Well this article is less than worthless. Where is the list of those IP addresses? I’d be happy to implement blocks on my servers with that information.
here’s the site where all the CNCERT reports are published https://www.cert.org.cn/publish/english/115/index.html
Weird, I guess I had bad timing because I’ve been unable to reach this site for a bit, but it just came up again. Thanks for the info!
[Edit] The documents on that page ALSO do not actually provide information about the IP addresses carrying malicious content. Maybe they just don’t publish that information, despite how useful it would be to everyone?
I did a bit more digging and found some IP ranges published here, agree this is useful info for everyone and should’ve been published more prominently https://news.cgtn.com/news/2025-01-17/China-releases-report-on-U-S-cyberattacks-targeting-a-tech-enterprise-1AeN1twfTqM/p.html
Ugh they sure screwed up the code on that page, I’m not sure how you viewed the article. I got the same results on firefox and chrome… a short paragraph ending in “CNCERT released a report on Friday regarding the attacks. Here are the details:”, followed by a full screen width banner “Summer in Paris”, and then I guess the footer for the site. I had to disable a max-height style on the article to actually read through it. Still not much detail unless there’s even more hidden blocks on the page, but thanks for trying.
