3 ms·
IP range blocking is extremely bad practice. You'll lose customers that way. It's like rejecting email addresses that don't end with .com. There are lots of
by nh2 9y ago
IP range blocking is extremely bad practice.
You'll lose customers that way.
It's like rejecting email addresses that don't end with .com.
There are lots of services these days that can "smartly" handle DoS attacks (e.g. only drop traffic from an IP in the range when it starts flooding you).
- Nokinside 9y agoSorry for my ignorance, but how likely it is that customer traffic originates from Hetzner servers? Maybe someone runs VPN's trough them?
- globile 9y agoThis is one possible explanation. For example, You'd be surprised how many people run intrusion attacks from Kaperskys VPN service.... You see Kaperskys IPS on your logs and wonder...
- globile 9y agoRange blocking is the last resort, and we've only done it after alerting Hetzner and getting no response. In any case, we only block for a few hours.... and yes, you definitely risk losing clients. I know Hetzner is not only DE based and many user cases for IPs originating are possible, but luckily DE is not our market.