Re:API providing threat analysis of any given IP address
by AnkhMorporkian on Saturday August 06, 2016 @03:36PM
(#12239544)
Yup, and I seriously appreciate those that do that, but it's the small providers which inevitably end up screwing us over. Some small VPS company has a vulnerable server that someone makes a VPN on, and suddenly we get a wave of ban evaders. It ends up being a constant headache.
[ Parent
| on HN ]
Re:API providing threat analysis of any given IP address
by dylz on Saturday August 06, 2016 @03:40PM
(#12239556)
If it's default ports, you can just probe on login and deny it. We do this for a game I've admined for, and it's in the terms of service. Common L2TP, PPTP, etc.
Re:API providing threat analysis of any given IP address
by cmdrfred on Saturday August 06, 2016 @04:34PM
(#12239777)
Interesting. So if I put a terms of service discussing it on my blog can I nmap all my visitors?
Re:API providing threat analysis of any given IP address
by swhipple on Saturday August 06, 2016 @07:40PM
(#12240394)
Scanning the defaults for open proxies with a note in the ToS is not super uncommon with some types of services. I don't recommend sweeping random visitors to your website.
Re:API providing threat analysis of any given IP address
by sah2ed on Saturday August 06, 2016 @05:37PM
(#12240041)
Since the OP said:
> I help develop a fairly popular webgame.
... unless the web-based game relies on a plugin that can skirt the browser's sandbox, there's no way to probe for active ports.
Re:API providing threat analysis of any given IP address
by wbl on Saturday August 06, 2016 @06:01PM
(#12240102)
You can ask the server to do it for you.
Re:API providing threat analysis of any given IP address
by MichaelGG on Saturday August 06, 2016 @04:31PM
(#12239764)
Isn't this a lost battle? Only remotely possible due to IPv4 being so limited?
Do you allow normal users to get around banned IPs by buying a pass or something? (Then you can ban the pass, like 4chan.)