We have a dynamic firewall that automatically detects and blocks suspicious IPs. In addition, our firewall is connected to Crowdsec's database and uses its Threat Intelligence service to make more accurate decisions.
In general, we want to block as little as possible, but unfortunately, there are certain networks and services from which an unusually large amount of bad traffic originates.
Therefore the following services and sources are either blocked or restricted.
| Known public HTTP(s)/SOCKS Proxies | Blocked |
| Tor Exit Noded | Restricted |
| Spamhaus Listed (https://www.spamhaus.org/drop/) | Blocked |
| Traffic from China | Restricted |
| Traffic from Hong Kong | Restricted |
Restricted in this case means that our services can be accessed from this source, but there are limits like which ports or how often something can be accessed.
