Razakel
20-01-2015, 19:16
There's not a huge amount you can do about this, really, it's just something you have to put up with - I'm averaging 500 attempts a day. If a machine's internet-accessible, people will try and break in to it.
There's a few things to mitigate it though: you could put your SSH server on a weird port or firewall it to only allow connections from your ISP's IP range.
fail2ban is also an option for automatically blocking IPs.
You can also report it to the abuse contact associated with the IP, but generally China is more concerned with stopping people finding out about Tienanmen Square than stopping them from hacking foreign servers.
There's a few things to mitigate it though: you could put your SSH server on a weird port or firewall it to only allow connections from your ISP's IP range.
fail2ban is also an option for automatically blocking IPs.
You can also report it to the abuse contact associated with the IP, but generally China is more concerned with stopping people finding out about Tienanmen Square than stopping them from hacking foreign servers.