{"id":5598,"date":"2018-08-29T16:31:22","date_gmt":"2018-08-29T16:31:22","guid":{"rendered":"https:\/\/www.use-snip.com\/kb\/?post_type=ht_kb&p=5598"},"modified":"2020-08-07T13:48:27","modified_gmt":"2020-08-07T13:48:27","slug":"ip-ban-report","status":"publish","type":"ht_kb","link":"https:\/\/www.use-snip.com\/kb\/knowledge-base\/ip-ban-report\/","title":{"rendered":"IP Blocked Report"},"content":{"rendered":"

The IP Blocked Report displays a list of all IPs that the SNIP<\/strong><\/span> node has blocked, both permanently<\/em> and on a temporary<\/em> basis.\u00a0 A history of the recent past blocked events are also displayed.<\/p>\n

The primary purpose of this report is to quickly see if a specific IP has been blocked\/banned when trouble shooting connection issues.\u00a0 When requested by the SNIP<\/strong><\/span> node operator, all of the IP details are displayed.\u00a0 When used in a web page (such as the STATUS<\/strong> <\/a>report), the specific IP addresses are obscured to protect the privacy of the remote users.<\/p>\n

A secondary use of this report is to review what users\/devices are being blocked over and over<\/em> again.\u00a0 These are most typically users with mis-configured NTRIP Clients or Servers, rather than hostile DOS attacks.\u00a0 After review, the SNIP<\/strong><\/span> node operator may elect to block the offending IP for a longer period of time, or even permanently<\/em>.<\/p>\n

Remote IPs get blocked after making multiple abusive connections a row.\u00a0 Any correct (successful) connection event from that IP resets the various counters used to determine if an IP is blocked.\u00a0 The thresholds can be set by the SNIP<\/strong><\/span> operator to suit local needs.\u00a0 The\u00a0 general functionality and use is described in two articles, here<\/a> and here<\/a>.\u00a0 The IP Banning feature is not supported in the Lite<\/em><\/strong><\/span> editions of SNIP<\/strong><\/span>.<\/p>\n

When the IP Blocked Report is displayed on a public page, only the IP and time is provided.\u00a0 And the IP value is obscured to some degree to protect privacy but to allow a remote user to find their own IP on the list. The name of the last mountPt involved in the block may also be hidden, but is displayed when requested from the SNIP<\/strong><\/span> console by the operator.<\/p>\n

A typical IP BLocked Report is shown below\u00a0 (taken from the RTK2go.com<\/a> Caster).\u00a0 In this case the IPs shown have been further obscured.<\/p>\n

\"\"<\/p>\n

When the IP Blocked Report is part of the general STATUS<\/strong><\/a> report, fewer details are given. The same report above appears as:<\/p>\n

\"\"<\/p>\n

When the lower octet is blocked for an entire IP sub range, the\u00a0 last digit is displayed as “*” as in “69.75.31.*”<\/p>\n

Requesting the Report<\/h3>\n

This report can be obtained in several ways as shown in the table below.<\/p>\n\n\n\n\n\t\n\n\t\n\t\n\t\n\t
Invoke this Report as follows:<\/nobr><\/th><\/td>\n<\/tr>\n<\/thead>\n
Web Command:<\/td>\/SNIP::IPBANS<\/strong>
\nAdmin log in required to use (pending feature).<\/td>\n<\/tr>\n
Doc Command:<\/td>None, but the STREAMS button in viewer toolbar provides a terse (public) summary<\/td>\n<\/tr>\n
SNIP Window:<\/td>Menu: Reports<\/em> -> Network Traffic<\/em> -> IP Bans<\/em>
\nAnd in the IP Bans Setting<\/i> Dialog: Print<\/em> button<\/td>\n<\/tr>\n
Details:<\/em><\/td>Note:<\/strong> Whenever the IP values are shown publicly, they are obscured.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n

This report cannot<\/strong> be requested over the web for security reasons.\u00a0 Some web reports (such as STATUS<\/strong><\/a>) present a reduced summary of the data and also obscure details to protect user privacy.\u00a0 This is intended to allow a remote user to determine if they have been temporarily banned without involving the SNIP<\/strong><\/span> node operator.<\/p>\n","protected":false},"excerpt":{"rendered":"

The IP Blocked Report displays a list of all IPs that the SNIP node has blocked, both permanently and on a temporary basis.\u00a0 A history of the recent past blocked events are also displayed. The primary purpose of this report is to quickly see if a specific IP has been […]<\/p>\n","protected":false},"author":13,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"ht-kb-category":[418],"ht-kb-tag":[183,201],"class_list":["post-5598","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-reports","ht_kb_tag-ip","ht_kb_tag-reports"],"_links":{"self":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/5598","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/comments?post=5598"}],"version-history":[{"count":18,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/5598\/revisions"}],"predecessor-version":[{"id":7110,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb\/5598\/revisions\/7110"}],"wp:attachment":[{"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/media?parent=5598"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-category?post=5598"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.use-snip.com\/kb\/wp-json\/wp\/v2\/ht-kb-tag?post=5598"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}