You will not be able to post if you are still using Microsoft email addresses such as Hotmail etc
See here for more information viewtopic.php?f=20&t=7296
DO NOT USE MOBILE / CGNAT DEVICES WHERE THE IP CHANGES CONSTANTLY!
At this time, it is unfortunately not possible to whitelist users when your IP changes constantly.
You may inadvertently get banned because a previous attack may have used the IP you are now on.
So I suggest people only use fixed IP address devices until I can think of a solution for this problem!

Exxos IP ban check

Latest Atari related news.
User avatar
exxos
Site Admin
Site Admin
Posts: 27530
Joined: Wed Aug 16, 2017 11:19 pm
Location: UK
Contact:

Re: Exxos IP ban check

Post by exxos »

chronicthehedgehog wrote: Tue Oct 01, 2024 10:56 pm I'll avoid the wiki then. Too risky :D
How fast was you typing like 4 letters per second ??

I doubt the search would cause a ban now anyway. I'll add it into my neverending list of things to look into..
troed
Posts: 936
Joined: Mon Aug 21, 2017 10:27 pm

Re: Exxos IP ban check

Post by troed »

exxos wrote: Tue Oct 01, 2024 10:32 pm Look carefully at the search in the URL which goes one letter more each time.. I document the same problem in another thread where the URL has one more letter than the last and it was happening very fast (basically several search same second which isn't normal) .. it's not just a simple search URL...
Completely normal modern search box behaviour.
User avatar
exxos
Site Admin
Site Admin
Posts: 27530
Joined: Wed Aug 16, 2017 11:19 pm
Location: UK
Contact:

Re: Exxos IP ban check

Post by exxos »

troed wrote: Wed Oct 02, 2024 7:19 am Completely normal modern search box behaviour.
It would have been useful if you mentioned that in your previous reply when I first mentioned this problem.
viewtopic.php?p=119614#p119614
troed
Posts: 936
Joined: Mon Aug 21, 2017 10:27 pm

Re: Exxos IP ban check

Post by troed »

I was focusing on the modern download clients opening many connections in that thread. Also, you cannot expect ChatGPT to give valid answers to these things.

You know my suggestion by now - there are plenty of tools that will just solve all of this for you so that you don't have to do all of this manual work yourself.
User avatar
exxos
Site Admin
Site Admin
Posts: 27530
Joined: Wed Aug 16, 2017 11:19 pm
Location: UK
Contact:

Re: Exxos IP ban check

Post by exxos »

Someone reported a CAPTCHA bug on the page earlier which is now fixed.

Also due to the amount of unban requests as mentioned here
viewtopic.php?p=133776#p133776

Every unban request has to be manually reviewed. Having a forum username will greatly help. Forum members get white listed when you stay logged in for at least two hours each week. A script automatically tries to monitor and automatically unban users, which is cycled every two hours also.

Please note there's a lot of information in the server updates thread. Because of the sheer amount of attacks on mobile networks, in particular from Brazil, it is very difficult to differentiate valid traffic from invalid traffic because the IP addresses keep constantly rotating, so I suggest not using a mobile IP unless it is fixed by the mobile networks.

I have had a lot of un-ban requests from Brazil which are listed in major black lists, so these will not be removed even if they are requested. Blocked addresses will only be removed if my server has detected and banned them. I cannot do anything about major blacklists, banning IP ranges.

IPs are automatically reported to the abuse IPDB database every two hours and you can also check if your IP is banned on their site also.

https://www.abuseipdb.com/user/170367

Oddly it only seems to be me reporting the Brazil attacks but I know for a fact that there are other hosts out there which have just outright blocked Brazil totally to avoid the problem. Mamy are already blocking others like Russia and China etc because of the amount of attacks. I am not outright blocking entire countries and trying to filter the traffic and only blocked the bad ones but of course theres likely going to be crossfire in particular on mobile networks where innocent users get mixed in with attackers on the same IP address.
palringo
Posts: 1
Joined: Sat Aug 30, 2025 6:42 am
Location: Rio Grande do Sul, Brazil
Contact:

Re: Exxos IP ban check

Post by palringo »

Responding to exxos regarding the attacks from Brazil: (I used Google Translate, so I don't know how this text turned out) Yeah man, I don't understand this. I live in Brazil, and my ISP uses CGNAT + Dynamic IP. When I restart the router, I get a different IP. So far, so good. But the IPs I get always have reports on AbuseIPDB, most of them are from this site, some anonymous, and some from other sites. Some I got have between 7 and 9 reports. I simply don't understand this. This even happens with the big ISPs; the one I use is a local ISP, not one of the big ones, and when I look at the IPs recently reported on AbuseIPDB, there were some from Brazil that had 12,000 reports. The IPs from the TOR network have between 3,000-6,000 reports. This gets even more confusing when I search for a free online proxy site, I put in a site to see the IP, I get the proxy IP and put it into AbuseIPDB, 0 reports. Seriously, I don't know what's going on in Brazil. Brazil is one of the countries with the most attacks (probably because most people here have outdated PCs and download pirated content from suspicious websites, which become DDoS/Botnet devices).

Another thing I noticed is this, I'll give an example: John's IPv4 is blocked, but his IPv6 isn't. Is there any way to fix this? I think it would significantly reduce attacks. Another thing is that the IP BAN CHECK page shows the IPv6 automatically, requiring you to go to an IP website to get the IPv4 and see if it's banned, because normally the IPv6 isn't banned. And the final thing I wanted to say is that the IP BAN CHECK page isn't optimized for mobile phones, requiring you to zoom in to see the buttons better.

Thank you if I helped you with anything.
User avatar
exxos
Site Admin
Site Admin
Posts: 27530
Joined: Wed Aug 16, 2017 11:19 pm
Location: UK
Contact:

Re: Exxos IP ban check

Post by exxos »

The brazil attacks apparently come from infected tv boxes. People I know outright block all brazil as it's so bad.

Also as it says on the unban page and forum notices, mobile gnat ips change every 10minutes. Half the attacks we get are from mobile ips. There's no way to deal with this problem.

I can't not ban them else the server goes down because of all the traffic. Unfortunately IP changes between honest users and attacks...I don't have a solution. Mobile networks need to deal with this problem not me. But they never will.

Ip4 vs ip6, I don't know what both addresses are from people. If attacks come from ip6 then ip6 gets banned. If attacks come from ip4 then IP4 gets banned.

I wrote about brazil here
viewtopic.php?p=131614#p131614

I wrote many times people have to use a fixed IP which hasn't been used for mass attacks before. I can't fix this problem. If I allow brazil ips, the server will eventually crash because the traffic is so bad.

I had to stop reporting ips to abuseipdb because their API is very slow and they recently seem to start using Cloudflare who ban me from reporting!! It's stupid. Cloudflare causes me constant problems all the time. It ts a terrible service. I reported the problem many times and no reply. So I have nowhere to send attacking ips anymore. People tell me to use Cloudflare but they will cause more problems than will solve. My server causes problems for people, but there's no solution to this problem. Plus abuse on networks shouldn't be my problem to solve. It's a user and isp problem.

I've have 2 large USA isp get hacked and then get used for attacks. It's in USA news about a year ago. Same problem, I just have to ban ips where attacks come from.

The server is under constant attack. We have been doing really well recently not to have huge timeouts or periods of down time. All IP detection is done automatically on the server. If a lot of ips come from the same range, then the range now gets blocked. So some ips can get banned even when not currently at fault.. But a few hours later and they would have likely resulted in attacks anyway.

Previously I unbanned the ips after some weeks or months. But they never quit. They can get timeout errors for months and they still keep flooding the server. So ips get permanently banned now. I spent 3 months studying all this traffic.. Its just the world we live in now. Users have to use non-infected isp addresses. Its the only current solution. Infected networks and devices is a user and isp problem.. Those I cannot solve.

A lot of other forums remove public access now because the problems are so bad. A lot try to hide behind Cloudflare but it's no better. It maybe helps stop some bad traffic but it also blocks me from accessing sites constantly. Other forums say Cloudflare doesn't help at all and makes matters worse for them also.

I see more and more sites switching to Cloudflare. I understand why but also annoying as it takes 30 seconds to decide if I'm a bot or not. Sites are slower than dial-up internet these days. I've even had massive attacks from Cloudflare own servers!! They can't even protect their own network!! The whole situation is really bad. Sad times ahead for small communities.

The IP check page lists the IP you visit from.. Mobile devices tend to use ip4. PCs tend to use ip6. So the IP listed is correct.. It shows the IP the server sees. It cannot know both..

And don't have time to make mobile friendly pages. My time is limited and I really don't care about tiny mobile screens anyway.

I'm also thinking of removing the unban page. 99% of the time it just gets abuse from users demanding to be unbanned.. Mostly Mobile networks.. Where I even wrote on the same page recently I cannot solve such problems.. Nobody reads...they don't even read what the comments box is for.. Or they are all bots .. So the unban page doesn't really solve anything anymore.

If users use a fixed IP which isn't on a infected network and use devices which are not infected.. Register on the forum then automatically get whitelisted.. Then there are no problems at all.
Post Reply

Return to “NEWS & ANNOUNCEMENTS”