Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🚸 Remove false positive (www.)ip-api.com #638

Merged
merged 1 commit into from
Mar 25, 2022

Conversation

thomasmerz
Copy link
Contributor

This PR removes (www.)ip-api.com which is a false positive and fixes #637

It has been also removed from other major blocklists:
https://blocklist-tools.developerdan.com/entries/search?q=ip-api.com

I will also inform the owners of the remaining lists to remove this domain(s).

@spirillen
Copy link
Contributor

This domain is used in many apps to track your were about https://mypdns.org/my-privacy-dns/matrix/-/issues/967390

@funilrys funilrys merged commit 81a604b into Ultimate-Hosts-Blacklist:master Mar 25, 2022
@funilrys
Copy link
Member

This won't actually help.

@funilrys
Copy link
Member

It must be added to Ultimate-Hosts-Blacklist/whitelist - too

@spirillen
Copy link
Contributor

This won't actually help.

Then why did you merge it, and why do you suggest to whitelist a well know in app tracker?

@funilrys
Copy link
Member

funilrys commented Mar 25, 2022

Because I'm in control and I know that this won't do anything for the time being. In fact, it was whitelisted for less than 1h before our automation recollected all datasets.

Actually, by blocking the main page you are also blocking those who are using them for threat analytic. For example, I work I do a lot of threat analytic and ip-api.com (the main domain) is a trustworthy source to get information about an IP.

Let's be fair about the tracking thing. Since when is your public IP private ? That's probably the reason behind the usage of VPN/Proxy and other methods. You only hide your real location. But a public IP will still be used for the communication and traffic.

I'm sure most of us have access log with no anonymised IP address stored in it. Since GPDR, it's a blackbox, but it's still a thing for private blog or project websites. So we all know that our public IP will leave trace somewhere.

What their service can do is literally to put an org/isp name to an IP. I do understand that there is fear around privacy but it's still a helpful site for threat analytic. Alone the last 2 weeks I used that thing to get information about the physical location of threats against dozen of servers...

@thomasmerz thomasmerz deleted the issue_637 branch March 25, 2022 22:17
@thomasmerz
Copy link
Contributor Author

I totally agree with @funilrys - the advantages outweigh the disadvantages. 👍🏻

@thomasmerz
Copy link
Contributor Author

It must be added to Ultimate-Hosts-Blacklist/whitelist - too

Ultimate-Hosts-Blacklist/whitelist#184 😁

funilrys added a commit to Ultimate-Hosts-Blacklist/whitelist that referenced this pull request Mar 26, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[FALSE-POSITIVE] (www.)ip-api.com
3 participants