Block Chinese and Korean visitors

kblessinggr · Aug 9, 2009

Seems if you have no need for Chinese and Korean visitors (a lot of which are hack or snooping attempts anyways) you can easily block them with an .htaccess file (This will of course consume more CPU than simply using the iptables rules which is also provided at the same source).

Original Site:
Okean - The Goods

.htaccess method
Okean - CNKR htaccess

iptables method (though what I did was remove all the --dport 25 so it would block all ports)
China/Korea Blocking with Linux iptables

There seems to be other lists setup on the site such as Cisco ACL rules. And it seems to be updated regularly for Chinese/Korean blocks.

And if you really feel the need:

Russian block list : Block Blog Spammers & Hostile Servers in Russia with a Linux Iptables Blocklist
and
Nigerian block list : Block Nigerian Scammers From Your Server, with a Linux Iptables Blocklist

elime · Aug 9, 2009

Edit - seriously though, good info dude.

kblessinggr · Aug 9, 2009

elime said:
Edit - seriously though, good info dude.

Was debugging a python script last night, and looking at my error log and such and noticed a bunch of attempts to find a uc_server folder and such on my server with a referrer to some chinese spam blog. And I was basically like 'fuck that... might as well block the whole country, most offers never convert from them, and most of the traffic from china is just snooping attempts' So managed to find that site above that keeps regular tabs on chinese/korean IP blocks.

Should help cut the bandwidth from em, as well as possible injection attacks from those popular locations. Though figured while I was at it, to edit the php.ini and turn off display_error by default (I been meaning to get around to it, then finally did it).

WhatupG · Aug 9, 2009

Nice lists. I am always looking to update my Nigerian list.

_poto_ · Aug 9, 2009

Phone/SMS billing
Global Accés S.L. - Pin to Enter {www.p2e.com}
Password-By-Phone.com - The better global billing solution

DoldGigga · Aug 9, 2009

Ok, stop me if you heard this one before...a russian guy, chinese guy and korean guy logged onto my server...

PHPRight · Aug 9, 2009

Anybody running any type of free service (proxy, hosting, etc) definitely needs to know how to block Chinese/Korean visitors. I've learned this the hard way.

kblessinggr · Aug 10, 2009

Now if there was just a way to automatically stop these snoops

[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/database
[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/datenbank
[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/padmin
[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.3-rc1
[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.3-pl1
[Mon Aug 10 10:37:06 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.3
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.2-rc1
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.0-pl1
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.6.0
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.5.6
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.5.4
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.5.1
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.2.6
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin-2.2.3
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/php-my-admin
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpmyadmin2
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/mysql-admin
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/mysqladmin
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/webdb
[Mon Aug 10 10:37:05 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/websql
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/sqlweb
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/webadmin
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/myadmin
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/mysql
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/PMA
[Mon Aug 10 10:37:04 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/web
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/db
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpMyAdmin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/phpmyadmin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:03 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:02 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:01 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:00 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:00 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:37:00 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin
[Mon Aug 10 10:36:59 2009] [error] [client 64.34.203.19] File does not exist: /home/usr/public_html/admin

CPW-Carl · Aug 10, 2009

Good info, been meaning to look into this for awhile, just implemented the iptables block, thanks.

NoSuchAgency · Oct 14, 2009

For anyone that's interested in blocking countries, it's less resource intensive (but harder to set up) to use GeoIP Lite (MaxMind - GeoLite Country | Open Source IP Address to Country Database)

Search

Search

Block Chinese and Korean visitors

kblessinggr

PedoBeard

elime

New member

kblessinggr

PedoBeard

WhatupG

New member

_poto_

...

DoldGigga

Banned

PHPRight

PHP Developer

kblessinggr

PedoBeard

CPW-Carl

New member

NoSuchAgency

New member