Application-level banning seems very inefficient, these domains should be banned at the network (IP) level. Just drop any incoming packets from these domains/IPs, send absolutely nothing back that even confirms that you exist.

▲

switz 4 hours ago | parent [-]

They are banned at the edge in Cloudflare (now), they never hit my application.

▲

elp 4 hours ago | parent | next [-]

From a domain registry operators point of view Cloudflare are the worst of the bunch by orders of magnitude.

Google DNS are busy but its a hand full of IPs and reasonable. Cloudflare is non-stop never ending traffic. I don't know WTF they are trying to get. I've also seen TCP queries from those same Cloudflare IPs so this is not the result of a DDOS attack on them.

	▲	esseph 2 hours ago \| parent [-]
		> Cloudflare is non-stop never ending traffic. I don't know WTF they are trying to get. I've also seen TCP queries from those same Cloudflare IPs 1. Breach router or desktop that hasn't been patched in ages via mass script 2. Establish C&C using cloudflare tunnels 3. Sell these hacked systems as residential proxy endpoints to everybody from state actors to teenagers 4. Some of them will be data scraping services You are chasing your tail trying to ban by ASN or IP. It may work for another couple of months, at best.

▲

peter_retief an hour ago | parent | prev [-]

Cloudflare do a great job, I noticed moving from another VM.

	▲	katsuosan 16 minutes ago \| parent [-]
		at controlling internet sure