Skip to content

Comment on Analyzing the attacks on my website

Comments

Blindly blocking IP addresses seems like a bad idea; how many are DHCP'ed residential addresses with a short lease?

Isn’t this the concept of the fail2ban software used on almost every linux server?

With a essential difference, the ban is time limited.

fail2ban is typically set to block IPs for a limited amount of time only (and not really used on "almost every" linux server)

I have some personal services that I frankly don't expect or want many outsiders, and it's extremely unlikely they'd come from China so I just blacklist a chunk of IPs.

Does anyone do short leases anymore? My cablemodem is technically assigned by DHCP, but it hasn't changed in years.

Widely varies in provider. I’ve had providers who, for a business customer no less, had incredibly short-lived DHCP leases. Presumably to help motivate the business customer to pay them for a Static IP.

Yes, DSL and mobile broadband.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.