Are there any non China/Korea ranges withing 112.0.0.0/8?
dstiles
9:00 pm on Jan 6, 2014 (gmt 0)
I don't know all the ranges but there are...
Acceptable if you have customers there:
Australia Hong Kong Japan Singapore Taiwan Thailand
In my experience, similar to China/Korea:
China India Indonesia Korea Malaysia Phillippines Sri Lanka Vietnam
It's quite possible there is the odd New Zealand and similar in there: these are just coutries that have tried it on and got themselves registered, either through server farms or from indivuals (the latter especially in the second group above).
keyplyr
10:59 pm on Jan 6, 2014 (gmt 0)
Thanks... I have legit human traffic from Indonesia, India & Philippines. Maybe I'll stick with a /10 block which AFAIK is the upper 2/3.
lucy24
1:09 am on Jan 7, 2014 (gmt 0)
Are there any non China/Korea ranges withing 112.0.0.0/8?
Loads. 112 is generic APNIC. So you'll find humans living in Australia, India, New Zealand and Japan, among other places. Same problem as with RIPE ranges: you can't put all the Ukrainian robots in one /8 and all the nice Danish humans in another. Yes, I realize that there are humans in China too. But, well, you know what I mean.
112 does have some colossal China pieces though, starting with 112.0.0.0/10 and 112.224.0.0/11 and working downward from there.
keyplyr
2:28 am on Jan 7, 2014 (gmt 0)
Well as you've no doubt seen me post before, my intention is to block all of China. The 112 was adding up to more than a dozen blocked ranges, so I just blocked /10... then thought why not just do it all.
I don't care about humans (hmmm I rather enjoyed saying that) or servers, just want all of China nixed! I have a H U G E list of ranges, probably most of APNIC blocked... but my concern is the collateral damage to friendly (non-hacking) users from Australia, India, Indonesia, New Zealand, Japan and the Philippines.
Angonasec
11:33 am on Jan 7, 2014 (gmt 0)
KeyP: Are you only concerned about hacking humans? We've noticed a lot of nefarious activity sourced from those "friendly" users you cite.
Regrettably even NZ Telecom IPs, ADSL users granted, but very nasty individuals, now finally canned.
HINT: NZ and Au are not what they were, watch users' activity, and you'll see what I mean.
dstiles
9:43 pm on Jan 7, 2014 (gmt 0)
keyplr:
> friendly (non-hacking) users from Australia, India, Indonesia, New Zealand, Japan and the Philippines.
Hmm. AU, JP, NZ I'll agree (in general) but the others... Visits from ID and PH are usually attackers and IN is a spammer, often form spam. Ok, IN is trying to get work from us poor Brits (and hence removing the cherry cake from our mouths) but let them concentrate on their own country first. Are you listening, America? :)
