China's cybersecurity center discloses malicious foreign websites and IP addresses, mainly from US, Sweden and India (www.globaltimes.cn)
from yogthos@lemmy.ml to security@lemmy.ml on 03 May 04:29
https://lemmy.ml/post/29515224

#security

threaded - newest

Shdwdrgn@mander.xyz on 03 May 05:28 collapse

Well this article is less than worthless. Where is the list of those IP addresses? I’d be happy to implement blocks on my servers with that information.

yogthos@lemmy.ml on 03 May 14:58 collapse

here’s the site where all the CNCERT reports are published www.cert.org.cn/publish/english/115/index.html

Shdwdrgn@mander.xyz on 03 May 18:29 collapse

Weird, I guess I had bad timing because I’ve been unable to reach this site for a bit, but it just came up again. Thanks for the info!

[Edit] The documents on that page ALSO do not actually provide information about the IP addresses carrying malicious content. Maybe they just don’t publish that information, despite how useful it would be to everyone?

yogthos@lemmy.ml on 03 May 18:36 collapse

I did a bit more digging and found some IP ranges published here, agree this is useful info for everyone and should’ve been published more prominently news.cgtn.com/news/2025-01-17/…/p.html

Shdwdrgn@mander.xyz on 04 May 04:37 collapse

Ugh they sure screwed up the code on that page, I’m not sure how you viewed the article. I got the same results on firefox and chrome… a short paragraph ending in “CNCERT released a report on Friday regarding the attacks. Here are the details:”, followed by a full screen width banner “Summer in Paris”, and then I guess the footer for the site. I had to disable a max-height style on the article to actually read through it. Still not much detail unless there’s even more hidden blocks on the page, but thanks for trying.