On Wed, Dec 10, 2025 at 07:19:35PM +0100, Nadzeya Hutsko wrote: > Hi all, > > Just to close the loop on this in case it helps others. After discussing > this with Antonio, it turns out that there is currently a fail2ban filter > [1] in place that automatically blocks access based on the User-Agent, > specifically matching Windows, Mac OS (and iOS in practice). This was > introduced as a mitigation against large amounts of bot traffic scraping the > site and hitting the login endpoint. > > As a result, accessing ci.debian.net from a Windows/macOS/iOS device can > trigger an automatic firewall block of the originating public IP. That is > what caused my IP to be blocked. My IP was manually unblocked, thanks to > Antonio, but at the moment I still cannot safely access the service from my > phone without risking another network-wide block. > > This is understandable as a protective measure and explains the behavior I > was seeing. This was just changed and it should be better now.
Attachment:
signature.asc
Description: PGP signature