• Do you receive a lot of port scan attempts on your mirror machine?
• Does the CentOS Mirror Monitor (http://mirror-status.centos.org/) use any known IPs? What is the method of monitoring?
• Are there any other monitors which are seen frequently by others?