Live data from Hacker News

Ban me at the IP level if you don't like me

boston.conman.org

1–10 of 516 posts

Re: Ban me at the IP level if you don't like me

#4
post #3

One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.

I admin a few local business sites.. I whitelist all the countries isps and the strangeness in the logs and attack counts have gone down.

Google indexes in country, as does a few other search engines..

Would recommend.

Re: Ban me at the IP level if you don't like me

#6
post #3

One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.

Came here to say something similar. The sheer amount of IP addresses one has to block to keep malware and bots at bay is becoming unmanageable.

Re: Ban me at the IP level if you don't like me

#7
post #3

One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.

I admin a few local business sites.. I whitelist all the countries isps and the strangeness in the logs and attack counts have gone down. Google indexes in country, as does a few other search engines.. Would recommend.

Is there a public curated list of "good ips" to whitelist ?

Re: Ban me at the IP level if you don't like me

#8
post #3

One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.

Unfortunately, well-behaved bots often have more stable IPs, while bad actors are happy to use residential proxies. If you ban a residential proxy IP you're likely to impact real users while the bad actor simply switches. Personally I don't think IP level network information will ever be effective without combining with other factors.

Source: stopping attacks that involve thousands of IPs at my work.

Post reply on HN