4 ms·

Yes but it’s not cheap. Maxmind and ipinfo etc sell a tier that tells you this information, then you can 403 based on it. But the price is nuts like $40,000 a

Yes but it’s not cheap. Maxmind and ipinfo etc sell a tier that tells you this information, then you can 403 based on it. But the price is nuts like $40,000 a year.

KomoD 2mo ago
You don't need to spend anywhere near $40k a year to get that info... You don't even need to spend $1
- gavinhking 2mo ago
  What's your strategy?
sparkling 2mo ago
Focsec.com IP database for offline use (datacenters, VPNs, proxies, bots) runs around $1k/month for internal-only use.
reincoder 2mo ago
I work for IPinfo. We offer IPinfo Lite for free. With a little bit of time in identifying the ASNs, you can implement a decent way to block a good number of bots fairly easily using the free data alone.
- gavinhking 2mo ago
  Good to know, thank you. Would you do this by fully blocking particular ASNs? Or something more granular?
  - reincoder 2mo ago
    You can block entire ASNs. If you are frustrated with bots, blocking Tencent's entire IP address space would have very few downsides. If you have fail2ban or NGINX logs, you can use our CLI to summarize those IPs and identify the ASNs you want to block. But before you block entire ASNs, make sure they are not classified as "ISP" type. For that, visit our website's ASN page first. I have quite a few community posts around this approach. https://community.ipinfo.io/ https://community.ipinfo.io/ If you have raw logs, you can send them to me as well, and I can review them and provide some guidance.
    - gavinhking 2mo ago
      Appreciate it, I'll check out your posts.
yardstick 2mo ago
Open source works just fine for this - take a look at geoacumen-country https://github.com/geoacumen/geoacumen-country https://github.com/geoacumen/geoacumen-country
- VladVladikoff 2mo ago
  Isn’t that only countries though? They were talking about detecting VPS
cullenking 2mo ago
See my comment in the parent - there are cheaper options, don't use maxmind!

Yes but it’s not cheap. Maxmind and ipinfo etc sell a tier that tells you this information, then you can 403 based on it. But the price is nuts like $40,000 a year.

KomoD 2mo ago

You don't need to spend anywhere near $40k a year to get that info... You don't even need to spend $1

gavinhking 2mo ago
What's your strategy?

sparkling 2mo ago

Focsec.com IP database for offline use (datacenters, VPNs, proxies, bots) runs around $1k/month for internal-only use.

reincoder 2mo ago

I work for IPinfo. We offer IPinfo Lite for free. With a little bit of time in identifying the ASNs, you can implement a decent way to block a good number of bots fairly easily using the free data alone.

gavinhking 2mo ago
Good to know, thank you. Would you do this by fully blocking particular ASNs? Or something more granular?
- reincoder 2mo ago
  You can block entire ASNs. If you are frustrated with bots, blocking Tencent's entire IP address space would have very few downsides. If you have fail2ban or NGINX logs, you can use our CLI to summarize those IPs and identify the ASNs you want to block. But before you block entire ASNs, make sure they are not classified as "ISP" type. For that, visit our website's ASN page first. I have quite a few community posts around this approach. https://community.ipinfo.io/ https://community.ipinfo.io/ If you have raw logs, you can send them to me as well, and I can review them and provide some guidance.
  - gavinhking 2mo ago
    Appreciate it, I'll check out your posts.

yardstick 2mo ago

Open source works just fine for this - take a look at geoacumen-country https://github.com/geoacumen/geoacumen-country https://github.com/geoacumen/geoacumen-country

VladVladikoff 2mo ago
Isn’t that only countries though? They were talking about detecting VPS

cullenking 2mo ago

See my comment in the parent - there are cheaper options, don't use maxmind!