![\"\"](\"https:\/\/www.rfdm.com\/blog\/wp-content\/uploads\/2024\/03\/sitetraffic_20240224-20240325.png\")
<\/a><\/figure>\n\n\n\nI’m still working on a larger effort to block all networks inside autonomous systems (ASes) that are cloud providers. That’s because to date, 99.99% of the traffic my site sees from them is unwanted traffic. A miniscule percentage is valid VPN exit traffic. But I’m at the point where I’m no longer going to tolerate the monetized weaponization of cloud infrastructure at my expense. Cloud providers aren’t going to get a free pass anymore. Their behavior at this point is analogous to that of arms dealers. They’re making money selling weapons used against us, and meanwhile try to sell us cloud services for ‘security’. Amazon, Google, Microsoft, OVH, DigitalOcean, Hetzner, Linode, Hurricane Electric and many other smaller hosting service providers… you’re becoming deplorable. You can keep buying up address space and using it against us, but soon I’ll have automation that keeps finding all of your address space and blocking it. And I’ll be putting a JSON file online at least weekly so others can do the same if desired. Parts of your business model are hostile to small websites, and I’m not the only one that’s tired of it. If you’d bother to do DPI and police your own users, I wouldn’t have to spend my time creating this automation.<\/p>\n\n\n\n
In the long run… I’ll go out on a limb and say this model isn’t sustainable. I’m not interested in hosting my applications in someone else’s datacenter, co-resident with vandals (many of whom I’m sure are just as interested in side-channel attacks within the cloud infrastructure as they are in attempting to break in to my web site). And I’m not alone. At some point you’ll have to clean up your act, else large portions of the web just won’t be accessible from your infrastructure because we (those producing content) will just drop all of your traffic (including your search indexing crawlers). It won’t just be the big guys like The New York Times, Reddit, et. al.<\/p>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
I’m basically done with my first pass at manually adding networks to block from my web server, based on my web server logs and a whole lot of queries to dwmrdapd (my secure RDAP aggregator \/ cache). It’s kind of amazing how many HTTP requests are just garbage. My definition of garbage: scraping (presumably to … <\/p>\n