| Hilarious. Someone said block China and Russia, and we have a long response "USA bad! China not as bad!". No mention of Russia, and the original poster probably has nothing to do with the US. Here's the thing, China and Russia are the wild west of the internet. Someone starts to DDoS a UK IP from the US, and it gets shut down hard and fast. Someone starts to DDoS from Russia or China, and reports are dropped on the floor. Same for hacking attempts. And yes, if someone from Russia or China reports to me, errant acitivty, they are listened to. There is absolutely no comparison. These zones are useless for most companies. No one in China or Russia is buying anything from much of the rest of the world. Russia spews more spam that the rest of the planet combined. Dropping their IP space on the floor, is the smartest thing a startup can do. And the manufactured outrage is hilarious. These two countries block everything they can already, meaning legit traffic is rare. The great firewall of China means few will visit your site anyhow. Drop Russia, China, and even Brazil (whos network ops never ever ever respond to spam reports). Your admin life will be immensely better, and it will cost you nothing, nada, zilch. All upside, zero downside. |
I don't mean to be presumptuous but what is the benefit of this. Do you spend all day stressing when you see
in your Nginx logs? Actual financial fraud occurs using US residential proxies. Automated scanning occurs in those countries because they have a bunch of cheap insecure routers and IoT devices. Writing angry abuse reports all day is misdirected because the scanning device is probably some hacked Hikvision camera, not a master hacker. You'd be better off trying to get the C2 shut down.