> On Sep 16, 2016, at 11:17 AM, Razer <ray...@riseup.net> wrote: > > > > On 09/16/2016 02:55 AM, Ben Tasker wrote: >>>>> But then you'll say that it's just americunts pretending to be >>>>> Chinsese ;) >>>> >>>> And you can't prove that's not the case? >>> >>> Nope, I can't. I just do whois on the IPs. Maybe whois is faked. Or >>> maybe they're just leased anonymously. >> >> I've seen more boxes in China that were /very/ poorly secured than not >> (could be selection bias of course) so it's just as likely they're >> compromised boxes. In fact in the majority of cases it's probably more >> likely - China's a good place to originate from if your aim is to make >> it difficult for anyone in the Western World to trace a connection back >> to your real location - at least by legal methods. >> >> -- >> Ben Tasker >> https://www.bentasker.co.uk > > > When HideMyAss was still providing lists of free open proxies China was > alway on that list, and lots of them. > > Rr
My badhosts table (generated by fail2ban -> pf, listening on a few services, most bans are from ssh probes) is currently like 75% hosts out of South Brisbane, Australia. The rest are from all over - about 10% China, some Russia, Europe, America.... weird distribution. Lots of 222.0.0.0/8. John