Hello,
same thing on my end. Decided to geoblock the entire country as well.
------- Regards, Sebastian Bobriuc
On 4/28/22 15:00, centos-mirror-request@centos.org wrote:
Send CentOS-mirror mailing list submissions to centos-mirror@centos.org
To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-mirror or, via email, send a message with subject or body 'help' to centos-mirror-request@centos.org
You can reach the person managing the list at centos-mirror-owner@centos.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-mirror digest..."
Today's Topics:
1. Chinese addresses requesting excessive iso's? (Russell Jones) 2. Re: Chinese addresses requesting excessive iso's? (Stephen Smoogen) 3. Re: Chinese addresses requesting excessive iso's? (Paul Mezzanini) 4. Re: Chinese addresses requesting excessive iso's? (Alexandre Leonenko) 5. Re: Chinese addresses requesting excessive iso's? (Quantum Mirror) 6. Re: Chinese addresses requesting excessive iso's? (Stephen Smoogen) 7. Re: Chinese addresses requesting excessive iso's? (John 'Warthog9' Hawley) 8. Re: Chinese addresses requesting excessive iso's? (Russell Jones) 9. Re: Chinese addresses requesting excessive iso's? (Alex Iribarren)
Message: 1 Date: Wed, 27 Apr 2022 13:15:50 -0500 From: Russell Jones arjones85@gmail.com To: "Mailing list for CentOS mirrors." CentOS-mirror@centos.org Subject: [CentOS-mirror] Chinese addresses requesting excessive iso's? Message-ID: CABb1d=hJa9WrssV4de_HP=g_+kY5qcpJUF7qWCxx3EpNQu7Jzw@mail.gmail.com Content-Type: text/plain; charset="utf-8"
So, for whatever reason my mirror seems to be getting targeted by China:
[root@repos ~]# tail -f access.log | grep 403 112.22.135.89 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.206.56.187 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.157.33 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.42.112 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.85 - - [27/Apr/2022:13:10:53 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.40.234 - - [27/Apr/2022:13:10:53 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 140.224.157.57 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.6.85 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.108 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 218.67.20.149 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 120.43.124.48 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.152.194 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 120.43.125.124 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.42.113 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.251 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.51 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.54 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.251 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 121.206.58.145 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.141.44 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.191 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.141.209 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.109.212.65 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.109.212.13 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.43.135 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 117.80.215.77 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 117.80.215.137 - - [27/Apr/2022:13:10:59 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.152.61 - - [27/Apr/2022:13:11:01 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 27.158.193.43 - - [27/Apr/2022:13:11:01 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0"
I geoblocked the country about a week ago, but the requests haven't stopped. It was at the level that it was maxing out my 1gbit/sec link until I did something.
Anyone else seeing anything similar?