Mastodawn

"we caught one" god. Luxurious.

Once again, I strongly advise you to set up fail2ban so that anyone you serve a 404 catches at least a full day ban, and if you don't care about talking to other people's services, do your best to fully block the IP ranges associated with all the major hosting companies.

https://exple.tive.org/blarg/2025/10/21/raised-shields/

https://infosec.exchange/@foobardevs/116246141464905287

Show thread

Cassandrich

@mhoye Like others have said, please don't. This screws over real ppl (note: blocking "hosting" IP ranges blocks folks with DIY VPNs! This will matter even more if countries start banning commercial VPN services!) and isn't needed to mitigate scraper or vuln scanner hammering. Just heavily throttle addresses as soon as they perform suspicion accesses.