We blocked 223.67.64.0/19 due to this. Mike On 10/25/23 04:24, Alex Iribarren wrote: > Hi all, > > This morning we stopped a DDoS attack on our mirror coming from China. The > traffic was somewhat similar to what we've discussed in the past[1], except this > time they weren't range requests, they were downloading the full iso files. The > worst offenders were 223.67.0.0/16 and 182.255.33.0/24, in case you want to > check your mirrors for signs of abuse. > > Cheers, > Alex > > > [1] > https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$ _______________________________________________ > CentOS-mirror mailing list > CentOS-mirror at centos.org > https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$