But without China it's just non-stop to the point of consuming noticeable amount of hard drive space for logs, and making it annoying to read logs looking for other things.
Back in the EFNet days everyone with a lick of sense autobanned all of Eastern Europe, Asia, and South America. It was literally nothing but script kiddies.
Comments
Doesn't help much when shodan has already portscanned everyone.
I just searched for "ssh -port:22" and found many hits.
But also yes. Switching port (or just blocking China) will vastly reduce SSH probes.
Don’t forget to block Brazil And Romania And Kazakhstan And …
I'm not saying there aren't non-China probe spam.
But without China it's just non-stop to the point of consuming noticeable amount of hard drive space for logs, and making it annoying to read logs looking for other things.
At least that's my experience.
Back in the EFNet days everyone with a lick of sense autobanned all of Eastern Europe, Asia, and South America. It was literally nothing but script kiddies.
Any decent firewall can do geo location allow. I block all but specific counties. Can't trust Christmas Island....
Last time I looked at the IPs spamming my websites, a lot of them were from Europe, surprisingly.