The mcblockd automation has been running for roughly one week. It’s been fairly busy automatically blocking those trying to crack my ssh server. Below is some of the output from a query of the active blocked networks (the summary information for the top 10 countries by the number of addresses being blocked). Interesting to note that the automation has blocked a huge swath of addresses from China. State-sponsored cyberattacks?
% mcblockc getactive ssh_losers
...
Addresses covered per country:
CN 102,263,808
/10 networks: 8 (33,554,432 addresses)
/11 networks: 17 (35,651,584 addresses)
/12 networks: 21 (22,020,096 addresses)
/13 networks: 11 (5,767,168 addresses)
/14 networks: 14 (3,670,016 addresses)
/15 networks: 9 (1,179,648 addresses)
/16 networks: 6 (393,216 addresses)
/18 networks: 1 (16,384 addresses)
/19 networks: 1 (8,192 addresses)
/21 networks: 1 (2,048 addresses)
/22 networks: 1 (1,024 addresses)
KR 7,864,320
/10 networks: 1 (4,194,304 addresses)
/11 networks: 1 (2,097,152 addresses)
/12 networks: 1 (1,048,576 addresses)
/13 networks: 1 (524,288 addresses)
IN 7,340,032
/10 networks: 1 (4,194,304 addresses)
/12 networks: 2 (2,097,152 addresses)
/13 networks: 1 (524,288 addresses)
/14 networks: 2 (524,288 addresses)
BR 7,252,992
/11 networks: 3 (6,291,456 addresses)
/13 networks: 1 (524,288 addresses)
/14 networks: 1 (262,144 addresses)
/15 networks: 1 (131,072 addresses)
/17 networks: 1 (32,768 addresses)
/19 networks: 1 (8,192 addresses)
/21 networks: 1 (2,048 addresses)
/22 networks: 1 (1,024 addresses)
FR 6,782,976
/10 networks: 1 (4,194,304 addresses)
/11 networks: 1 (2,097,152 addresses)
/15 networks: 1 (131,072 addresses)
/16 networks: 5 (327,680 addresses)
/18 networks: 2 (32,768 addresses)
AR 4,524,032
/12 networks: 1 (1,048,576 addresses)
/13 networks: 2 (1,048,576 addresses)
/14 networks: 8 (2,097,152 addresses)
/15 networks: 2 (262,144 addresses)
/16 networks: 1 (65,536 addresses)
/21 networks: 1 (2,048 addresses)
JP 4,227,072
/10 networks: 1 (4,194,304 addresses)
/17 networks: 1 (32,768 addresses)
RU 3,484,672
/13 networks: 2 (1,048,576 addresses)
/14 networks: 5 (1,310,720 addresses)
/15 networks: 6 (786,432 addresses)
/16 networks: 2 (131,072 addresses)
/17 networks: 4 (131,072 addresses)
/18 networks: 2 (32,768 addresses)
/19 networks: 5 (40,960 addresses)
/22 networks: 3 (3,072 addresses)
IT 3,280,896
/11 networks: 1 (2,097,152 addresses)
/12 networks: 1 (1,048,576 addresses)
/15 networks: 1 (131,072 addresses)
/20 networks: 1 (4,096 addresses)
TW 2,637,824
/12 networks: 2 (2,097,152 addresses)
/13 networks: 1 (524,288 addresses)
/18 networks: 1 (16,384 addresses)
...