Conversation
Notices
-
Made some interesting discoveries from our automated #network #attack #detection and #prevention system. From attacking IP addresses in 4 different data centers (three different service providers / ASNs) there are 3431 #unique IP addresses being #blocked.
But the most interesting part is that all of the four data centers are blocking same set of 513 IP addresses. Some of these attackers are super active and probably are basically attacking the whole internet. Not a single host, data center or service provider, but whole IPv4 address space. Also most interestingly there were no IPv6 addresses (/64, /48 /32) being blocked using same criteria. Even if detection ssytem is working and blocking IPv6 addresses when required. All attacks target IPv4 addresses only.