Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ban me at the IP level if you don't like me

boston.conman.org

Post reply on HN
Print view View original

231–240 of 516 posts

Re: Ban me at the IP level if you don't like me

#231

Post by sarchertech »

ruszki wrote: post #139
yupyupyups wrote: post #43

Earlier quoted context omitted.

And that's perfectly fine. Nothing is completely bulletproof anyway. If you manage to get rid of 90% of the problem then that's a good thing.

Okay, but this causes me about 90% of my major annoyances. Seriously. It’s almost always these stupid country restrictions. I was in UK. I wanted to buy a movie ticket there. Fuck me, because I have an Austrian ip address, because modern mobile backends pass your traffic through your home mobile operator. So I tried to use a VPN. Fuck me, VPN endpoints are blocked also. I wanted to buy a Belgian train ticket still fr…

> I wanted to order something while I was in America at my friend’s place. Fuck me of course. Not just my IP was problematic, but my phone number too.

Your mobile provider was routing you through Austria while in the US?

Re: Ban me at the IP level if you don't like me

#233

Post by preinheimer »

praptak wrote: post #66
phplovesong wrote: post #53

We block China and Russia. DDOS attacks and other hack attempts went down by 95%. We have no chinese users/customers so in theory this does not effect business at all. Also russia is sanctioned and our russian userbase does not actually live in russia, so blocking russia did not effect users at all.

How did you choose where to get the IP addresses to block? I guess I'm mostly asking where this problem (i.e. "get all IPs for country X") is on the scale from "obviously solved" to "hard and you need to play catch up constantly". I did a quick search and found a few databases but none of them looks like the obvious winner.

MaxMind is very common, IPInfo is also good. https://ipinfo.io/developers/database-download

If you want to test your IP blocks, we have servers on both China and Russia, we can try to take a screenshot from there to see what we get (free, no signup) https://testlocal.ly/

Re: Ban me at the IP level if you don't like me

#234

Post by nubinetwork »

poisonborz wrote: post #187

Naive question: why isn't there a publicly accessible central repository of bad IPs and domains, stewarded by the industry, operated by a nonprofit, like W3C? Yes it wouldn't be enough by itself ("bad" is a very subjective term) but it could be a popular well-maintained baseline.

https://xkcd.com/927/

For what it's worth, I'm also guilty of this, even if I made my site to replace one that died.

Re: Ban me at the IP level if you don't like me

#235

Post by 8organicbits »

I've been working on a web crawler and have been trying to make it as friendly as possible. Strictly checking robots.txt, crawling slowly, clear identification in the User Agent string, single IP source address. But I've noticed some anti-bot tricks getting applied to the robot.txt file itself. The latest was a slow loris approach where it takes forever for robots.txt to download. I accidentally treated this as a 404, which then meant I continued to crawl that site. I had to change the code so a robots.txt timeout is treated like a Disallow /.

It feels odd because I find I'm writing code to detect anti-bot tools even though I'm trying my best to follow conventions.

Re: Ban me at the IP level if you don't like me

#238

Post by Jnr »

jrgifford wrote: post #226
Jnr wrote: post #175

Externally I use Cloudflare proxy and internally I put Crowdsec and Modsecurity CRS middlewares in front of Traefik. After some fine-tuning and eliminating false positives, it is running smoothly. It logs all the temporarily banned and reported IPs (to Crowdsec) and logging them to a Discord channel. On average it blocks a few dozen different IPs each day. From what I see, there are far more American IPs trying to ac…

The more egregious attempts are likely being blocked by Cloudflare WAF / similar.

I don't think they are really blocking anything unless you specifically enable it. But it gives some piece of mind knowing that I could probably enable it quickly if it becomes necessary.

Re: Ban me at the IP level if you don't like me

#239

Post by dirkc »

breve wrote: post #223

> Alex Schroeder's Butlerian Jihad That's Frank Herbert's Butlerian Jihad.

Interesting to think that the answer to banning thinking computers in Dune was basically to indoctrinate kids from birth (mentats) and/or doing large quantities of drugs (guild navigators).

Re: Ban me at the IP level if you don't like me

#240

Post by marginalia_nu »

lxgr wrote: post #59
silisili wrote: post #37

Earlier quoted context omitted.

I'm not precisely sure the point you're trying to make. In my experience running rather lowish traffic(thousands hits a day) sites, doing just that brought every single annoyance from thousands per day to zero. Yes, people -can- easily get around it via various listed methods, but don't seem to actually do that unless you're a high value target.

It definitely works, since you’re externalizing your annoyance to people you literally won’t ever hear from because you blanket banned them based. Most of them will just think your site is broken.

This isn't coming from nowhere though. China and Russia don't just randomly happen to have been assigned more bad actors online.

Due to frosty diplomatic relations, there is a deliberate policy to do fuck all to enforce complaints when they come from the west, and at least with Russia, this is used as a means of gray zone cyberwarfare.

China and Russia are being antisocial neighbors. Just like in real life, this does have ramifications for how you are treated.

Post reply on HN