Ask HN: 你会屏蔽 DigitalOcean 吗？
2 分•作者: sugarpimpdorsey•5 个月前
我现在至少已经把他们一半的子网都列入了黑名单。他们似乎托管了大量的僵尸网络流量、端口扫描，以及其他普遍不受欢迎的活动。<p>这样做对吗？是不是一场打地鼠式的徒劳之战？<p>顺便说一句，我从 AWS、Azure 和 Google 那里也收到了不少恶意流量，但我认为这些提供商“太大而不能封锁”——我不能封锁他们大片 IP 空间，否则会破坏互联网。
查看原文
I have at least half their subnets blacklisted at this point. They seem to host a lot of bot traffic, port scans, and other generally unsavoury characters.<p>Is this the wrong approach? A losing battle of whack-a-mole?<p>FWIW I get a not-insignificant amount of malicious traffic from AWS, Azure, and Google but I view these providers as "too big to block" - I can't blacklist large swaths of their IP space without breaking the Internet.