3 ms·
The question is why those specific countries? Do you just assume that all connections made from, say, Netherlands, are safe by default?
by skotobaza 2y ago
The question is why those specific countries? Do you just assume that all connections made from, say, Netherlands, are safe by default?
- theshrike79 2y agoBasic statistics. The chance of someone from Netherlands being a state-level hacker is a lot smaller than someone from a Russian IP.
- skotobaza 2y agoLogically, if Russians would want to infiltrate your organization, they won't do it from Russian IPs directly, but instead do it from cheap proxies, and those proxies are abundant in Netherlands or Germany.
- CheBuzz 2y agoAnd yet experience shows that GP is correct. The vast majority of mailicious traffic originates from those countries IME.
- skotobaza 2y agoOnly stuff like scanners and other basic stuff (that comes from devices that have been left unattended and without updates). But the actual malicious traffic is not that easy to spot, as it won't be router directly.