[CentOS-mirror] DDoS attack

Fri Oct 27 11:30:04 UTC 2023
Russell Jones <arjones85 at gmail.com>

> You said you blocked entire country to stop the attack, which country?

China

On Thu, Oct 26, 2023 at 10:56 PM Mohamed Abozeed via CentOS-mirror <
centos-mirror at centos.org> wrote:

> You said you blocked entire country to stop the attack, which country?
>
> On 27 Oct 2023, at 04:42, Russell Jones <arjones85 at gmail.com> wrote:
>
> 
> I've reported this issue here before as well. Just constant iso file
> downloads that never stop.
>
> I actually went a step further and blocked the entire country. Problem
> solved.
>
> On Thu, Oct 26, 2023 at 4:39 PM Mike Iglesias <iglesias at uci.edu> wrote:
>
>> We blocked 223.67.64.0/19 due to this.
>>
>>
>> Mike
>>
>>
>> On 10/25/23 04:24, Alex Iribarren wrote:
>> > Hi all,
>> >
>> > This morning we stopped a DDoS attack on our mirror coming from China.
>> The
>> > traffic was somewhat similar to what we've discussed in the past[1],
>> except this
>> > time they weren't range requests, they were downloading the full iso
>> files. The
>> > worst offenders were 223.67.0.0/16 and 182.255.33.0/24, in case you
>> want to
>> > check your mirrors for signs of abuse.
>> >
>> > Cheers,
>> > Alex
>> >
>> >
>> > [1]
>> >
>> https://urldefense.com/v3/__https://lists.centos.org/pipermail/centos-mirror/2022-April/077440.html__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0DNv-9F7g$
>> _______________________________________________
>> > CentOS-mirror mailing list
>> > CentOS-mirror at centos.org
>> >
>> https://urldefense.com/v3/__https://lists.centos.org/mailman/listinfo/centos-mirror__;!!CzAuKJ42GuquVTTmVmPViYEvSg!L288CSBWRD9hDM5LWPo5XURnBVuAOIkbujtEluv6YvdxfUuzeIVEGRHRP10_kVpB4nXcJ5EuErv3U0CovHP47A$
>> _______________________________________________
>> CentOS-mirror mailing list
>> CentOS-mirror at centos.org
>> https://lists.centos.org/mailman/listinfo/centos-mirror
>>
> _______________________________________________
> CentOS-mirror mailing list
> CentOS-mirror at centos.org
> https://lists.centos.org/mailman/listinfo/centos-mirror
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos-mirror/attachments/20231027/19fa6744/attachment.html>