Live data from Hacker News

Ban me at the IP level if you don't like me

boston.conman.org

81–90 of 516 posts

Re: Ban me at the IP level if you don't like me

#81
post #65

Earlier quoted context omitted.

If you are traveling without a vpn then you are asking for trouble

Yes, and I’m arguing that that’s due to companies engaging in silly pseudo-security. I wish that would stop.

It is not silly pseudo-security, it is economics. Ban Chinese, lower your costs while not losing any revenue. It is capitalism working as intended.

Re: Ban me at the IP level if you don't like me

#83
Wouldn't it be better, if there's an easy way, to just feed such bots shit data instead of blocking them. I know it's easier to block and saves compute and bandwidth, but perhaps feeding them shit data at scale would be a much better longer term solution.

Re: Ban me at the IP level if you don't like me

#84
post #24
post #5

Earlier quoted context omitted.

[flagged]

The more we avoid terms, the more negative their connotations become, and the more we forget about history. I would argue, without any evidence, that when terms are used and embraced, they lose their negative connotations. Because in the end, you want to fight the negativity they represent, not the term itself.

Allow/deny list is more descriptive. That's one good reason for using those terms. Do you agree?

In reply to your argument, the deny list (the actual list, apart from what term we use for it) is necessarily something negatively laden, since the items denied are denied due to the real risks/costs they otherwise impose. So using and embracing the less direct phrase 'black' rather than 'deny' in this case seems unlikely to reduce negative connotations from the phrase 'black'.

Re: Ban me at the IP level if you don't like me

#85

This is everything I have for AS132203 (Tencent). It has your addresses plus others I have found and confirmed using ipinfo.io 43.131.0.0/18 43.129.32.0/20 101.32.0.0/20 101.32.102.0/23 101.32.104.0/21 101.32.112.0/23 101.32.112.0/24 101.32.114.0/23 101.32.116.0/23 101.32.118.0/23 101.32.120.0/23 101.32.122.0/23 101.32.124.0/23 101.32.126.0/23 101.32.128.0/23 101.32.130.0/23 101.32.13.0/24 101.32.132.0/22 101.32.132.…

For anyone wondering how to do this (like me from a month or two back).

Here's a useful tool/site:

https://bgp.tools

You can feed it an ip address to get an AS ("Autonomous System"), then ask it for all prefixes associated with that AS.

I fed it that first ip address from that list (43.131.0.0) and it showed my the same Tencent owned AS132203, and it gives back all the prefixes they have here:

https://bgp.tools/as/132203#prefixes

(Looks like roguebloodrage might have missed at least the 1.12.x.x and 1.201.x.x prefixes?)

I started searching about how to do that after reading a RachelByTheBay post where she wrote:

Enough bad behavior from a host -> filter the host.

Enough bad hosts in a netblock -> filter the netblock.

Enough bad netblocks in an AS -> filter the AS. Think of it as an "AS death penalty", if you like.

(from the last part of https://rachelbythebay.com/w/2025/06/29/feedback/ )

Re: Ban me at the IP level if you don't like me

#86

Since I posted an article here about using zip bombs [0], I'm flooded with bots. I'm constantly monitoring and tweaking my abuse detector, but this particular bot mentioned in the article seemed to be pointing to an RSS reader. I white listed it at first. But now that I gave it a second look, it's one of the most rampant bot on my blog. [0]: https://news.ycombinator.com/item?id=43826798

Rule number one: You do not talk about fight club.

Re: Ban me at the IP level if you don't like me

#87
post #69
post #56

Earlier quoted context omitted.

You think all streaming services have banned non US IPs? What world do you live in?

This is based on personal experience. At least two did not let me unsubscribe from abroad in the past.

Not letting you unsubscribe and blocking your IP are very different things.

There are some that do not provide services in most countries but Netflix, Disney, paramount are pretty much global operations.

HBO and peacock might not be available in Europe but I am guessing they are in Canada.

Re: Ban me at the IP level if you don't like me

#88
post #83

Wouldn't it be better, if there's an easy way, to just feed such bots shit data instead of blocking them. I know it's easier to block and saves compute and bandwidth, but perhaps feeding them shit data at scale would be a much better longer term solution.

No serving shit data costs bandwidth and possibly compute time.

Blocking IPS is much cheaper for the blocker.

Re: Ban me at the IP level if you don't like me

#89

We solved a lot of our problems by blocking all Chinese ASNs. Admittedly, not the friendliest solution, but there were so many issues originating from Chinese clients that it was easier to just ban the entire country. It's not like we can capitalize on commerce in China anyway, so I think it's a fairly pragmatic approach.

There's some weird ones you'd never think of that originate an inordinate amount of bad traffic. Like Seychelles. A tiny little island nation in the middle of the ocean inhabited by... bots apparently? Cyprus is another one. Re: China, their cloud services seem to stretch to Singapore and beyond. I had to blacklist all of Alibaba Cloud and Tencent and the ASNs stretched well beyond PRC borders.

its not weird .its companies putting themselves in places where regulations favor their business models.

it wont be all chinese companies or ppl doing the scraping. its well known that a lot of countries dont mind such traffic as long as it doesnt target themselves or for the west also some allies.

laws arent the same everywhere and so companies can get away with behavior in one place which seem almost criminal in another.

and what better place to put your scrapers than somewhere where there is no copyright.

russia also had same but since 2012 or so they changed laws and a lot of traffic reduced. companies moved to small islands or small nation states (favoring them with their tax payouts, they dont mind if j bring money for them) or few remaining places like china who dont care for copyrights.

its pretty hard to get really rid of such traffic. you can block stuff but mostly it will just change the response your server gives. flood still knockin at the door.

id hope someday maybe ISPs or so get more creative but maybe they dont have enough access and its hard to do this stuff without the right access into the traffic (creepy kind) or running into accidentally censoring the whole thing.

Re: Ban me at the IP level if you don't like me

#90
post #28

Earlier quoted context omitted.

Not to mention more descriptive. If you hear the term "allowlist" or "denylist" it is immediately obvious and self-explanatory, with no prior context needed. Leaving aside any other reasons, they're just better names.

And while you're at it, start speaking Esperanto, use the metric system, and switch to a Dvorak keyboard.

No yes no. As for the post you replied to, allow/deny are indeed the more descriptive terms for lists that allow/deny access. Descriptive terms are good and useful.
Post reply on HN