[CentOS-mirror] DDoS attack

Fri Oct 27 03:42:23 UTC 2023
Russell Jones <arjones85 at gmail.com>

I've reported this issue here before as well. Just constant iso file
downloads that never stop.

I actually went a step further and blocked the entire country. Problem
solved.

On Thu, Oct 26, 2023 at 4:39 PM Mike Iglesias <iglesias at uci.edu> wrote:

> We blocked 223.67.64.0/19 due to this.
>
>
> Mike
>
>
> On 10/25/23 04:24, Alex Iribarren wrote:
> > Hi all,
> >
> > This morning we stopped a DDoS attack on our mirror coming from China.
> The
> > traffic was somewhat similar to what we've discussed in the past[1],
> except this
> > time they weren't range requests, they were downloading the full iso
> files. The
> > worst offenders were 223.67.0.0/16 and 182.255.33.0/24, in case you
> want to
> > check your mirrors for signs of abuse.
> >
> > Cheers,
> > Alex
> >
> >
> > [1]
> >
> https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$
> _______________________________________________
> > CentOS-mirror mailing list
> > CentOS-mirror at centos.org
> >
> https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$
> _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror at centos.org
> https://lists.centos.org/mailman/listinfo/centos-mirror
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20231026/099ec912/attachment.html>