Re:Delete FROM users WHERE location = 'Iran';
by behnamoh on Tuesday September 23, 2025 @12:42PM
(#45349481)
If someone from Iran wants to do DDoS attacks they probably know enough to change their own IP to somewhere else so your blocking Iranian IPs is basically futile.
Re:Delete FROM users WHERE location = 'Iran';
by kelnos on Tuesday September 23, 2025 @05:29PM
(#45352996)
The blanket actions you can take to reduce your attack surface will often work to stamp out low/mid effort attacks, but the more sophisticated attackers who really want to specifically target you will take the time to get around these simpler countermeasures. That doesn't make those countermeasures useless, though.
As a service owner currently looking at adding widescale blocks based on location... it's not a global business, so the downside of blocking an entire country is functionally zero and the upside of easily removing a tonne of compromised machines from the 'can try to DDoS us' pool is noticeable.