The brazil attacks apparently come from infected tv boxes. People I know outright block all brazil as it's so bad.
Also as it says on the unban page and forum notices, mobile gnat ips change every 10minutes. Half the attacks we get are from mobile ips. There's no way to deal with this problem.
I can't not ban them else the server goes down because of all the traffic. Unfortunately IP changes between honest users and attacks...I don't have a solution. Mobile networks need to deal with this problem not me. But they never will.
Ip4 vs ip6, I don't know what both addresses are from people. If attacks come from ip6 then ip6 gets banned. If attacks come from ip4 then IP4 gets banned.
I wrote about brazil here
viewtopic.php?p=131614#p131614
I wrote many times people have to use a fixed IP which hasn't been used for mass attacks before. I can't fix this problem. If I allow brazil ips, the server will eventually crash because the traffic is so bad.
I had to stop reporting ips to abuseipdb because their API is very slow and they recently seem to start using Cloudflare who ban me from reporting!! It's stupid. Cloudflare causes me constant problems all the time. It ts a terrible service. I reported the problem many times and no reply. So I have nowhere to send attacking ips anymore. People tell me to use Cloudflare but they will cause more problems than will solve. My server causes problems for people, but there's no solution to this problem. Plus abuse on networks shouldn't be my problem to solve. It's a user and isp problem.
I've have 2 large USA isp get hacked and then get used for attacks. It's in USA news about a year ago. Same problem, I just have to ban ips where attacks come from.
The server is under constant attack. We have been doing really well recently not to have huge timeouts or periods of down time. All IP detection is done automatically on the server. If a lot of ips come from the same range, then the range now gets blocked. So some ips can get banned even when not currently at fault.. But a few hours later and they would have likely resulted in attacks anyway.
Previously I unbanned the ips after some weeks or months. But they never quit. They can get timeout errors for months and they still keep flooding the server. So ips get permanently banned now. I spent 3 months studying all this traffic.. Its just the world we live in now. Users have to use non-infected isp addresses. Its the only current solution. Infected networks and devices is a user and isp problem.. Those I cannot solve.
A lot of other forums remove public access now because the problems are so bad. A lot try to hide behind Cloudflare but it's no better. It maybe helps stop some bad traffic but it also blocks me from accessing sites constantly. Other forums say Cloudflare doesn't help at all and makes matters worse for them also.
I see more and more sites switching to Cloudflare. I understand why but also annoying as it takes 30 seconds to decide if I'm a bot or not. Sites are slower than dial-up internet these days. I've even had massive attacks from Cloudflare own servers!! They can't even protect their own network!! The whole situation is really bad. Sad times ahead for small communities.
The IP check page lists the IP you visit from.. Mobile devices tend to use ip4. PCs tend to use ip6. So the IP listed is correct.. It shows the IP the server sees. It cannot know both..
And don't have time to make mobile friendly pages. My time is limited and I really don't care about tiny mobile screens anyway.
I'm also thinking of removing the unban page. 99% of the time it just gets abuse from users demanding to be unbanned.. Mostly Mobile networks.. Where I even wrote on the same page recently I cannot solve such problems.. Nobody reads...they don't even read what the comments box is for.. Or they are all bots .. So the unban page doesn't really solve anything anymore.
If users use a fixed IP which isn't on a infected network and use devices which are not infected.. Register on the forum then automatically get whitelisted.. Then there are no problems at all.