Hello,

same thing on my end. Decided to geoblock the entire country as well.

-------   Regards,   Sebastian Bobriuc

On 4/28/22 15:00, centos-mirror-request@centos.org wrote:

Send CentOS-mirror mailing list submissions to centos-mirror@centos.org

To subscribe or unsubscribe via the World Wide Web, visit https://lists.centos.org/mailman/listinfo/centos-mirror or, via email, send a message with subject or body 'help' to centos-mirror-request@centos.org

You can reach the person managing the list at centos-mirror-owner@centos.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of CentOS-mirror digest..."

Today's Topics:

1. Chinese addresses requesting excessive iso's? (Russell Jones)
2. Re: Chinese addresses requesting excessive iso's?
   (Stephen Smoogen)
3. Re: Chinese addresses requesting excessive iso's? (Paul Mezzanini)
4. Re: Chinese addresses requesting excessive iso's?
   (Alexandre Leonenko)
5. Re: Chinese addresses requesting excessive iso's? (Quantum Mirror)
6. Re: Chinese addresses requesting excessive iso's?
   (Stephen Smoogen)
7. Re: Chinese addresses requesting excessive iso's?
   (John 'Warthog9' Hawley)
8. Re: Chinese addresses requesting excessive iso's? (Russell Jones)
9. Re: Chinese addresses requesting excessive iso's? (Alex Iribarren)

---

Message: 1 Date: Wed, 27 Apr 2022 13:15:50 -0500 From: Russell Jones arjones85@gmail.com To: "Mailing list for CentOS mirrors." CentOS-mirror@centos.org Subject: [CentOS-mirror] Chinese addresses requesting excessive iso's? Message-ID: CABb1d=hJa9WrssV4de_HP=g_+kY5qcpJUF7qWCxx3EpNQu7Jzw@mail.gmail.com Content-Type: text/plain; charset="utf-8"

So, for whatever reason my mirror seems to be getting targeted by China:

[root@repos ~]# tail -f access.log | grep 403 112.22.135.89 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.206.56.187 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.157.33 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.42.112 - - [27/Apr/2022:13:10:52 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.85 - - [27/Apr/2022:13:10:53 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.40.234 - - [27/Apr/2022:13:10:53 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 140.224.157.57 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.6.85 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.108 - - [27/Apr/2022:13:10:54 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 218.67.20.149 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 120.43.124.48 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.152.194 - - [27/Apr/2022:13:10:55 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 120.43.125.124 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.42.113 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.251 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.156.51 - - [27/Apr/2022:13:10:56 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.54 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.251 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 121.206.58.145 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.141.44 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.140.191 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 183.250.141.209 - - [27/Apr/2022:13:10:57 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.109.212.65 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.109.212.13 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 223.107.43.135 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/7.9.2009/isos/x86_64/CentOS-7-x86_64-Everything-2009.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 117.80.215.77 - - [27/Apr/2022:13:10:58 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 117.80.215.137 - - [27/Apr/2022:13:10:59 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 112.22.152.61 - - [27/Apr/2022:13:11:01 -0500] "GET /centos/8.5.2111/isos/aarch64/CentOS-8.5.2111-aarch64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0" 27.158.193.43 - - [27/Apr/2022:13:11:01 -0500] "GET /centos/8.5.2111/isos/x86_64/CentOS-8.5.2111-x86_64-dvd1.iso HTTP/1.1" 403 153 "-" "curl/7.29.0"

I geoblocked the country about a week ago, but the requests haven't stopped. It was at the level that it was maxing out my 1gbit/sec link until I did something.

Anyone else seeing anything similar?