3 ms·

I’ve just taken to blocking entire swaths of cloud services IP networks. I don’t care what the intentions are, my personal sites don’t get the infinite bandwid

by epc 2y ago

I’ve just taken to blocking entire swaths of cloud services IP networks. I don’t care what the intentions are, my personal sites don’t get the infinite bandwidth to put up with a thousands of poorly written spiders.

neilv 2y ago
Is there a public list of those address blocks, which you'd recommend?
- epc 2y ago
  Not that I know of, but each service seems to publish a list (some in text, some JSON). I’ll reply later with the URLs of the ones I have.
  - epc 2y ago
    This is what I have, see another reply for shared IP lists: https://ip-ranges.amazonaws.com/ip-ranges.json https://www.digitalocean.com/geo/google.csv https://www.gstatic.com/ipranges/cloud.json
  - epc 2y ago
    I also found this but haven't validated it yet: https://github.com/femueller/cloud-ip-ranges https://github.com/femueller/cloud-ip-ranges
- Maxion 2y ago
  There are lists, e.g. https://www.spamhaus.org/resource-hub/dnsbl/the-return-of-the-asn-drop/ https://www.spamhaus.org/resource-hub/dnsbl/the-return-of-th... https://github.com/X4BNet/lists_vpn https://github.com/X4BNet/lists_vpn https://github.com/tobilg/public-cloud-provider-ip-ranges https://github.com/tobilg/public-cloud-provider-ip-ranges
- Avamander 2y ago
  Set up a honeypot, or more like a booby trap, and boldly ban all IPs that access it. Then you can consider banning OVH, DO, AWS, GCP, Oracle, China, Russia.
  - neilv 2y ago
    Honeypot is a good idea, but not for my immediate little one-server Web site startup. On blocking country address ranges, my idealist side hopes that doesn't prove necessary. I personally know nice people in both of those countries.
    - Avamander 2y ago
      It's just an inevitability due to poor abuse handling (or lack thereof) in those countries. Some people might be nice but it's a minuscule part of the absolute flood of malicious traffic originating from those countries. If people in those countries do not like such treatment, I'm so sorry, but they should force their ISPs to clean up their act. It's insane.
MathMonkeyMan 2y ago
I use a VPN when bittorrent is running, and I've found that several websites outright block me "for security reasons." They like to show me my IP address, too, like a great secret has been revealed and the SWAT team is on their way.

by epc 2y ago

neilv 2y ago

Is there a public list of those address blocks, which you'd recommend?

epc 2y ago
Not that I know of, but each service seems to publish a list (some in text, some JSON). I’ll reply later with the URLs of the ones I have.
- epc 2y ago
  This is what I have, see another reply for shared IP lists: https://ip-ranges.amazonaws.com/ip-ranges.json https://www.digitalocean.com/geo/google.csv https://www.gstatic.com/ipranges/cloud.json
- epc 2y ago
  I also found this but haven't validated it yet: https://github.com/femueller/cloud-ip-ranges https://github.com/femueller/cloud-ip-ranges
Maxion 2y ago
There are lists, e.g. https://www.spamhaus.org/resource-hub/dnsbl/the-return-of-the-asn-drop/ https://www.spamhaus.org/resource-hub/dnsbl/the-return-of-th... https://github.com/X4BNet/lists_vpn https://github.com/X4BNet/lists_vpn https://github.com/tobilg/public-cloud-provider-ip-ranges https://github.com/tobilg/public-cloud-provider-ip-ranges
Avamander 2y ago
Set up a honeypot, or more like a booby trap, and boldly ban all IPs that access it. Then you can consider banning OVH, DO, AWS, GCP, Oracle, China, Russia.
- neilv 2y ago
  Honeypot is a good idea, but not for my immediate little one-server Web site startup. On blocking country address ranges, my idealist side hopes that doesn't prove necessary. I personally know nice people in both of those countries.
  - Avamander 2y ago
    It's just an inevitability due to poor abuse handling (or lack thereof) in those countries. Some people might be nice but it's a minuscule part of the absolute flood of malicious traffic originating from those countries. If people in those countries do not like such treatment, I'm so sorry, but they should force their ISPs to clean up their act. It's insane.

MathMonkeyMan 2y ago

I use a VPN when bittorrent is running, and I've found that several websites outright block me "for security reasons." They like to show me my IP address, too, like a great secret has been revealed and the SWAT team is on their way.