4 ms·

As someone living in Hong Kong I hate cloudflare. Way too many websites behind cloudflare block hong kong or cause me to have a captcha. This causes me to often

by song 7y ago

As someone living in Hong Kong I hate cloudflare. Way too many websites behind cloudflare block hong kong or cause me to have a captcha. This causes me to often route my traffic to my own vpn to counter that which is really annoying. At least I'm lucky enough that my VPN is for some reason still not detected as a cloud hosting provider by either cloudflare or netflix.

RobertRoberts 7y ago
What do you suggest to the people running websites where 90%+ of the hack attempts come from Hong Kong?
- song 7y ago
  Do you have numbers that say that 90%+ hacks come from Hong Kong? I mean I run rather popular websites with a lot of traffic in the US, EU and Asia and I don't see that. I do see that with traffic from China (but then blocking ASN from Aliyun and other cloud provider is enough to stop most of it) but I don't really see that from HK. I would say that blocking all traffic from a region instead of just blocking ASNs from cloud hosts is like using a hammer to kill a fly. It might work but you get collateral damage. And regardless when I do block ASNs, I block uncached resources. What's the point of blocking static pages?
- pavs 7y ago
  Please stop spreading this false narrative: https://www.slashgeek.net/2016/06/07/cloudflare-making-internet-little-bit-faster-select-group-people/ https://www.slashgeek.net/2016/06/07/cloudflare-making-inter... Most network attacks and Spams actually comes from the United States.
  - switch007 7y ago
    I think they were suggesting the websites they run, 90%+ of the attacks come from Hong Kong, i.e. not that 90% of all website attacks come from HK. No way of knowing unless they publish the logs/stats
    - song 7y ago
      I think most likely they are amalgamating Hong Kong and China like some people do on the thread here. And yes, indeed some Data Centers in China are a big source of spam and automated attack, but it just doesn't make sense to block an entire country when you can just block hosting providers.
  - marcus_holmes 7y ago
    The Spamhaus page mentioned in the article you linked: https://www.spamhaus.org/statistics/countries/ https://www.spamhaus.org/statistics/countries/ now shows China as the top malicious country. TFA was written in 2016. In the last 3 years China has overtaken the USA. So it's not a false narrative. Most attacks and spams do come from China, not the US.
- oceanplexian 7y ago
  I’ve been blocked by CloudFlare and have nothing to do in HK, in fact I live in the US and decided to use a fork of Chromium and apparently used an “unacceptable” user agent (which was easily solved by changing it, duh). Screw CloudFlare. They are doing cheap, low quality L7 http traffic filtering.
- falcolas 7y ago
  If they’re failed attempts, why care about them at all? If you have good security practices, you don’t have to worry about the script kiddies. If you have bad security practices, blocking Asia won’t help you.

by song 7y ago

RobertRoberts 7y ago

What do you suggest to the people running websites where 90%+ of the hack attempts come from Hong Kong?

song 7y ago
Do you have numbers that say that 90%+ hacks come from Hong Kong? I mean I run rather popular websites with a lot of traffic in the US, EU and Asia and I don't see that. I do see that with traffic from China (but then blocking ASN from Aliyun and other cloud provider is enough to stop most of it) but I don't really see that from HK. I would say that blocking all traffic from a region instead of just blocking ASNs from cloud hosts is like using a hammer to kill a fly. It might work but you get collateral damage. And regardless when I do block ASNs, I block uncached resources. What's the point of blocking static pages?
pavs 7y ago
Please stop spreading this false narrative: https://www.slashgeek.net/2016/06/07/cloudflare-making-internet-little-bit-faster-select-group-people/ https://www.slashgeek.net/2016/06/07/cloudflare-making-inter... Most network attacks and Spams actually comes from the United States.
- switch007 7y ago
  I think they were suggesting the websites they run, 90%+ of the attacks come from Hong Kong, i.e. not that 90% of all website attacks come from HK. No way of knowing unless they publish the logs/stats
  - song 7y ago
    I think most likely they are amalgamating Hong Kong and China like some people do on the thread here. And yes, indeed some Data Centers in China are a big source of spam and automated attack, but it just doesn't make sense to block an entire country when you can just block hosting providers.
- marcus_holmes 7y ago
  The Spamhaus page mentioned in the article you linked: https://www.spamhaus.org/statistics/countries/ https://www.spamhaus.org/statistics/countries/ now shows China as the top malicious country. TFA was written in 2016. In the last 3 years China has overtaken the USA. So it's not a false narrative. Most attacks and spams do come from China, not the US.
oceanplexian 7y ago
I’ve been blocked by CloudFlare and have nothing to do in HK, in fact I live in the US and decided to use a fork of Chromium and apparently used an “unacceptable” user agent (which was easily solved by changing it, duh). Screw CloudFlare. They are doing cheap, low quality L7 http traffic filtering.
falcolas 7y ago
If they’re failed attempts, why care about them at all? If you have good security practices, you don’t have to worry about the script kiddies. If you have bad security practices, blocking Asia won’t help you.