Hacker News Reader

Comment by jimrandomh | Hacker News Reader

Have you checked your IP address's reputation with a service such as ipqualityscore.com? If cloudflare thinks your traffic is bot traffic, it's likely that there is bot traffic you don't know about coming from your IP, either from a compromised device on your network or a sketchy VPN product.

View on HN

Also, it doesnt apply to this person if they've had the same IP for years but if your ISP rotates IPs frequently (mine does everytime I reset modem) or you use 5G and CGNAT is being used, its almost a garuntee that your proxy has been labled as having been used by a residential proxy network.

So many people have sketchy TV boxes or whatever other sketchy IOT decice that is a larp for using your network to sell bandwidth to proxy networks.

However, CF is unnecessarily making people on 5G connections from desktops do turnstiles as it looks like a scraper using a mobile proxy. This will become more and more of an issue as more laptops have 5G modems in them. Not sute how this WAF IP fingerprinting model survives widesprear CGNAT. I guess it will be an excuse to more intensly fingerprint us.

>However, CF is unnecessarily making people on 5G connections from desktops do turnstiles as it looks like a scraper using a mobile proxy. This will become more and more of an issue as more laptops have 5G modems in them.

What makes you think this is the cause, rather than something more straightforward like: CGNAT means more users are sharing IPs, and there's a higher chance that the IP pool gets contaminated by bad behavior? Apparently cloudflare tries to detect CGNAT pools and give them more leeway, but at the same time they can't give them unlimited leeway.

[1] https://blog.cloudflare.com/detecting-cgn-to-reduce-collater...

That could be the case, but Im just speaking from my experience I find I get way more turnstiles when using a 5G modem or proxying through my phone. Whatever they're doing, its not reducing collateral damage.

>it's likely that there is bot traffic you don't know about coming from your IP

Maybe from your IP block even. More common since you don't control that.

Google and Cloudflare mark whole ISPs as "sketchy" and there's fuck all you can do about it.

There's one thing: we can try to get every ISP marked as sketchy.

Reply on news.ycombinator.com