You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@infra.apache.org by "Patrick Taylor Ramsey (JIRA)" <ji...@apache.org> on 2012/08/03 21:15:03 UTC

[jira] [Created] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Patrick Taylor Ramsey created INFRA-5113:
--------------------------------------------

             Summary: Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
                 Key: INFRA-5113
                 URL: https://issues.apache.org/jira/browse/INFRA-5113
             Project: Infrastructure
          Issue Type: Task
      Security Level: public (Regular issues)
            Reporter: Patrick Taylor Ramsey


We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?

Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13430971#comment-13430971 ] 

#asfinfra IRC Bot commented on INFRA-5113:
------------------------------------------

<danielsh> Ban lifted, thanks for looking into the issue.

                
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Closed] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

#asfinfra IRC Bot closed INFRA-5113.
------------------------------------

    Resolution: Fixed
    
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

#asfinfra IRC Bot updated INFRA-5113:
-------------------------------------

    Status: Waiting for user  (was: Waiting for Infra)
    
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "Will Chase (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13430598#comment-13430598 ] 

Will Chase commented on INFRA-5113:
-----------------------------------

Hi -- Will Chase here, one of the sysadmins working on this from our side.

Unfortunately, our ASA's logging capabilities weren't enabled which means we won't be able to retroactively track down the culprit internally. However, we have set up some log collection / aggregation on our end now and will be able to find out who/what is triggering the ban if it happens again.

Apologies for the inconvenience, but could we lift the fail2ban blacklist? Hopefully between educating our users and the monitoring we implemented, this won't be a problem in the future.

Thanks!
                
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "Will Chase (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Will Chase updated INFRA-5113:
------------------------------

    Status: Waiting for Infra  (was: Waiting for user)
    
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "Patrick Taylor Ramsey (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13428428#comment-13428428 ] 

Patrick Taylor Ramsey commented on INFRA-5113:
----------------------------------------------

Ugh.  OK, we'll figure out where that's coming from.  Do you happen to know the dates and/or times of one or more of these events so that we can correlate them to our logs?
                
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13429028#comment-13429028 ] 

#asfinfra IRC Bot commented on INFRA-5113:
------------------------------------------

<danielsh> Last block was triggered at 2012Aug02,23:55 +0000.  I suppose the process is still running --- have a look for connection attempts to 140.211.11.4.

                
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (INFRA-5113) Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org

Posted by "#asfinfra IRC Bot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/INFRA-5113?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13428363#comment-13428363 ] 

#asfinfra IRC Bot commented on INFRA-5113:
------------------------------------------

<danielsh> You were banned for doing about 1M hits/day on one occasion, and then doing a similar number of hits on the day in which the auto-ban for the first occasion expired.  Please stop whatever process you have that is causing these traffic levels.  (If you don't do that, fail2ban will just ban you again even if I manually unban you.)

                
> Our external IP (65.50.196.130) appears to have been blacklisted from svn.apache.org
> ------------------------------------------------------------------------------------
>
>                 Key: INFRA-5113
>                 URL: https://issues.apache.org/jira/browse/INFRA-5113
>             Project: Infrastructure
>          Issue Type: Task
>      Security Level: public(Regular issues) 
>            Reporter: Patrick Taylor Ramsey
>
> We're currently unable to checkout/in from svn.apache.org.  What might have triggered the IP ban, and what should we do to remove it?
> Many thanks.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira