←back to thread

Ban me at the IP level if you don't like me

(boston.conman.org)
597 points classichasclass | 1 comments | 25 Aug 25 04:23 UTC | HN request time: 0s | source
Show context
lwansbrough ◴[25 Aug 25 05:55 UTC] No.45010657[source]▶
We solved a lot of our problems by blocking all Chinese ASNs. Admittedly, not the friendliest solution, but there were so many issues originating from Chinese clients that it was easier to just ban the entire country.

It's not like we can capitalize on commerce in China anyway, so I think it's a fairly pragmatic approach.

replies(6): >>45010748 #>>45010787 #>>45010871 #>>45011590 #>>45011656 #>>45011732 #
lxgr ◴[25 Aug 25 06:10 UTC] No.45010748[source]▶
Why stop there? Just block all non-US IPs!

If it works for my health insurance company, essentially all streaming services (including not even being able to cancel service from abroad), and many banks, it’ll work for you as well.

Surely bad actors wouldn’t use VPNs or botnets, and your customers never travel abroad?

replies(11): >>45010774 #>>45010777 #>>45010786 #>>45010861 #>>45010879 #>>45010925 #>>45011206 #>>45011711 #>>45012110 #>>45013192 #>>45025318 #
lwansbrough ◴[25 Aug 25 06:16 UTC] No.45010774[source]▶
Don't care, works fine for us.
replies(2): >>45010840 #>>45014117 #
1. Nemi ◴[25 Aug 25 14:15 UTC] No.45014117{3}[source]▶
Worked great for us, but I had to turn it off. Why? Because the IP databases that the two services I was using are not accurate enough and some people in the US were being blocked as if they had a foreign IP address. It happened regularly enough I reluctantly had to turn it off and now I have to deal the non-stop hacking attempts on the website.

For the record, my website is a front end for a local-only business. Absolutely no reason for anyone outside the US to participate.