Heya all,

I was doing the normal security log audit a couple days ago. I go through all the attempted attacks and start blocking IP addresses if no user records match, and I made a boo-boo that ended up blocking lots of Europe, Central America, and China from accessing GP.

Thing is, when I do the search for IP addresses matching user accounts, there's this little checkbox in our application that, if left checked, only returns exact matches. Well, I left it checked, which meant the search only looked for exact matches, and I was only entering the first 2 or so segments of the IP addresses. Since IPv4 addresses have 4 segments, there were (in every case) no matches, so I went ahead and added wildcard bans.

Anyyyyyyyway, I've removed the wildcard bans and any members that have been reporting this to you should now be good to go. Have them let us know via support ticket (with their IP) if that's not the case and they're still blocked.

As a side note, the auditing process I'm talking about is a normal part of our day-to-day work load. None of the attacks worked (mostly SQL Injection attempts), and are nothing to be alarmed about. Any web site of size sees this stuff every day. Just letting you know what happened, since we blocked quite a few legit users accidentally.