[ATrpms-users] DoS by 124.98.115.153 (p1153-ipbf01tokaisakaetozai.aichi.ocn.ne.jp)

[Axel Thimm]

Dear Open Computer Network,

a host beneath your netblock was draining all outgoing IP traffic
slots of our servers by downloading the same file (an alsa-driver
package from the CCRMA mirror) repeatedly (probably indefinitely) and
concurrently (between 300-500 simultaneus connections). The problem
was not the bandwidth allocation but the number of download threads.

This slowed down several open source services. I blocked this
particular IP and placed some more safeguards, so it's not an issue
for the services running here anymore, but the same host(s) may also
be doing this DoS to other parts of the net especially the CCRMA site
itself. I don't think the user did this on bad purpose, it is probably
a very bad use of download accelerators and scripting.

Please take care of the malfunctioning host. Thank you!
-- 
Axel.Thimm at ATrpms.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.atrpms.net/pipermail/atrpms-users/attachments/20071007/26a848ca/attachment.bin