[lug] looking for address block reference...
bluey at iguanaworks.net
Wed Jan 10 22:24:28 MST 2007
On Thu, 2007-01-11 at 01:15 +0000, D. Stimits wrote:
> I'm dealing with thousands of brute force ssh attacks from IP addresses
> all over China. I'm just tired of it, is there a list of all Chinese
> addresses somewhere so I can firewall?
It isn't exactly what you asked for, but you might want to look at
DenyHosts (http://denyhosts.sourceforge.net/). It looks at your logs and
sees who is trying to connect via ssh and failing and adds a line in
your firewall to block the ip address.
More information about the LUG