[drob518]

But it also highlights the fact that the idea of blocking “dirty IPs” is at best a blunt instrument. Every ISP has abusers. Some are worse than others at self-policing their customers. Cloudflare is reputable and better than most. Given the huge breadth of sites sitting behind Cloudflare, it’s crazy, IMO, to block all of Cloudflare.

[cryptonym]

It does not block all of cloudflare, it blocks their shared IPs. If you are doing serious business you may not want to do it on IPs that are also used for shady content. IP reputation is a well known strategy, used by emails and other firewalls.

[drob518]

Okay, so they aren’t blocking whole ranges. Yea, you definitely don’t want to share an IP with a spammer or malware site. I thought they were blocking whole ranges.

[direwolf20]

In other countries, like Italy, they made a system where domain names are fast-tracked for blocking within minutes. I hate to say it but Spain managed to do something even worse.