Hello, I often get hammered by admin query string attempts from China, Ukraine, etc. Would blocking this in the geo blocking prevent these in any way?
Thanks
Thanks
#22403 Geographic Blocking
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by dlb on Thursday, 02 April 2015 12:39 CDT
Thursday, 02 April 2015 11:43 CDT
DaveOzric
Thursday, 02 April 2015 12:17 CDT
dlb
It will prevent it from really dumb attackers. It is pretty trivial to log into a proxy server in an allowed country and continue the attack. To the extent that you are being attacked by an automated script, it may reduce the attack some. Just keep in mind that a determined attacker will not be stopped by the GeoIP protection.
Dale L. Brackin
Support Specialist
English: nativePlease keep in mind my timezone and cultural differences when reading my replies. Thank you!
????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)
Thursday, 02 April 2015 12:23 CDT
DaveOzric
Hello, I understand it's a very simple concept and no real threat is blocked. It's more about the zillion emails from these attacks.
What happens on their end if it's blocked. Does it just show a 404 or some message? I'm sure it's a non human searching for Joomla sites to hack into. At least I believe that would be the case.
Thoughts?
Thanks
What happens on their end if it's blocked. Does it just show a 404 or some message? I'm sure it's a non human searching for Joomla sites to hack into. At least I believe that would be the case.
Thoughts?
Thanks
Thursday, 02 April 2015 12:35 CDT
dlb
The attacker probably gets a 403 - Access denied message. Yes, GeoIP blocking will reduce the scripted attack because the script isn't smart enough to adjust to that block.
You need to be sure you are not blocking any legitimate traffic from those countries.
You need to be sure you are not blocking any legitimate traffic from those countries.
Dale L. Brackin
Support Specialist
English: nativePlease keep in mind my timezone and cultural differences when reading my replies. Thank you!
????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)
Thursday, 02 April 2015 12:38 CDT
DaveOzric
OK, thanks for your help.
I get no legit traffic from these countries, my sites are very localized. If it's not I'll skip this.
Cheers
I get no legit traffic from these countries, my sites are very localized. If it's not I'll skip this.
Cheers
Thursday, 02 April 2015 12:39 CDT
dlb
You're welcome!
Dale L. Brackin
Support Specialist
English: nativePlease keep in mind my timezone and cultural differences when reading my replies. Thank you!
????
My time zone is EST (UTC -5) (click here to see my current time in Philadelphia, PA)