Tell HN: Uceprotect is extorting website owners

Hacker News Top News

Summary

A Hacker News poster alleges that UCEPROTECT blacklists entire hosting ASNs such as DigitalOcean's ASN 14061 and charges $30/month (or $108/year) to whitelist innocent sites, affecting mobile carriers like Orange that rely on the blacklist.

I recently discovered by accident that our website was being blocked by Orange&#x27;s security filters.<p>After a quick check, I found that our IP address is listed on UCEPROTECT Level 3. The listing is based on the reputation of the entire ASN 14061 (DigitalOcean, US) [1]. In other words, even if your IP did nothing wrong, it will still be listed because of its ASN.<p>If your site is innocent and listed only because it&#x27;s hosted on DigitalOcean, UCEPROTECT offers to whitelist it for about $30&#x2F;month or $108&#x2F;year [2].<p>I checked the ASNs of several other popular hosting providers, and they&#x27;re all listed too. So if your site is hosted on DigitalOcean or any other major provider, it&#x27;s probably blacklisted as well. That can cut you off from customers on mobile networks like Orange, whose &quot;cybersecurity protection&quot; uses blacklists like UCEPROTECT to filter traffic.<p>Honestly, in my 20-year career, this is the first time I&#x27;ve seen a blacklist misbehave this badly and ask for money when there&#x27;s clearly been no wrongdoing.<p>[1] http:&#x2F;&#x2F;www.uceprotect.net&#x2F;en&#x2F;rblcheck.php?asn=14061<p>[2] https:&#x2F;&#x2F;www.whitelisted.org&#x2F;
Original Article

Similar Articles

Ask HN: Crooked Timber showed showed me a virus captcha, What now?

Hacker News Top

A Hacker News user recounts almost falling for a fake Claude download link that presented a malware captcha, criticizing Google's search ranking, Safari's hidden URL path, and Anthropic hosting user content on its main domain as contributing factors.

en-html.org is a Scam Site

Lobsters Hottest

A scam group operating under en-html.org is emailing website administrators, claiming ownership of dead domains and requesting links be redirected to their mirrors in an attempt to game search rankings for future SEO services. The author recommends ignoring the emails, pointing links to archive.org instead, and possibly blackholing the domain via DNS.

Blocking an ASN (or similar) from my sites

Lobsters Hottest

A technical guide on blocking entire ASNs and cloud provider IP ranges from websites to mitigate unwanted bot and AI scraper traffic, using iptables and consolidation tools like net-consolidator and cidr-aggregator.