New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Which countries do you IP-block on general principle?
dane_doherty
Member
China has pretty much no legitimate traffic. Russia and India - big time abusers, but also lot of legit visits. Nigeria is a cesspool that isn't immediately obvious. This is my experience of course.
Comments
Russia because their "special operation" fails.
None normally, but I don't disagree with your above statements in general.
I prefer to block based on pattern recognition / flow data, vs just outright blocking millions of IPs that could potentially have incorrect geo data.
I've placed ACL blocks on entire countries only maybe once or twice, when their was 80%+ of a flood originating from that country, and yes they were always 3rd world / emerging countries.
none. i've had to deal with too many issues around MY ip(s) being blocked by well-intentioned-yet-naive part-time sysadmins over the years. not putting anybody else thru that pain. your network your rules though.
Australia, only because of you.
lots because it is just easier and my content is not targeted towards them.
I block asn not country 🤣
You don't need to block China, their government has already done that for you
a ton of outbound shyt from mainland China on my servers
I block literally everything except IPs I have the exclusive use of. Fuck everyone else, fucking cunts. Suck my fucking dick.
Pricks.
north korea .
I block FUCKING BOTS
No ACL, but we'll check orders extra carefully: Bangladesh.
I don't think we've ever had a legitimate order from them. Morocco comes a close second.
In addition to blocking IPs it has been useful for me to only allow limited payment options.
Morocco. I think their country's sole-export is spam email.
It varies a little, but one example:
Not being able to block USA means a lot of shit still comes through.
Tunisia.
None at this point for me
None.
India, China, Bangladesh, Pakistan, most of Africa, Russia.
I don't block anyone.
If you attack me, I report you to Santa Claus for inclusion on the naughty list.
Good cartoon idea.
Always trying to block cart access (can't place order) on embargo'd countries to avoid unnecessary hassle or legal b.s.
[email protected]?
Geo data is unreliable as fuck, if you would like to nuke a country based on that data, you could still fuck it up, all the way.
Blocking countries just because you don't like them, will result in a certain amount of false positives, rather block them on patterns and only per Block or ASN but not by country.
now ask how many people block cc ips
Seems like fail2ban will work better for most of people in this thread. Blocking an entire country doesn't seem very justified.
This is in addition to Country-wide blocks.
CSF, thanks. Seems like you don't look in your logs often.
Any why would I need any justification?
I block Orcland and Chinaland. On general principle.
Why block Chinese traffic? China usually accesses websites outside of China through a proxy.