On Sep 16, 2016, at 11:17 AM, Razer <rayzer@riseup.net> wrote:
On 09/16/2016 02:55 AM, Ben Tasker wrote:
But then you'll say that it's just americunts pretending to be Chinsese ;)
And you can't prove that's not the case?
Nope, I can't. I just do whois on the IPs. Maybe whois is faked. Or maybe they're just leased anonymously.
I've seen more boxes in China that were /very/ poorly secured than not (could be selection bias of course) so it's just as likely they're compromised boxes. In fact in the majority of cases it's probably more likely - China's a good place to originate from if your aim is to make it difficult for anyone in the Western World to trace a connection back to your real location - at least by legal methods.
-- Ben Tasker https://www.bentasker.co.uk
When HideMyAss was still providing lists of free open proxies China was alway on that list, and lots of them.
Rr
My badhosts table (generated by fail2ban -> pf, listening on a few services, most bans are from ssh probes) is currently like 75% hosts out of South Brisbane, Australia. The rest are from all over - about 10% China, some Russia, Europe, America.... weird distribution. Lots of 222.0.0.0/8. John