just got blocked on wiki.pine64.org

[dieselnutjob]

Hi, I was attempting to edit a page on installing Lazarus and got this error

Code:

You do not have permission to edit this page, for the following reason:

Your IP address has been automatically blocked because it was used by another user, who was blocked by ‪Abcde‬. The reason given is:

Autoblocked because your IP address has been recently used by "Wildfit Review 15".
The reason given for Wildfit Review 15's block is "Abusing multiple accounts"

Start of block: 08:37, 6 October 2020
Expiration of block: 08:37, 7 October 2020
Intended blockee: 192.168.0.1
You may contact ‪Abcde‬ or one of the other administrators to discuss the block.

Note that you may not use the "Email this user" feature unless you have a valid email address registered in your user preferences and you have not been blocked from using it.

Your current IP address is 192.168.0.1, and the block ID is #499. Please include all above details in any queries you make.

I don't have multiple accounts, and it has logged my IP address as a local address 192.168.0.1.

I think that someone has messed up.

[KC9UDX]

Well at least it wasn't 127.0.0.1.

[dieselnutjob]

Well at least it wasn't 127.0.0.1. 

This is a total guess, but I'm guessing that all the traffic into the wiki goes through a reverse proxy of some kind, and therefore ALL of the users come from the same IP address (the proxy).

oops

[bastafari]

Use a VPN for the time being?

Sent from my OnePlus 7 Pro using Tapatalk

[Dendrocalamus64]

Yep, I'm getting the same error message, and it also sees my IP address as 192.168.0.1 . VPN doesn't work, it sees all IPs as 192.168.0.1.
Can't leave a message on Abcde's talk page as we're blocked from editing.

Paging Dr. @fire219 ...

[Avamander]

Yeah, the wiki needs to be configured properly to take the reverse proxy into account.

[dieselnutjob]

Yeah, the wiki needs to be configured properly to take the reverse proxy into account.

Admins should also consider that large companies can have thousands of employees all using the same corporate proxy, and then they all have the same source IP address.

Also it is quite common for mobile connections to be NATed through common IP addresses resulting in the same thing.

There are not enough IPv4 addresses to go around and so assuming that two users on the same IP address is abuse is not a safe assumption.

[Dendrocalamus64]

I don't see them assuming that. The length of block was only 24 hours. The actual reason for blocking was spamming, and when they blocked one account, the spammer just made more from the same IP. The length of block clearly takes into account that the spammer may hop IPs, and that other people may be affected by the block.

Anyway, the block is fixed now.

Here you can see how spammers have been flinging themselves at the wiki:
https://wiki.pine64.org/index.php?title=...:BlockList
https://wiki.pine64.org/index.php?title=...g/newusers

[KC9UDX]

Bots. Probably not abnormal these days.

[LinAdmin2]

Bots.  Probably not abnormal these days.

No doubt that these are automated bots. Although happening very often, IMHO this still is abnormal