Exxos IP ban check

[exxos]

https://www.exxosforum.co.uk:8085/IP_CHECK/

If anyone thinks they are IP banned they can use this page to validate their IP address and request removal.

Of course this page will not work if you are IP banned, but as this page will likely end up quickly on Google and known to all the users now, you can use a site such as https://www.proxysite.com/ to access the forum and request removal that way.

Removals are not instant. I would need to check the log to see which rule banned the IP and for what reason, Which could take anywhere from a few minutes to a few days. However it is possible that some previously faulty rules may have a small number of IPs banned for some days yet, but would/should ultimately be removed anyway.

The "last updated" time is the time the IP ban list was last updated for the tool. It's generally done about once a hour.

Some IP addresses may have inadvertently got banned yesterday due to a overprotective firewall being installed. It has since been tamed and told to chill out a bit now! :lol:

[stephen_usher]

Now you just need a web page outside the ban so those people banned can contact you about being banned otherwise they can't unban themselves or find out how to do so, 'cos they're banned. :lol:

[exxos]

Now you just need a web page outside the ban so those people banned can contact you about being banned otherwise they can't unban themselves or find out how to do so, 'cos they're banned. :lol:

You didn't read what I wrote did you... :chairsmack:

[exxos]

Some requested 82.41.16.198 be removed, but that IP has highly unusual traffic which led to it being banned in the first place...

Code: Select all

82.41.16.198 - - [01/Oct/2024:00:05:28 +0100] "GET /index.php?title=Special:Random HTTP/2.0" 302 0 "https://www.atari-wiki.com/index.php?title=Marcel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:29 +0100] "GET /index.php?title=4PAK HTTP/2.0" 200 6194 "https://www.atari-wiki.com/index.php?title=Marcel" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:32 +0100] "GET /load.php?lang=en-gb&modules=jquery.highlightText%2Csuggestions%7Cmediawiki.searchSuggest&skin=vector&version=1sr0q HTTP/2.0" 200 6984 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:34 +0100] "GET /api.php?action=opensearch&format=json&formatversion=2&search=s&namespace=0&limit=10 HTTP/2.0" 403 73 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:34 +0100] "GET /api.php?action=opensearch&format=json&formatversion=2&search=ste&namespace=0&limit=10 HTTP/2.0" 403 73 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:34 +0100] "GET /api.php?action=opensearch&format=json&formatversion=2&search=stev&namespace=0&limit=10 HTTP/2.0" 403 73 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:35 +0100] "GET /api.php?action=opensearch&format=json&formatversion=2&search=stevi&namespace=0&limit=10 HTTP/2.0" 403 73 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:35 +0100] "GET /api.php?action=opensearch&format=json&formatversion=2&search=stevie&namespace=0&limit=10 HTTP/2.0" 403 73 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
82.41.16.198 - - [01/Oct/2024:00:05:35 +0100] "GET /index.php?search=stevie&title=Special%3ASearch&go=Go HTTP/2.0" 302 0 "https://www.atari-wiki.com/index.php?title=4PAK" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"

So it will not be removed from the ban list ( there be no point) as it's not typical "user traffic" its some broken bot at work.

IPs are generally unbanned automatically after some hours / days. But such actions again, lead to another ban period.

[chronicthehedgehog]

That was me.

I was looking at random wiki pages and the page on opening borders then searched for Stevie as I was going to reference my Vim port on it.

Is that odd?? :D

[chronicthehedgehog]

You should probably remove 'random link' :D

[exxos]

Look carefully at the search in the URL which goes one letter more each time.. I document the same problem in another thread where the URL has one more letter than the last and it was happening very fast (basically several search same second which isn't normal) .. it's not just a simple search URL...

Capture.PNG

Different IP but same weird problem..
viewtopic.php?p=119614#p119614

I clicked random page several times and it just goes to a random page and exactly reflects the expected URL in the log.

It also blocked the API due to these odd problems.. but your IP still was hitting the API in the odd way anyway. It chucks out an errors several times before it gives up and bans.

[chronicthehedgehog]

Is there a javascript autocomplete on that text field? One that queries with each new keypress?

[exxos]

Is there a javascript autocomplete on that text field? One that queries with each new keypress?

No idea. I typed "hello" in the search and nothing appeared in the log. I typed "ste" and nothing happened either. But maybe it was doing that with the API enabled.. It did have some search suggestions which are no longer there it seems.. so I guess its a plausible idea..

[chronicthehedgehog]

I'll avoid the wiki then. Too risky :D