I don’t know if anybody else is experiencing this but I thought I ask around.
Since the change from “Geoblock” to the “Location Filter” a lot of IPs get through my country filter which were being successfully blocked before. For example: within a short period several different IPs originating from China Backbone servers (AS4134) came through.
Just to name a few.
I looked up a few of those numbers on ipdeny.com but they were not listed in the cn.zone file. But DNSLYTICS, Cisco Talos Intelligence and Ultratools list them all as originating from China.
But also from other blocked countries IPs were not blocked as accurate as before: AU, PK, BR aso.
To be honest I can’t remember any country I had blocked got thru before.
As I don’t know where the original data being now used comes from I can only speculate but that won’t help me solve this problem.
As this is a major change of how countries are being blocked the information used as it seems is not accurate - whereever.
May be I only looked up the IPs at the wrong places?
Anybody else noticing this too?