Bad guys out there

[Marauder2003]

I have a simple website. I don't take credit cards, don't collect personnel info, etc. GoDaddy turned on a firewall for my site a couple of weeks ago. I can't believe the nefarious activity against my poor little site.

[Bako88fanjr]

Seems rather rude of attackers and out of character.

Sent from my SM-N986U using Tapatalk

[The War Wagon]

anqueefer day job: hacking.

[Epaphroditus]

Some bad hombres.

[C.G.]

I have a simple website. I don't take credit cards, don't collect personnel info, etc. GoDaddy turned on a firewall for my site a couple of weeks ago. I can't believe the nefarious activity against my poor little site.

Too bad you don't have the breakdown by country, it might surprise you. Besides the normal bad actors, countries like the Netherlands may show up in high numbers.

[Marauder2003]

I browsed all the details. China, Russia, Ukraine, England, etc.

[Cowboy T]

Welcome to the reality of having an Internet Web site. I see high numbers of attacks against mine, too.

[denpython]

Online dependent country.
Death from within.
The final solution.

[HecklerNKoch]

This info is, of course, not detailed.


Your simple website is most likely on a shared space with hundreds of other simple websites and the results you are seeing reflect that entire subnet.


Truly, this really isn't that bad at all. I'm not just saying that to make you feel better.


If anything, think of all the piece of sh_t drivers on the road we visually encounter everyday. Multiply that by thousands ... and that's the Internet. But, fortunately, we still somehow make it home each night after night.

[Uncivil Engineer]

You should see the login attempts on my ssh server. It's non stop, everyday, all day. Much of it comes from China , or at least bounces through a proxy in china.

You might want to look at sshguard. https://www.sshguard.net/

It's an adaptive firewall. So as a remote attacker starts to probe your server those probes generate log messages. Sshguard monitors those logs in real time and installs firewall rules to block all further packets from the attacker. While named sshguard it can monitor logs from many different services and can install any type of firewall rule you like.

The project started with trying to combat ssh brute force attacks then grew over the years.

Sent from my Pixel 4 XL using Tapatalk

[Marauder2003]

You should see the login attempts on my ssh server. It's non stop, everyday, all day. Much of it comes from China , or at least bounces through a proxy in china.

You might want to look at sshguard. https://www.sshguard.net/

It's an adaptive firewall. So as a remote attacker starts to probe your server those probes generate log messages. Sshguard monitors those logs in real time and installs firewall rules to block all further packets from the attacker. While named sshguard it can monitor logs from many different services and can install any type of firewall rule you like.

The project started with trying to combat ssh brute force attacks then grew over the years.

Sent from my Pixel 4 XL using Tapatalk