[178963] in North American Network Operators' Group
Re: Getting hit hard by CHINANET
daemon@ATHENA.MIT.EDU (Robert Kisteleki)
Wed Mar 18 03:12:10 2015
X-Original-To: nanog@nanog.org
Date: Wed, 18 Mar 2015 08:12:06 +0100
From: Robert Kisteleki <robert@ripe.net>
To: Terrance Devor <ter.devor@gmail.com>, nanog@nanog.org
In-Reply-To: <CA+w+2f9vMAgFTTH=KVZANdQjTuRdyNH4yBVV9vhDRqGFFOCB_g@mail.gmail.com>
Errors-To: nanog-bounces@nanog.org
On 2015-03-17 3:06, Terrance Devor wrote:
> Hello Everyone,
>
> I really hope this is not against group policy etc.. however our network is
> being hit
> hard by a China IP for the past 6 months. Our systems our up to date,
> passwordless
> ssh etc.. but they're DOS attempts are getting more and more aggressive.
> Tried to
> contact their phone number to no success (not valid). Emails don't get any
> response.
> The IP is 218.77.79.43. Do we have any options?
>
> Terrance
>
If you don't want to spend more than 2 minutes on this, then move sshd to a
different (randomish) port. Sounds naive, but it's dirt cheap and really helps.
Robert
