My website-account has been IP-banned (which have been lifted, so everything's fine). I checked the login history and it seems that the account was banned because the IP in question _tried_ to log-in.
The person (or bot) trying to log-in seems to have entered the correct account information and password, which is probably an issue on my side*, but couldn't verify the 2nd factor authentication code.
The authentithicator is meant to prevent unauthorized log-in attempts, which it did just fine.
Anyways, my point is:
You shouldn't be IP-banned for attempted log-ins, only for actually successful log-ins. This would prevent unjustified ip-bans and thus reduce the amount and workload of tickets about IP-bans. Win-Win.
*I made sure to reinstall windows from scratch to eliminate possible malware on my system and changed all my passwords. This aspect doesn't need to be addressed any further in this thread.
-
Member
Revisit how IP-Bans are decided (attempted vs successful logins)
-
Moderator
We actually don't ban IPs for attempted logins without being on a large scale. There is a temporary lock out for entering an invalid password too many times but we aren't throwing out IP bans on a whim in a world full of dynamic allocations. It would also be pointless to ban your IP if we were going after the person who tried logging into your account considering it would have come from their IP.
-
Member
I'm not sure if we misunderstand each other.
My account was banned and the ban is lifted by now. There was a reason displayed (ip is banned due to advertising) and a specific IP was displayed (not my current IP and from another country entirely). I checked the account history and the IP in question has a single attempted log-in ending in "authentithication requested", so they never actually logged in.
This is not a complaint. I appreciate warmane keeping forum and game clear of advertising and bots. I am just surprised a single unsuccessful log-in attempt led to this ban, since this seems like additional work on your side that could've been avoided.
Maybe I am just lacking information and therefore can't really understand the progress leading to an IP-ban. My intention was to bring this to your attention so you might be able to prevent some tickets and have more time for other stuff :)
-
Moderator
Your account wasn't banned, just a banned IP was used to try to connect to it. If you had refreshed your IP to a different one and done a full relog on the website, the ban would be gone and you would be able to connect normally. We have a list of IPs, usually from VPNs and the like, that were consistently used to break our rules, so were banned, but they are specific IPs, not accounts.
-
Member
The IP I was using was an entirely different than the one banned and I did log out/in multiple times. Unless I misunderstand what a "full relog" is, it didn't work like that.
As I said: The banned IP was only used one single time - in an unsuccessful log-in attempt. And logging in with another IP didn't do anything. Which is why I wanted to bring this to your attention.
If you feel everything is working as you want it to, that's fine. You don't owe me an explanation about why something was banned, although I appreciate your feedbac
-
Moderator
Then I don't know what to tell you. That is what players do to access the game normally after a banned IP is used to login to the account, as far as I'm aware.
Quote
