Subj : Dealing with Microsoft To : Jas Hud From : Sean Dennis Date : Thu Feb 17 2022 10:21:17 Hello Jas, 17 Feb 22 02:13, you wrote to me: JH> Are you sure that's just not traffic from their antivirus software JH> calling home or something like that. do you have a windows computer? I have no Microsoft-powered computers in my posession. This morning, I wake up to someone using an IP belonging to Microsoft Brazil trying to smack my SSH port around. I noticed a few other Brazilian IPs in there so I just blocked the whole country. I don't know if someone was spoofing IP addresses from Microsoft but I'd rather be safe than sorry. I am also blocking a LOT of virtual hosted systems that are just outright trying to portscan my network. There's one problematic group called FranTech, with the company registered in Wyoming but with a .ca TLD, that has been causing issues for quite some time. I am making a dent though because they're showing up less often in my system logs. I love pfSense. -- Sean .... Why is there so much month left at the end of the money? --- GoldED+/LNX 1.1.5-b20180707 * Origin: Outpost BBS * Johnson City, TN (618:618/1) .