S
S
Shing2021-04-26 10:13:52
linux
Shing, 2021-04-26 10:13:52

I block Chinese ip, is it possible to immediately block subnets 175.0.0.0/8 or not only China can get caught there?

The server is attacked from a bunch of Chinese, other Asian ip. There are many IPs. Can I try to ban 175.0.0.0/8 right away? Or is it not neat at all and the CIS segment can be caught there?

Now, like IP, they are already resold powerfully, and Internet providers in the Russian Federation have ip that are defined as European, etc.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
D
Denis Yuriev, 2021-04-26
@Shing

The server is attacked from a bunch of Chinese, other Asian ip.

there are wonderful bases for your task:
  • https://lite.ip2location.com/database/ip-country
  • https://dev.maxmind.com/geoip/geoip2/geolite2

if the attack is brute force sshd, then file2ban will help you at all
Internet providers in the Russian Federation have ips that are defined as European, etc.
proof?
UPD recipe for the lazy
https://www.ip2location.com/free/visitor-blocker
at the bottom of the page is an excellent form,
select the countries we want to block, select linux iptables in the Output format, and click download

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question