Unusual high number of blacklist for past 7 days
Posted: Thu Jul 21, 2016 4:55 am
by sguox
i am getting very strange activity, over 340k IP blacklisted for past 7 days, a very unusual high number of IP, is it just my network or something is happening in the Internet?[attachment=0]unusual activity.png[/attachment]
Re: Unusual high number of blacklist for past 7 days
Posted: Thu Jul 21, 2016 8:16 am
by jus06tine
Hi,
mine was a little bit lower than yours. you might want to review your FW and close un-wanted ports..
Re: Unusual high number of blacklist for past 7 days
Posted: Thu Jul 21, 2016 10:18 am
by Zorro
some funky(mismanaged and ingoring abuse reports and actions)data-centers/hoster blackhosted even on some popular resources, like social networks, corporate gates and etc
this one - happens to be hammered from entering FLOSS and some gamers resourcs. even in Github it was yellow-flagged.
never hit my networks yet, but closest adjaced(in africa, not NA)was 105.155.0.0 to 105.158.0.0 gap
aside botnets(which is HUGE amount of hosts, including routers, servers. and market for operating portions of)there was hungreds of "safe heavens" for that, providing commercial access to similar "services" and some even had "gov't clients" of many kinds among them.
region-wise distribution is ~ equal, so you may had pretty nasty actions from EU, NA as from Asia, Pacific, Africa, despite mass-media bias/propaganda against them.