--- scsijon <scsijon@net2000.com.au> wrote:
At 02:30 AM 24/01/2005, Rhugga wrote:
I have talked with engineers in the past that like to block all IP addresses from countries such as China for example in an effort to quall spam and other malicious activities. Where can these listings be found? I would like to block entire networks at our border router for countries we don't do any business with or have a need for them contacting us.
sorry, but there is no such thing, how did you prove they were coming from china? Neither the .countryid or .ip in relality relate to a country, their just convenient tags for the internet to use.
We have been seeing an increase of malicious activity lately and about 90% of it comes directly from China and the other 10% likely originates there as well. Most of it has been low-level script-kiddy stuff, probing for open relays, trying default user accounts, and other amateur stuff but can't be to cautious.
I don't know about your country but in australia we have a china trade mission / embasy, they have a person/group who will try to trace any china spam's down, but haven't had much success with the internet side as most are using china's codes as "a convenience name" and are apparently coming from elsewhere. You may check if your country has similar, but you also need the anti-spam / malicious laws so they are required to follow it up.
scsijon
Yea, tracing the source down is a waste of time. My buddy runs a spam filtering service and they gave up trying polical approaches to this. (and now implore much shadier methods) The only solution is to block China and the others completely. Always report the IP's to spamcop though, they seem to be the most successfull in the battle agaist spam/malicious activities. -cc