Path: ...!weretis.net!feeder6.news.weretis.net!usenet.blueworldhosting.com!diablo1.usenet.blueworldhosting.com!feeder.usenetexpress.com!tr3.iad1.usenetexpress.com!198.186.191.154.MISMATCH!news-out.netnews.com!fdc2.netnews.com!eu1.netnews.com!not-for-mail
X-Trace: DXC=\GBS2c@Q[iJlGci3SDSG>CU5[F2hIijDO7J470dMQQ7KJ4R`5ADBYnBMo;g06So@_G\lfPTGbeKkKiBDMj4G@SL@f@HSLgR[]oH7dKkgDfTEDLiJPUY0^i>7F
X-Complaints-To: support@frugalusenet.com
Date: Thu, 14 Mar 2024 17:37:13 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Chinese downloads overloading my website
Content-Language: en-US
Newsgroups: sci.electronics.design
References: <7qujui58fjds1isls4ohpcnp5d7dt20ggk@4ax.com> <d16uuihrafv26mcoujjfir0rf9l8td4njk@4ax.com> <uspj9c$91ne$1@dont-email.me> <r4m0vih5e5d4ugd7ru8oo0gb6ppenjrtin@4ax.com>
From: bitrex <user@example.net>
In-Reply-To: <r4m0vih5e5d4ugd7ru8oo0gb6ppenjrtin@4ax.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Lines: 34
Message-ID: <65f36e09$0$3158691$882e4bbb@reader.netnews.com>
NNTP-Posting-Host: 127.0.0.1
X-Trace: 1710452233 reader.netnews.com 3158691 127.0.0.1:45581
Bytes: 2483

On 3/12/2024 9:41 AM, legg wrote:
> On Tue, 12 Mar 2024 12:54:06 +0000, Peter
> <occassionally-confused@nospam.co.uk> wrote:
> 
>> IME, the hidden google re-captcha works brilliantly against bots.
>> Presumably by examining the timing. Set the threshold to 0.6 and off
>> you go. I run a fairly busy tech forum.
>>
>> Another approach is to put your site behind Cloudflare. For hobby /
>> noncommercial sites this is free. And you get handy stuff like
>>
>> - https certificate is done for you
>> - you can block up to 5 countries (I blocked Russia China and India)
>>
>> Ideally you should firewall your server to accept web traffic only
>>from the set of CF IPs, but in practice this is not necessary unless
>> somebody is out to get you (there are websites which carry IP history
>> for a given domain, believe it or not!!!)
> 
> My ISP has finally blocked all China IP addresses from accessing the
> site.
> 
> Maybe that's what the bots want; who knows.
> 
> Haven't had access to the site to find out what the practical result
> is, yet.
> 
> RL


Maybe consider hosting the web server yourself, using a virtual 
machine/Promox as the host and a Cloudflare tunnel for security:

<https://youtu.be/_7ZqMn_C2Dc?si=z5QZ98HUlLT54oPi>