Re: SSH attacks from china

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



>-----Original Message-----
>From: centos-bounces@xxxxxxxxxx [mailto:centos-bounces@xxxxxxxxxx] On
>Behalf Of Lucian@xxxxxxxxxxx
>Sent: Sunday, July 26, 2009 11:27 PM
>To: CentOS mailing list
>Subject: Re:  SSH attacks from china
>
>Vietnam and Indonezia are also suspects in my list.
>The biggest problem with this approach is that even tho I could ban
>whole Asia and Russia, a significant part of the attacks do not
>originate from there, but from countries like USA, UK, etc, controlled
>by hackers (also) from the aforementioned areas...
>The latest case of password breaking I had to deal with was from an
>USA IP address.. they managed to insert an iframe in all index.html
>and index.php files on the respective FTP account. The iframe however
>was pointing to a .ru website hosted in France.. Isn't globalization
>fun?!
>Anyway, just banning ranges of IP addresses may not enough, so to rely
>on this _only_ would be careless.

Exactly, that was what I trying to get at!

So you're not going to ban all ip addresses from the US I take it, since
most spam, crapware, attacks and whatnot originate from there, as you point
out? ;-)
-- 
/Sorin

<<attachment: smime.p7s>>

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos

[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux