kenwood

I really wonder if it is a proxy IP address. In the last week I have seen brute force SSH attacks on port 22 from 10 different IP addresses in the 18.2.22.XXX block of addresses and 17 different addresses in the 222.186.62.XXX block of addresses. These are both Chinese blocks and it appears that it is someone that can easily change their IP address at will. Seems like an organized attack more than random script kiddies. In the past couple of weeks attacks on my server have increased by a factor of three and the increase seem to be from Chinese activity. I wonder why the sudden upsurge. Perhaps I am just lucky ;-).