traffic was somewhat similar to what we've discussed in the > past[1], except this time they weren't range requests, they were > downloading the full iso files. The worst offenders were 223.67.0.0/16 > and 182.255.33.0/24, in case you want to check your mirrors for signs > of abuse. > > Cheers, > Alex > > > [1] > https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html > _______________________________________________ > CentOS-mirror mailing list > CentOS-mirror at centos.org > https://lists.centos.org/mailman/listinfo/centos-mirror