Snort mailing list archives

Re: Querstion about Chinese IP addresses


From: Giles Coochey <giles () coochey net>
Date: Mon, 12 Mar 2012 14:28:32 +0000

On 12/03/2012 14:17, Miso Patel wrote:
Does anyone have a good list of IP addresses allocated to China?  I 
don't do any business there and I get so much Unsolicited/Malicious 
traffic from them that I am tired of it and want to block the whole 
country.  Recently the sweet-and-sour SYN has gotten more sour....  I 
suppose I could block APNIC but I would like to leave India open.

Sorry to spam the snort-sigs list, I just thought someone here may 
know.  AFIK, Snorts/VRT doesn't maintain IP block rules like Emerging 
Threats (and I suppose if VRT did it would be 30 days delayed unless 
you paid so that isn't very useful for the community but some of the 
timely stuff on the Emerging Thetan list has come in handy but I 
digress....)

To summ up, I am tired of China making passes at my systems, touching 
them inappropriately, and would like to implement a reverse Great 
Firewall of China.  Please let me know off-list if you have a good set 
of known bad Chinese IPs.

I will warn you, having worked at a BGP AS level - thinking that IP 
addresses are geographically distributed in this way is a mistake, 
however, seeing as you asked, look at http://software77.net/geo-ip

Look on the right, there is an option to get IP allocations by country 
in CIDR format.

I cannot vouch for accuracy of the information at any time. Enjoy your 
3,479 extra firewall rules :-)



-- 
Best Regards,

Giles Coochey
NetSecSpec Ltd
UK Mobile: +44 7983 877 438
Business Email: giles.coochey () netsecspec co uk
Email/MSN/Live Messenger: giles () coochey net
Skype: gilescoochey



------------------------------------------------------------------------------
Try before you buy = See our experts in action!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-dev2
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!


Current thread: