On 11/29/2017 06:48 AM, Kretschmer, Jens wrote:
Hi Steve,
thanks for unblocking the IP. Do you happen to know why it was blocked? I’m experiencing the same issue on other sites (e.g. Nvidia Bug reporting page) too.
Br,
Jens

Your http access was flagged because of URI escape encoding ( https://en.wikipedia.org/wiki/Percent-encoding ), which is not a rare event, but is sometimes used to hide malicious requests.


 Potential http URIescape (hex UTF-8) probe:

  213.136.69.189 - - [29/Nov/2017:07:02:51 -0500] "GET /pipermail/elrepo/2015-December/002905.html%E5%8A%A0%E4%B8%8A+ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com

 Translation:

  213.136.69.189 - - [29/Nov/2017:07:02:51 -0500] "GET /pipermail/elrepo/2015-December/002905.html加上+ HTTP/1.1" 404 381 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"


Your request was not malicious and should not have been blocked. I suspect it was selected for blockage by accident.

The "potential malicious" lists are sometimes long and mistakes happen. :-) Sorry.

Steve
_______________________________________________
elrepo mailing list
[email protected]
http://lists.elrepo.org/mailman/listinfo/elrepo

Reply via email to