Are you some kind of voyeur that likes to snoop in other people's private business?
Where I go in the internet is my business alone, just like were I go outside my house. And having an online version of China's social credit tracking me online to see if I behave is not a good thing.
You are providing a service that is actively diminishing (already brittle) internet privacy and I have 0 love for people doing that.
This is because they allow businesses to provide their services without breaking the law eg. gambling is legal in some states and illegal in others, betting services need to distinguish/target users accordingly.
Insurance providers might only be licensed in certain states and not in others and also therefore need to correctly distinguish/target users correctly.
US companies are also restricted from doing business with certain embargoed and sanctioned countries and they are expected to use technological tools like IP geolocation to be compliant.
"OFAC makes clear its expectation that companies consider Internet Protocol ("IP") address geolocation data when assessing whether online customers are located in sanctioned jurisdictions." [0]
These and other legitimate usecases are defeated by VPNs.
[0] https://www.mondaq.com/unitedstates/export-controls-trade-in...
TL;DR these VPN offerings don't provide privacy since we are merely exchanging who is doing the surveillance.
Long version: The problem with these are that instead of now denying a service to privacy-conscious users, these users are being profiled big tech companies that can afford to do more sophisticated things like track you across the internet using trackers and browser fingerprinting and thus don't need to rely on IP addresses. By profiling you they are themselves able to guarantee geolocation or to kick you permanently out of their VPN if you violate their arbitrary ToS.
And that they are profiling you is totally making sense too: Otherwise how would they be able to keep any malicious activity at bay.
> legitimate reasons
Yes, these are legitimate reasons. But does the need of a number of profit-based tech companies outweigh the need of society for privacy?
I doubt it! Since it doesn't seem fair that everyone must suffer for the benefit of a few.
The entire problems is made more complicated by:
1) lawmakers that don't understand that you simply cannot perfectly replicate.
It particular the need for geoblocking shows how arbitrary laws even are, if the same thing is lawful in one state but not the next.
Thus it seems contrived to do surveillance on everyone just so that a few companies who insist on having an internet presence can emulate physical geopresence.
There should be a law that states that if it takes too much of a toll on privacy to emulate physical behavior, you should be forbidden to seek to emulate it.
2) the fact that you can put an exact number of how much money you save as a business by using such scores, but you cannot put an exact number on how detrimental privacy loss is, since thst evolves on a very slow timescale. The latter only becomes visible really late, like a silent but terminal disease that barely in the very last stages begins to show itself: For example, when you reach China-style surveillance. Only then most people ask themselves: How did we get there?
To conclude: I don't particularly blaim your service for that since you are simply acting within a web of incentives and probably your livelihood depends on it - and if that is the case you can't possibly be expected to make an obiective decision (sorry if I was a bit harsh in this entire back-and-forth). Though if I were running such a company at least I'd make sure to donate some funds to non-profits that promote privacy and the use of VPNs/Tor for everyone - somewhat similar to CO2 reduction certificates that CO2 emitters buy.
In that context it makes sense that a cloud IP that's used to send mail would be treated with suspicion if it's seen trying to make a purchase on an e-commerce site.
I hope you choke on your own scores when a future-AWS-using-your-scores will deny your servers acces, because you accidentally sent an email from that server that was actually supposed to be doing something else.
When web sites increase the amount of hassling (and make no mistake about it, garbage like this, CAPTCHAs, nonconsensual "SMS 2FA" etc are all just hassles to customers), I file support tickets about their broken website. If a website continues down the path of snake oil to the point of becoming unusable, I generally end up no longer being a customer.
Most bots originate from cloud IPs or hide behind proxies and VPN services. Our scores ensure that the majority of legitimate users i.e. those coming from residential IPs are left alone, with captchas and other verification mechanisms shown to "high risk" users, that is, users visiting from a cloud provider's networks or a known proxy/vpn provider. This can be verified by the number of comments on this thread by users whose home internet IPs showed a high "Trust Score".
So if anything our scores help reduce the hassle or friction that legitimate users are subjected to by the fraud-fighting tactics employed by different websites.
> our scores help reduce the hassle or friction that legitimate users are subjected to
I'm telling you right here, I am a legitimate user and when businesses fall for the garbage story you're pushing, it makes me less likely to remain their customer. Hassling customers with repeated rounds of "click on all the cars" "no you're wrong" is terrible UX. It could be understandable if it popped up after a few failed logins in a row, but putting the nagwall front and center is appalling design.
I look forward to Apple's VPN increasingly demonstrating just how wrong your marginalizing surveillance mindset is.
Please describe one specific trend/activity you're referencing, where an automated user agent specifically facilitates fraud, beyond merely facilitating users that just so happen to have fraudulent intent. Situations where augmented user agents are claimed to be prohibited via bullshit terms of service do not count.
It seems like you're trying to imply an association, while avoiding having to make the "if you have nothing to hide" argument explicitly.
I'm wondering why you expect the websites you're attempting to utilize to understand your intentions are "pure" when I would argue that setup is vastly more commonly used for nefarious purposes.
They do blocking for a reason. I'm sure if you contacted them they would explain they lose $$$$$$ a year due to fraud/abuse/hack/nefarious attempts coming from setups similar to yours, which dwarfs however much you might buy from them. I understand their position.
There are commercial VPN and security solutions etc that would achieve some of the goals - undoubtedly at a higher cost than what you're running. You would essentially paying for a boost in reputation that websites would recognize as being more on the "good" side than "bad".
It's quite unfortunate for you I agree but I don't blame them at all.
A suggestion - get a more premiere data center host and get a /29 network allocated to you (can be using a LLC for privacy). Essentially become a commercial entity and pass the sniff test for a lot of websites.
Or subscribe to a service that does that for you, and your frustrations will melt away.
And yes, I understand these businesses have fallen for snake oil salesmen telling them things like VPSs are indicators of "nefarious purposes". But the actual reality is why would someone with "nefarious purposes" need or want to use a VPS? Rather someone looking to do credit card fraud is going to be using a proxy service that runs through residential connections via cracked machines.
Commercial VPNs, which I also use for some types of traffic, get hassled just as much by websites. So no, that is not a solution.
Getting my own /29 would defeat the entire purpose of browsing from a rotating data center IP, which is to defeat IP-based tracking.
The only way to solve this dynamic is for enough people to start browsing from VPNs, CGNAT, etc, that the snake oil salesmen have to move on to something else.
They are indicators. 95% of the abuse on my VPS came from China, services like Contabo, DigitalOcean, Linode, Azure, Oracle, GCP, M247, and Tor. Some of these are no longer allowed to even reach L7 for my website. One other statistic I noticed is that some of those providers have 0% legitimate traffic.