[mirror-admin] fedora live images dos attack?

[Paul Mezzanini]

On 5/18/08 4:59 AM, "Prof. P. Sriram" <sriram at ae.iitm.ac.in> wrote:

> dear fedora mirror colleagues,
> 
> we (ftp.iitm.ac.in) have recently become an official fedora mirror; we
> were very happy to note the increase in traffic when fedora 9 was released
> a few days ago. however, a review of the logs shows what appears to be a
> dos attack. we are getting thousands of requests for http downloads of the
> fedora 9 live cd images from a handful of ip addresses in mainland china.
> for example, 222.129.36.242 made over 20,000 requests for this live cd
> image over a 24 hour period. a few more such sites have contributed a
> total of over 200,000 hits on the live cd images over the last few days.
> is anyone else seeing such strange activity? i have temporarily taken the
> live cd images off line (sorry, legit downloaders).
> 
> --
> sriram
> 
> --

"Great firewall of China" doing some sort of NAT

Do they all have various resume ranges?   Could be the worst download
accelerator ever built :)


-- 
Paul Mezzanini
Rochester Institute of Technology
Senior Systems Administrator/Engineer
Research Computing
585.475.2189

--