111–120 of 516 posts
Earlier quoted context omitted.
[flagged]
I'll have the black pudding. My cat has a black tail. The top of my desk is black. I have several pairs of black shoes. Every single computer in my possession has a black case. My phone and its case are both black. Black Power![0][1][2] I will put you on my personal blacklist. Which I'm sure you won't mind since I'm a huge bigot, right? [0] https://www.britannica.com/topic/Black-Power-Movement [1] https://en.wikipedi…
One starts to wonder, at what point might it be actually feasible to do it the other way around, by whitelisting IP ranges. I could see this happening as a community effort, similar to adblocker list curation etc.
That's what I'm trying to do here, PRs welcome: https://github.com/AnTheMaker/GoodBots
Earlier quoted context omitted.
There's some weird ones you'd never think of that originate an inordinate amount of bad traffic. Like Seychelles. A tiny little island nation in the middle of the ocean inhabited by... bots apparently? Cyprus is another one. Re: China, their cloud services seem to stretch to Singapore and beyond. I had to blacklist all of Alibaba Cloud and Tencent and the ASNs stretched well beyond PRC borders.
There is a Chinese player that has taken effective control of various internet-related entities in the Seychelles. Various ongoing court-cases currently. So the seychelles traffic is likely really disguised chinese traffic.
Earlier quoted context omitted.
At that point it almost sounds like we're doing "peering" agreements at the IP level. Would it make sense to have a class of ISPs that didn't peer with these "bad" network participants?
Why not just ban all IP blocks assigned to cloud providers? Won't halt botnets but the IP range owned by AWS, GCP, etc is well known
There’s a great talk on this: Defense by numbers: Making Problems for Script Kiddies and Scanner Monkeys https://www.youtube.com/watch?v=H9Kxas65f7A
What I’d really love to see - but probably never will—is companies joining forces to share data or support open projects like Common Crawl. That would raise the floor for everyone. But, you know… capitalism, so instead we all reinvent the wheel in our own silos.
Earlier quoted context omitted.
This is based on personal experience. At least two did not let me unsubscribe from abroad in the past.
Not letting you unsubscribe and blocking your IP are very different things. There are some that do not provide services in most countries but Netflix, Disney, paramount are pretty much global operations. HBO and peacock might not be available in Europe but I am guessing they are in Canada.
Funny to see how narrow perspective some people have…
Earlier quoted context omitted.
There's some weird ones you'd never think of that originate an inordinate amount of bad traffic. Like Seychelles. A tiny little island nation in the middle of the ocean inhabited by... bots apparently? Cyprus is another one. Re: China, their cloud services seem to stretch to Singapore and beyond. I had to blacklist all of Alibaba Cloud and Tencent and the ASNs stretched well beyond PRC borders.
There is a Chinese player that has taken effective control of various internet-related entities in the Seychelles. Various ongoing court-cases currently. So the seychelles traffic is likely really disguised chinese traffic.
The explanation is that easy??
Earlier quoted context omitted.
I'm not precisely sure the point you're trying to make. In my experience running rather lowish traffic(thousands hits a day) sites, doing just that brought every single annoyance from thousands per day to zero. Yes, people -can- easily get around it via various listed methods, but don't seem to actually do that unless you're a high value target.
It definitely works, since you’re externalizing your annoyance to people you literally won’t ever hear from because you blanket banned them based. Most of them will just think your site is broken.
I have a firewall that logs every incoming connection to every port. If I get a connection to a port that has nothing behind it, then I consider the IP address that sent the connection to be malicious, and I block the IP address from connecting to any actual service ports.
This works for me, but I run very few things to serve very few people, so there's minimal collateral damage when 'overblocking' happens - the most common thing is that I lock myself out of my VPN (lolfacepalm).
I occasionally look at the database of IP addresses and do some pivot tabling to find the most common networks and have identified a number of cough security companies that do incessant scanning of the IPv4 internet among other networks that give me the wrong vibes.
[0]: Uninvited Activity: https://github.com/UninvitedActivity/UninvitedActivity
P.S. If there aren't any Chinese or Russian IP addresses / networks in my lists, then I probably block them outright prior to the logging.