[BlueOnyx:27403] Re: BlueOnyx SVN/Trac issues

[Michael Stauber]

Hi all,

> There is currently a DDOS attack running against the webserver 
> devel.blueonyx.it, which hosts the Subversion code repository and the 
> TRAC frontend for the BlueOnyx source code.

Now that the dust has settled and the new devel.blueonyx.it is running 
fine? I checked the logs for the origin of the DDOS attack.

Turns out that Huawai is apparently NOT being nice. And why am I not 
surprised? They ignored the robots.txt and went power-harvesting 
webpages from Trac for the BlueOnyx sources. Instead of just doing an 
SVN checkout like more intelligent muggers.

If someone looks for some new IP address ranges to block? This is what I 
got so far, but the list will sure grow the more I dig through the logs:

119.8.96.0/19    # Huawai Cloud
110.238.104.0/21 # HUAWEI INTERNATIONAL PTE
111.119.208.0/20 # Huawei-Cloud-SG
124.243.160.0/19 # Huawei-Cloud-SG
166.108.192.0/19 # Huawei-Cloud-SG
159.138.0.0/18   # Huawei-HK-CLOUDS
189.1.224.0/19   # Huawei-Cloud-HK
49.0.240.0/20    # Huawei-Cloud-Hongkong
166.108.224.0/19 # Huawei-Cloud-SG

-- 
With best regards

Michael Stauber