Visualizing malicious IP addresses
romeov.github.io
Visualizing malicious IP addresses
1–10 of 124 posts
Re: Visualizing malicious IP addresses
#2[flagged]
Re: Visualizing malicious IP addresses
#3[flagged]
what, you would prefer it used chatGPT instead? every single article posted here is pretty much an ad. some are just less subtle. whether it was paid for ad or word of mouth, it's still adverstising
Re: Visualizing malicious IP addresses
#4[flagged]
what, you would prefer it used chatGPT instead? every single article posted here is pretty much an ad. some are just less subtle. whether it was paid for ad or word of mouth, it's still adverstising
I just found the continuous reference to it distracting, as it was utterly irrelevant to the otherwise interesting article.
Re: Visualizing malicious IP addresses
#5[flagged]
[deleted]
Re: Visualizing malicious IP addresses
#6Interesting, if it’s an issue you could try port knocking to prevent the constant attempts
Re: Visualizing malicious IP addresses
#7Interesting, if it’s an issue you could try port knocking to prevent the constant attempts
Anyone who has run an SSH server on the default port knows that you’ll get hundreds or thousands of login attempts per day. Changing the port to something less obvious and running fail2ban is enough to mitigate most of it. They’re just looking for low hanging fruit.
Re: Visualizing malicious IP addresses
#8Fun. You could also try putting the data into Google's data studio (now looker) to visualize them in an interactive map you can publish. Add things like size of dot corresponding to number of attempts, add reverse DNS/whois info to the info bubble, etc. Wonder how much came from residential vs business ip space.
Re: Visualizing malicious IP addresses
#9I always wondered how the IPs like this 180.101.88.232 from this block:
ISP ChinaNet Jiangsu Province Network Domain Name chinatelecom.com.cn
Continue to be the source of thousands of ssh password login attempts for years and years on end.
It's not a big deal, I use a tarpit on all ssh with 2FA on the one I use, but it seems ridiculous that some participants of the internet don't give a shit about the rest of the world.
Re: Visualizing malicious IP addresses
#10I always wondered how the IPs like this 180.101.88.232 from this block: ISP ChinaNet Jiangsu Province Network Domain Name chinatelecom.com.cn Continue to be the source of thousands of ssh password login attempts for years and years on end. It's not a big deal, I use a tarpit on all ssh with 2FA on the one I use, but it seems ridiculous that some participants of the internet don't give a shit about the rest of the wor…
Some participants in the world don't give a shit about the rest of the world