[lug] looking for address block reference...

Ben bluey at iguanaworks.net
Wed Jan 10 22:24:28 MST 2007


On Thu, 2007-01-11 at 01:15 +0000, D. Stimits wrote:
> I'm dealing with thousands of brute force ssh attacks from IP addresses 
> all over China. I'm just tired of it, is there a list of all Chinese 
> addresses somewhere so I can firewall? 

It isn't exactly what you asked for, but you might want to look at
DenyHosts (http://denyhosts.sourceforge.net/). It looks at your logs and
sees who is trying to connect via ssh and failing and adds a line in
your firewall to block the ip address.  

Ben






More information about the LUG mailing list