If I were you, I'd drop the whole class C like 192.168.0.0/24 Should drop the traffic no problem, They can't have to many addresses. Even if you drop a handfull of class C's On 1/21/2010 3:06 PM, Scott Adametz wrote: > > All, > > Due to an inordinate amount of Chinese based traffic from only a > handful of IP addresses (over 145 TB transferred to just *12* IP > addresses in only 15 days since we started hosting the mirror) we are > forced to cease our participation in the CentOS mirror project. > > In our research before deciding to offer our support we were told to > expect a sustained 3-5 Mbit/s of mirror traffic. In reality, and from > only a handful of IPs, we regularly push over 200Mbit/s on our > 300Mbit/s line. Each of the abusive IPs downloads the same DVD iso > files over and over thousands of times. We have tried blocking the > abusive IPs only to see another IP with a sequentially increased last > octet take its place. Whether this is an outright attack or just an > unfortunate coincidence matters not. > > Regretfully, I must ask that we be delisted from the mirror list > asap. Once our links are down, we will shut down the server. > > At some point in the future we may decide to participate again but for > now, we cannot justify the inordinate bandwidth use. > > *Scott Adametz* > > /Systems Engineer/ > > Big Ten Network > > 600 W Chicago Ave. > > Chicago, IL 60654 > > scott.adametz at bigtennetwork.com <mailto:scott.adametz at bigtennetwork.com> > > O:312.665.0787 C:708.214.4232 > > > _______________________________________________ > CentOS-mirror mailing list > CentOS-mirror at centos.org > http://lists.centos.org/mailman/listinfo/centos-mirror > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20100121/3ba66cb8/attachment-0006.html>