←back to thread

Ban me at the IP level if you don't like me

(boston.conman.org)
597 points classichasclass | 5 comments | 25 Aug 25 04:23 UTC | HN request time: 0.538s | source
Show context
phplovesong ◴[25 Aug 25 06:34 UTC] No.45010894[source]▶
We block China and Russia. DDOS attacks and other hack attempts went down by 95%.

We have no chinese users/customers so in theory this does not effect business at all. Also russia is sanctioned and our russian userbase does not actually live in russia, so blocking russia did not effect users at all.

replies(3): >>45010936 #>>45011063 #>>45012448 #
1. praptak ◴[25 Aug 25 06:58 UTC] No.45011063[source]▶
How did you choose where to get the IP addresses to block? I guess I'm mostly asking where this problem (i.e. "get all IPs for country X") is on the scale from "obviously solved" to "hard and you need to play catch up constantly".

I did a quick search and found a few databases but none of them looks like the obvious winner.

replies(4): >>45011134 #>>45011160 #>>45011377 #>>45012750 #
2. bakugo ◴[25 Aug 25 07:09 UTC] No.45011134[source]▶
Maxmind's GeoIP database is the industry standard, I believe. You can download a free version of it.

If your site is behind cloudflare, blocking/challenging by country is a built-in feature.

3. tietjens ◴[25 Aug 25 07:12 UTC] No.45011160[source]▶
The common cloud platforms allow you to do geo-blocking.
4. spc476 ◴[25 Aug 25 07:54 UTC] No.45011377[source]▶
I used CYMRU <https://www.team-cymru.com/ip-asn-mapping> to do the mapping for the post.
5. preinheimer ◴[25 Aug 25 11:37 UTC] No.45012750[source]▶
MaxMind is very common, IPInfo is also good. https://ipinfo.io/developers/database-download

If you want to test your IP blocks, we have servers on both China and Russia, we can try to take a screenshot from there to see what we get (free, no signup) https://testlocal.ly/