Hi All, Machine is a windows box. Answer some questions: - yes rdp was a problem - yes totally my fault, just hadn't got anything that should be done, actually done. I've had some great suggestions from a bunch of people. Thanks to the folk who've helped clean this up this afternoon. Just FYI for those who are interested.... we set this box up quickly just to get a poc sorted for some stake holders to gain a bit of confidence that we could do what we said... I really didn't expect that the box would get found quite so fast and then hammered. Clearly you can't even put a quick and dirty box in place to just prove a concept without having to bolt it down. D On 8/12/2013 11:22 a.m., Don Gould wrote:
Hi,
I've got a machine that's been hacked twice in the past week from IP ranges in China.
I have it behind a Mikrotik router.
There is no reason for anything outside of NZ and AU to be looking at this box so I'm keen to just block the rest of the world from it.
I'm currently thinking an address list to just block out the world or an address list to include Au and Nz.
Keen for ideas.
D
-- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699 Ph: +61 3 9111 1821 (Melb)
I'M COLLECTING COFFEE CUPS FOR PROJECT COFFEE CUP.
Deja vue (missing the French accent mark) - literally means already seen, that sense of haven't we been here before.