News for hackers. Stuff that matters.

A comment on Tell HN: A case of negative SEO I caught on my service and how I dealt with it. Parent comment

Re:Tell HN: A case of negative SEO I caught on my service an... by santah on Friday February 12, 2021 @06:32AM (#26112541)
Including all IPs I blocked today, they're spread between 5 different ASNs. I may resort to blocking them eventually, but for now - individually blocking the IPs (even in the thousands as it is) - seems to be working well enough.

As for user agent - they're using a very common, real browser user agent that's impossible to distinct from legit users.

[ Parent | on HN ]
Re:Tell HN: A case of negative SEO I caught on my service an... by eythian on Friday February 12, 2021 @08:57AM (#26113659)
If you can look closer at the HTTP requests, it may still be distinct. For example, the header order may not match any legitimate browser, or some other header doesn't make sense in the context of that UA.
[ Parent | on HN ]
Re:Tell HN: A case of negative SEO I caught on my service an... by Gys on Friday February 12, 2021 @06:49AM (#26112674)
Do you have many users in Russia? You could block the whole country ;-)

Russia has no GDPR or something. So you could put (special key in) a cookie? They probably do not process it so subsequent requests without a cookie are to be discarded?

[ Parent | on HN ]
Re:Tell HN: A case of negative SEO I caught on my service an... by lewiscollard on Friday February 12, 2021 @08:36AM (#26113459)
> Russia has no GDPR or something. So you could put (special key in) a cookie?

It is entirely permissible under the GDPR to use cookies for security purposes.

[ Parent | on HN ]