Live data from Hacker News

Ban me at the IP level if you don't like me

boston.conman.org

371–380 of 516 posts

Re: Ban me at the IP level if you don't like me

#371
post #289

Earlier quoted context omitted.

Also baffled that three separate people came to that conclusion. Do they not run web servers on the open web or something? Script kiddies are constantly probing urls, and urls come up in your logs. Sure it would be bad if that was how your app was architected. But it's not how it's architected, it's how the skids hope your app is architected. It's not like if someone sends me a request for /wp-login.php that my rails…

> Do they not run web servers on the open web or something? Until AI crawlers chased me off of the web, I ran a couple of fairly popular websites. I just so rarely see anybody including passwords in the URLs anymore that I didn't really consider that as what the commenter was talking about.

Just about every crawler that tries probing for wordpress vulnerabilities does this, or includes them in the naked headers as a part of their deluge of requests.

Re: Ban me at the IP level if you don't like me

#372
I would never have considered this, but someone on HN pointed out that web user agents work like this. Servers send ads and there is no way for them to enforce that browsers render the ads and hide the content or whatever. The user agent is supposed to act for the user. "Your business model is not my problem", etc.

Well, my user agents work for me, not for you - the server guy who is complaining about this and that. "Your business model is not my problem". Block me if you don't want me.

https://news.ycombinator.com/item?id=44975697

Re: Ban me at the IP level if you don't like me

#373
post #254

Earlier quoted context omitted.

I forgot about that: all the nice game binaries from them running directly on nearly all systems...

Huh? Who is them in this case?

They're referring to the fact that Chinese game companies (Tencent, Riot through Tencent, etc.) all have executables of varying levels of suspicion (i.e. anti-cheat modules) running in the background on player computers.

Then they're making the claim that those binaries have botnet functionality.

Re: Ban me at the IP level if you don't like me

#375
post #31

Earlier quoted context omitted.

Why stop there? Just block all non-US IPs! If it works for my health insurance company, essentially all streaming services (including not even being able to cancel service from abroad), and many banks, it’ll work for you as well. Surely bad actors wouldn’t use VPNs or botnets, and your customers never travel abroad?

And across the water, my wife has banned US IP addresses from her online shop once or twice. She runs a small business making products that don't travel well, and would cost a lot to ship to the US. It's a huge country with many people. Answering pointless queries, saying "No, I can't do that" in 50 different ways and eventually dealing with negative reviews from people you've never sold to and possibly even never ta…

At that point, I wonder if an online shop is even necessary. Just sell in-person.

Re: Ban me at the IP level if you don't like me

#376

Earlier quoted context omitted.

Let's suppose I'm running a residential proxy. Of course my home IP address changes every day, so you'll end up blocking my entire ISP (a major one) or city (a major one) one by one. And what if I'm behind CGNAT? You will block my entire ISP or city all in one go, and get complaints from a lot of people.

If enough websites block the entire ISP / city in this way, *and* enough users get annoyed by being blocked and switch ISPs, then the ISPs will be motivated to stay in business and police their customers' traffic harder. Alas, the "enough users get annoyed by being blocked and switch ISPs" step will never happen. Most users only care about the big web properties, and those have the resources to absorb such crawler tr…

Indeed. This is why it was important that "net neutrality" not be the law. ISPs need the power to police their user traffic.

Re: Ban me at the IP level if you don't like me

#377
post #223

> Alex Schroeder's Butlerian Jihad That's Frank Herbert's Butlerian Jihad.

To be fair, he was referring to a post on Alex Schroeder's blog titled with the same name as the term from the Dune books. And that post correctly credits Dune/Herbert. But the post is not about Dune, it's about Spam bots so it's more related to what the original author's post is about. Speaking of the Butlerian Jihad, Frank Herbert's son (Brian) and another author named Kevin J Anderson co-wrote a few books in the D…

That's really hard to believe. Brian Herbert's stuff seems sort of Fan Fiction In The World of Dune. Nothing wrong with fan fiction: The Last Ringbearer etc. are pretty enjoyable. But BH just follows on. His work has a bit of the feeling of people who lived in the ruins of the roman forum https://x.com/museiincomune/status/1799039086906474572

Re: Ban me at the IP level if you don't like me

#378

I work for IPinfo. If you need IP Address CIDR blocks for any country or ASN, let me know. I have our data in front of me and can send it over via Github Gist. Thank you.

I’ve been having a heck of a time figuring out where some malicious traffic is coming from. Nobody has been able to give me a straight answer when I give them the ip: 127.1.5.12 Maybe you can help trace-a-route to them? I’d just love to know whois behind that IP. If nothing else, I could let them know to be standards compliant and implement rfc 3514.

Re: Ban me at the IP level if you don't like me

#379
post #317

Earlier quoted context omitted.

Thousands of requests per hour? So, something like 1-3 per second? If this is actually impacting perceived QoS then I think a gitea bug report would be justified. Clearly there's been some kind of a performance regression. Just looking at the logs seems to be an infohazard for many people. I don't see why you'd want to inspect the septic tanks of the internet unless absolutely necessary.

I love the snark here. I work at a hosting company and the only customers who have issues with crawlers are those who have stupidly slow webpages. It’s hard to have any sympathy for them.

Isn't it part of your job to help them fix that?

Re: Ban me at the IP level if you don't like me

#380

Earlier quoted context omitted.

If enough websites block the entire ISP / city in this way, *and* enough users get annoyed by being blocked and switch ISPs, then the ISPs will be motivated to stay in business and police their customers' traffic harder. Alas, the "enough users get annoyed by being blocked and switch ISPs" step will never happen. Most users only care about the big web properties, and those have the resources to absorb such crawler tr…

Indeed. This is why it was important that "net neutrality" not be the law. ISPs need the power to police their user traffic.

It doesn't have anything to do with net neutrality. It's simply a matter of responding to abuse complaints seriously.
Post reply on HN