You said you blocked entire country to stop the attack, which country?

On 27 Oct 2023, at 04:42, Russell Jones <arjones85@gmail.com> wrote:



I've reported this issue here before as well. Just constant iso file downloads that never stop. 

I actually went a step further and blocked the entire country. Problem solved.

On Thu, Oct 26, 2023 at 4:39 PM Mike Iglesias <iglesias@uci.edu> wrote:

We blocked 223.67.64.0/19 due to this.


Mike


On 10/25/23 04:24, Alex Iribarren wrote:
> Hi all,
>
> This morning we stopped a DDoS attack on our mirror coming from China. The
> traffic was somewhat similar to what we've discussed in the past[1], except this
> time they weren't range requests, they were downloading the full iso files. The
> worst offenders were 223.67.0.0/16 and 182.255.33.0/24, in case you want to
> check your mirrors for signs of abuse.
>
> Cheers,
> Alex
>
>
> [1]
> https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$ _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror@centos.org
> https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$
_______________________________________________
CentOS-mirror mailing list
CentOS-mirror@centos.org
https://lists.centos.org/mailman/listinfo/centos-mirror

_______________________________________________
CentOS-mirror mailing list
CentOS-mirror@centos.org
https://lists.centos.org/mailman/listinfo/centos-mirror