Should I block China IP Addresses?

jmlopez · Dec 13, 2016

There are many guides to block alll Chinese ip addresses with iptables and I think I should do it for my hosting. I also see an option in my CDN control panel. I am targeting US audience and I think traffic from China is just bots and hackers. What is your advice? should I block all China IP addresses?

LJSHost · Dec 13, 2016

It would be a good idea if you are not looking to target China or the surrounding region with your site. I agree a large percentage of brute force attacks and other undesirable activity does come from this region.

LJSHost · Dec 13, 2016

Hi Chris,

Yes, you should be able to create custom rules.

Login to your cloud flare dashboard > Threat Control > In the custom rule box select a country or IP range. > click block.

tlhIngan · Dec 14, 2016

LJSHost said:
Hi Chris,

Yes, you should be able to create custom rules.

Login to your cloud flare dashboard > Threat Control > In the custom rule box select a country or IP range. > click block.

I don't see thread control section on my account.

Chris Worner said:
I use Cloudflare for my blogs. How can I block China with Cloudflare?

click on Firewall on menu

On the Access Rules, type China and it will suggest you a name, you should click that.

There are some options you can choose if wanted.

Click Add to save and finish.

Good luck to you ! :good:

jmlopez · Dec 15, 2016

LJSHost said:
Hi Chris,

Yes, you should be able to create custom rules.

Login to your cloud flare dashboard > Threat Control > In the custom rule box select a country or IP range. > click block.

I could not find where Thread Control is in Cloudflare.

@tlhIngan

It alerted me this when clicking on Add button.

Countries can only be challenged or whitelisted (Code: 1212)

LJSHost · Dec 15, 2016

It used to be threat control they must of updated the UI since I last looked at it. Anyway tlhIngan has provided a great guide.

JixHost · Dec 15, 2016

We use cloudflare and it does block threats globally. China is not the only country that sends attacks.

HostXNow · Dec 15, 2016

Cloudflare is a good solution.

Also, make sure you are using a good firewall plus mod_security rules etc.

jmlopez · Dec 16, 2016

JixHost said:
We use cloudflare and it does block threats globally. China is not the only country that sends attacks.

How to block a country with Cloudflare free plan? I could not succeed in doing this.

HostXNow said:
Cloudflare is a good solution.

Also, make sure you are using a good firewall plus mod_security rules etc.

Are you talking to a firewall or using iptables on hosting? I feel inconvenient to do that as doing on an user interface.

HostXNow · Dec 16, 2016

jmlopez said:
How to block a country with Cloudflare free plan? I could not succeed in doing this.

Are you talking to a firewall or using iptables on hosting? I feel inconvenient to do that as doing on an user interface.

If you are using ConfigServer Firewall then have a read of this https://www.liquidweb.com/kb/how-to-block-traffic-by-country-in-the-csf-firewall/

Take note of the important information

Step #2: Deny Access by Country Code

CSF does not recommend the use of country-level blocks on any VPS or small server unless the CIDR range for the chosen country is very small. The use of a large-range country block on a small server or VPS could slow the server to the point that it becomes inaccessible.

If you're using a VPS or have any question as to whether your server has the resources to effectively implement a country-level block, you may find it more practical to allow or deny traffic by country code to specific ports, which we cover in Parts Three and Four.

Should I block China IP Addresses?

jmlopez

Member

LJSHost

Well-known member

Chris Worner

Well-known member

LJSHost

Well-known member

tlhIngan

Member

Attachments

jmlopez

Member

LJSHost

Well-known member

jmlopez

Member

JixHost

Member

HostXNow

Well-known member

jmlopez

Member

HostXNow

Well-known member

Latest posts New threads

Latest posts

New threads

Latest Hosting Offers New Reviews

Latest hosting offers

Popular Contributors - Past 30 Days

Sponsors

Tag Cloud