allow whitelisting clients based on country code

kaniini / antissh

An IRC bot which monitors for compromised embedded devices being used as proxies.

Other

126 stars 18 forks source link

Closed mweinelt closed 6 years ago

mweinelt commented 6 years ago

using the free maxmind country database to do lookups for country code certain countries can be exempt from ssh probing.

kaniini commented 6 years ago

what is the rationale of this?

mweinelt commented 6 years ago

abuse for us mostly comes from india, brazil, china, azerbaijan, russia, ....
our users come mostly from europe, where close to no abuse originates from
we have stricter laws with regards to logging into remote systems that you're not supposed to