I got sick tired of people hammering my web server trying to exploit vulnerabilities on things like #log4j or #wordpress that I don't even run. My list of blocked IPs on #fail2ban was getting out of control, so I took off and nuked the site from orbit (only way to be sure). I blocked ALL IP addresses from China using #iptables and #ipset

#firewall #linux #nginx

@nerdeiro I don't like geo-blocking content.... but when 90% of attack attempts come from a single country, yeah gotta do what you gotta do.
@cdp1337 Yup. That's the case here. For as long as the CCP allows this kind of shit to happen, I have no choice.

@nerdeiro same issue here. I had to block China, Russia, India, Iran, and most of the Middle East on my Cloudflare side. The responsiveness of my website jumped up right after the ban. In general, geo-banning is not desirable. In my case, no one from those countries should have anything to do with me or my site (I’m teaching in Canada and my website is for my students from Canada). So πŸ€·β€β™‚οΈ

They still can use VPNs and highjacked IPs. In the end, it’s a losing battle in my opinion.

@nerdeiro maybe I should look into this, too, as my personal Nextcloud server is getting less responsive these days...

@nerdeiro Hah, and people thought I was strange blocking whole countries.

China for some reason seems to over-represent everybody else in terms of number of attacks. India, which has about the same population, is nowhere near as bad. That and human rights.

Either a lot of would-be attackers, or a lot of clueless sysadmins that are unwittingly acting as proxies.

Presently I block: BY (supports RU), CN, HK (gov says they're part of CN), KP, RU (Ukraine war), SY (supports RU), TR (supports RU)