Bug #64857 [Opn->Csd]: Our IP 160.44.248.164 is blocked
| From: | danbrown@php.net | Date: | Thu, 16 May 2013 16:59:30 +0000 |
| Subject: | Bug #64857 [Opn->Csd]: Our IP 160.44.248.164 is blocked | ||
| References: | 1 | Groups: | php.webmaster |
| Request: | Send a blank email to php-webmaster+get-15862@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=64857&edit=1
ID: 64857
Updated by: danbrown@php.net
Reported by: sven dot neumann at de dot trumpf dot com
Summary: Our IP 160.44.248.164 is blocked
-Status: Open
+Status: Closed
Type: Bug
Package: Website problem
Operating System: Irrelevant
PHP Version: Irrelevant
-Assigned To:
+Assigned To: danbrown
Block user comment: N
Private report: N
New Comment:
You are correct with your timing. Your IP address was blacklisted on 11
January, 2013, at 15:34 UTC due to suspicious traffic patterns. The IP was
responsible for numerous "spider-like" requests in very quick succession.
In good faith, I've manually de-listed the IPv4 address from our filters.
Please be advised, though, that if the IP is detected with suspicious patterns
again, it will be blacklisted again, and removal from the filters will no longer
be a possibility.
Thank you.
Previous Comments:
------------------------------------------------------------------------
[2013-05-16 10:00:18] sven dot neumann at de dot trumpf dot com
Description:
------------
Our IP 160.44.248.164 is blocked
We cannot access most pages on php.net. This affects all European subsidiaries of TRUMPF. Our
worldwide sites are not affected, they use different proxies.
Example page with access allowed:
http://de1.php.net/
Example pages with access forbidden (403):
http://php.net/manual/de/function.mysql-escape-string.php
http://php.net/manual/de/configuration.changes.php
http://php.net/archive/2012.php#id2012-12-21-1
http://php.net/manual/en/book.bc.php
The block is active since before 2013/01/11 until now. I tested with different browsers (ie,
firefox, crome) and with OS independent network analyzer.
I posted a HTTP analyzer report to "Actual result". It was OCRed from a picture (sorry no
other way) so it may contain errors.
There may be a connection to Bug Report #64772 - but i dont know if it is the same probleme there.
Actual result:
--------------
Hypertext Transfer Protocol
HTTP/1.1 403 Forbidden\râ\n
[Expert Info (chat/sequence): HTTP/1.1 403 Forbidden\r\n]
[Message: HTTP/1.1 403 Forbidden\r\n]
[severity level: chat]
[Group: sequence]
Request version: HTTP/1.1
status code: 403
Response Phrase: Forbidden
Date: Fri, 25 Jan 2013 08:27:12 GMT\r\n
server: Apache/2.2.21 (FreessD) mod_ssl/2.2.21 openssL/0. 9. 8q PHP/5.4.11-dev\r\n
vary: Accept-Encoding\r\n
content-Length: 351\r\n
content-Type: text/html; charset=iso-8859-1\r\n
Proxy-connection: Keep-Al i ve\r\n
connection: Keep-Al i ve\r\n
content-Encoding: gzi p\r\n
Age: 0\r\n
\r \n
content-encoded entity body (gzip): 351 bytes -> 475 bytes
Line-based text data: text/html
<!DOcTYPE HTML PUBLIC â-//IETF//DTD HTML 2.0//ENâ>\n
<html >czhead>\n
<title>403 Forbidden</title>\n
</head><body>\n
<hl>Forbi dden</hl>-\n
<p>You donât have permission to access /manual/de/configuration.changes.php\n
on this server.</p>\n
<p>Additionally, a 403 Forbidden\n
error was encountered while trying to use an ErrorDocument to handle the request..</p>\n
<hr>\n
<address>Apache/2.2.21 (FreeesD) mod_ssl/2.2.21 openssL/0.9.8q PHP/5.4.11âdev server at
php.net Port 80</address>-\n
</body>c/html >\n
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=64857&edit=1