News for hackers. Stuff that matters.

A comment on Visualizing the locations of malicious login attempts.

Re:Visualizing the locations of malicious login attempts by chriscjcj on Friday April 26, 2024 @12:40AM (#40166010)
It's been a couple decades since I adminned servers and firewalls. In my experience, in the early 2000's, Russian IPs were extremely common. I was surprised that OP didn't see even one. Can anyone conjecture on what might account for the apparent change?
[ Parent | on HN ]
Re:Visualizing the locations of malicious login attempts by johanbcn on Friday April 26, 2024 @01:14AM (#40166139)
> Can anyone conjecture on what might account for the apparent change?

Many companies that do not have business in countries known for their abundance of bad actors will block their IP ranges right away.

Nowadays hackers worth their salt will make use of botnets and VPNs located at more "friendly" countries.

[ Parent | on HN ]
Re:Visualizing the locations of malicious login attempts by efnx on Friday April 26, 2024 @01:03AM (#40166095)
The Russians are probably tunnelling through another connection or are steering a botnet.
[ Parent | on HN ]