[solved] Access denied

[LoyceMobile]

This is new:


I know I get rate limited if I make more than one request per second for a while (and short bursts are allowed), but I didn't even get close to that. I was just browsing a few pages, looking for a pizza post made by someone. None of this was automated, and yet, Cloudflare kicked my butt!
Normally, when I get rate limited, it passes after a few seconds. I'm still blocked after 10 minutes now, no idea how long this is going to take.

Cloudflare's Error link: https://developers.cloudflare.com/support/troubleshooting/http-status-codes/cloudflare-1xxx-errors/error-1015/

Looking at my open tabs, this may have triggered it: I had one tab open showing "Verify you are human by completing the action below." and waiting to click the captcha. Meanwhile, I continued clicking through a few pages of a thread (to do a quick CTRL-F on each page) in another tab.

[NotATether]

Just use a different IP address or a VPN or something. If it's on a browser, problem solved.

[Ambatman]

I'm still blocked after 10 minutes now, no idea how long this is going to take

There are times it takes up to an hour.
So just wait a little while. Being there before.

Looking at my open tabs, this may have triggered it: I had one tab open showing "Verify you are human by completing the action below." and waiting to click the captcha. Meanwhile, I continued clicking through a few pages of a thread (to do a quick CTRL-F on each page) in another tab.

This should be the cause
I experienced Error 1015 sometime ago while trying to log in to Altcointalk
And it turns out I usually leave my recaptcha unanswered when I feel it's taking time.

[Oshosondy]

Just use a different IP address or a VPN or something. If it's on a browser, problem solved.

I did not know it is now taking 10 minutes, the reason I deleted my first post. You are very correct, error 1015 is initiated through IP ban, so changing the IP address will solve the error.

I have experienced this error on this forum before several times but it is not talking more than seconds for it not to appear again.

[LoyceV]

There are times it takes up to an hour.

I'm back! It looks like it indeed took an hour. I hate DDoS-protection

I'll leave this topic open for theymos to find

[theymos]

That happens only if your IP is traffic-flooding at an especially high rate. In your case, I see that your IP attempted to make 1340 requests in a 120-second period starting at 08:25 UTC. This is far above the general limit of 1 request per second. Maybe someone else is using your IP to flood, or maybe you have some background process running which is making requests way too quickly.

[LoyceMobile]

That happens only if your IP is traffic-flooding at an especially high rate. In your case, I see that your IP attempted to make 1340 requests in a 120-second period starting at 08:25 UTC. This is far above the general limit of 1 request per second.

That huge number of requests made me think it includes Bitcointalk's image proxy. I tested it, and clicked through [Discussion] Bitcoin Pizza Day on Bitcointalk 🍕. On page 15 already, I got Error 1015 again.
I guess it's time for me to hit the couch now, that was my plan anyway so I could "safely" see if I can reproduce this.

Maybe someone else is using your IP to flood, or maybe you have some background process running which is making requests way too quickly.

Nope, nobody else is using my IP and all my background scripts run on a VPS.

Is this the intended behaviour? If opening 15 pages with images (within maybe 10-20 seconds) creates 1000+ requests, I'd say that isn't really the user's fault. I opened 15 pages, the 1000+ requests are caused by the content of those pages.
Now that I think about it: it wouldn't be too difficult to embed 1000+ images on one page. Does that mean anyone who opens that page will get a 1 hour break from Bitcointalk? Suddenly I have an evil plan for April Fools day

[theymos]

That huge number of requests made me think it includes Bitcointalk's image proxy.

That was in fact the problem. ip.bitcointalk.org was supposed to be ignored for this sort of ban, but after looking into it more, I realized that it wasn't. (For Cloudflare rate-limiting rules, it turns out that the activation expression and the counting expression are totally independent, so I had to exclude ip.bitcointalk.org in two different places.)

Thanks!

[PX-Z]

Cloudflare detected you as not a human but a bot  

Now that I think about it: it wouldn't be too difficult to embed 1000+ images on one page. Does that mean anyone who opens that page will get a 1 hour break from Bitcointalk? Suddenly I have an evil plan for April Fools day [/color]

I had a similar experience earlier while viewing the same page/thread, lol. I just didn't get a chance to take a screenshot. But it seems to be working fine now. Thanks theymos.