[CentOS-mirror] DDoS attack

Wed Oct 25 12:14:55 UTC 2023
Dominik Nowacki <dominik at clouvider.co.uk>

And same here. 
One of our mirror servers was impacted.

Kind Regards,
D

Sent from my iPhone

> On 25 Oct 2023, at 12:40, ariel sabiguero yawelak <asabigue at fder.edu.uy> wrote:
> 
> We had to implement equivalent filtering rules during the weekend from network 223.67.0.0/16... and after your experience, we will start blocking 182.255.33.0/24 too.
> 
> regards
> 
> 
> ariel
> 
>> On 25/10/23 8:24, Alex Iribarren wrote:
>> Hi all,
>> 
>> This morning we stopped a DDoS attack on our mirror coming from China. The traffic was somewhat similar to what we've discussed in the past[1], except this time they weren't range requests, they were downloading the full iso files. The worst offenders were 223.67.0.0/16 and 182.255.33.0/24, in case you want to check your mirrors for signs of abuse.
>> 
>> Cheers,
>> Alex
>> 
>> 
>> [1] https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html
>> _______________________________________________
>> CentOS-mirror mailing list
>> CentOS-mirror at centos.org
>> https://lists.centos.org/mailman/listinfo/centos-mirror
> _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror at centos.org
> https://lists.centos.org/mailman/listinfo/centos-mirror