<div dir="ltr">> You said you blocked entire country to stop the attack, which country?<div><br></div><div>China</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Oct 26, 2023 at 10:56 PM Mohamed Abozeed via CentOS-mirror <<a href="mailto:centos-mirror@centos.org">centos-mirror@centos.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="auto"><div dir="ltr"></div><div dir="ltr">You said you blocked entire country to stop the attack, which country?</div><div dir="ltr"><br><blockquote type="cite">On 27 Oct 2023, at 04:42, Russell Jones <<a href="mailto:arjones85@gmail.com" target="_blank">arjones85@gmail.com</a>> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr">I've reported this issue here before as well. Just constant iso file downloads that never stop. <br><br>I actually went a step further and blocked the entire country. Problem solved.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Oct 26, 2023 at 4:39 PM Mike Iglesias <<a href="mailto:iglesias@uci.edu" target="_blank">iglesias@uci.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">We blocked <a href="http://223.67.64.0/19" rel="noreferrer" target="_blank">223.67.64.0/19</a> due to this.<br>
<br>
<br>
Mike<br>
<br>
<br>
On 10/25/23 04:24, Alex Iribarren wrote:<br>
> Hi all,<br>
> <br>
> This morning we stopped a DDoS attack on our mirror coming from China. The <br>
> traffic was somewhat similar to what we've discussed in the past[1], except this <br>
> time they weren't range requests, they were downloading the full iso files. The <br>
> worst offenders were <a href="http://223.67.0.0/16" rel="noreferrer" target="_blank">223.67.0.0/16</a> and <a href="http://182.255.33.0/24" rel="noreferrer" target="_blank">182.255.33.0/24</a>, in case you want to <br>
> check your mirrors for signs of abuse.<br>
> <br>
> Cheers,<br>
> Alex<br>
> <br>
> <br>
> [1] <br>
> <a href="https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$" rel="noreferrer" target="_blank">https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$</a> _______________________________________________<br>
> CentOS-mirror mailing list<br>
> <a href="mailto:CentOS-mirror@centos.org" target="_blank">CentOS-mirror@centos.org</a><br>
> <a href="https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$" rel="noreferrer" target="_blank">https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$</a><br>
_______________________________________________<br>
CentOS-mirror mailing list<br>
<a href="mailto:CentOS-mirror@centos.org" target="_blank">CentOS-mirror@centos.org</a><br>
<a href="https://lists.centos.org/mailman/listinfo/centos-mirror" rel="noreferrer" target="_blank">https://lists.centos.org/mailman/listinfo/centos-mirror</a><br>
</blockquote></div>
</div></blockquote></div>_______________________________________________<br>
CentOS-mirror mailing list<br>
<a href="mailto:CentOS-mirror@centos.org" target="_blank">CentOS-mirror@centos.org</a><br>
<a href="https://lists.centos.org/mailman/listinfo/centos-mirror" rel="noreferrer" target="_blank">https://lists.centos.org/mailman/listinfo/centos-mirror</a><br>
</blockquote></div>