What is the total size of the AUR repo? It's tempting to host a mirror if that's an option just to study the traffic. If not it would be nifty if they could run
tcpdump -i any -p --dont-verify-checksums -NNnnvvv -s0 -B131072 -c10000 proto 6 and port 80 and tcp[13] == 2
assuming its port 80 and then strip out the IP addresses and share what that looks like. Bonus if they could capture a few of the known DDoS IP's and exclude the legit traffic. Curious if one of these things is not like the other. DDoS tools are often written by lazy people and rarely are they maintained.
lenova · 3h ago
For the last month or so, the AUR package repositories for Arch Linux have been the target of DDoS attacks. Today, the repos are down again.
More info: https://archlinux.org/news/recent-services-outages/