Cloudflare misidentifies Hetzner IPs as being located in Iran

#1

Post by doruk101 » Wed, Sep 18, 2024, 8:46 PM UTC

Cloudflare misidentifies Hetzner IPs as being located in Iran
gitlab.com

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#2

Post by preisschild » Wed, Sep 18, 2024, 9:04 PM UTC

Yeah, google does it too. I could not use certain Hetzner IPs to download container image on my kubernetes nodes at all. Even the official registry.k8s.io registry is hosted on Google Cloud Services and basic stuff like the pause image cant be pulled.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#3

Post by 38 » Wed, Sep 18, 2024, 9:05 PM UTC

I mean, so? Why should it matter where they are located?

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#4

Post by tyree731 » Wed, Sep 18, 2024, 9:06 PM UTC

38 wrote: post #3

I mean, so? Why should it matter where they are located?

You may be surprised to discover that services will filter traffic by location.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#5

Post by reisse » Wed, Sep 18, 2024, 9:07 PM UTC

38 wrote: post #3

I mean, so? Why should it matter where they are located?

A lot of US resources ban traffic outside the US. Or, at least, from "suspicious" or "sanctioned" locations. Some ban EU due to GDPR.

You never know such things when you are in US though...

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#6

Post by greyskull » Wed, Sep 18, 2024, 9:07 PM UTC

Might be pertinent to suffix this with (2023), though I see there are still recent replies

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#7

Post by tgma » Wed, Sep 18, 2024, 9:08 PM UTC

My theory is lots of people who want to circumvent Iranian internet censorship rely on tunnels/VPNs hosted on Hetzner, which correlates those IPs with `Accept-Language: fa` and GPS locations collected from Android or other similar behavior.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#8

Post by VWWHFSfQ » Wed, Sep 18, 2024, 9:11 PM UTC

38 wrote: post #3

I mean, so? Why should it matter where they are located?

My servers ban huge swaths of IPs from certain places that originates enormous amounts of spam, scanners, and other nefarious traffic. It's very effective

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#9

Post by Dalewyn » Wed, Sep 18, 2024, 9:11 PM UTC

38 wrote: post #3

I mean, so? Why should it matter where they are located?

US sanctions prohibit transfer of goods, technologies, information, etc. to Iran.

As a company, this means BSTS (better safe than sorry) CYA (cover your ass) measures for good or worse.

Re: Cloudflare misidentifies Hetzner IPs as being located in Iran

#10

Post by greyface- » Wed, Sep 18, 2024, 9:14 PM UTC

38 wrote: post #3

I mean, so? Why should it matter where they are located?

It's the interpretation of some cloud providers that exchanging datagrams with entities in OFAC-sanctioned countries constitutes a prohibited transaction.