This user's real IP address (SCP-c58.f2u.28.176.IP) was automatically temporarily z-lined about an hour before most of this took place, for connection flooding. This didn't become clear until they subsequently connected from their real IP.
User then connected via PureVPN and described having difficulty connecting with Revolution IRC, a mobile IRC client (extraneous log lines removed):
[16:37:21] * AhedShaker (PI.141.101.raa.j8o-PCS|egnuoleht#PI.141.101.raa.j8o-PCS|egnuoleht) has joined #site17
[16:40:20] * AhedShakerr (PI.141.101.raa.j8o-PCS|tibbiM#PI.141.101.raa.j8o-PCS|tibbiM) has joined #site17
[16:40:52] <AhedShakerr> Hello, I am trying to connect to site17 by a the mobile app but cannot
[16:41:08] <Kufat> AhedShaker, which mobile app?
[16:41:23] <AhedShakerr> revolution IRC
[16:41:40] <Kufat> what error are you getting?
[16:41:49] <AhedShakerr> Also do I need to set a new username everytime I want to join?
[16:41:56] <AhedShakerr> chat*
[16:42:26] <Kufat> AhedShakerr: you don't need to set a new username, but we don't allow connections from VPNs
[16:42:48] <NotCity> AhedShakerr No, register a nick and use the password
[16:43:06] <Kufat> AhedShakerr: I can see that you're using PureVPN; please disconnect and connect normally.
[16:44:22] <AhedShakerr> how can you? anyways its because without it it says my ip isnt connecting or something like that
[16:47:08] * AhedShakerr (PI.141.101.raa.j8o-PCS|tibbiM#PI.141.101.raa.j8o-PCS|tibbiM) Quit (http://www.mibbit.com ajax IRC Client)
[16:47:51] * AhedShaker (PI.141.101.raa.j8o-PCS|egnuoleht#PI.141.101.raa.j8o-PCS|egnuoleht) Quit (The Lounge - By https://thelounge.chat)
I Z-lined the VPN they were using. They reconnected via their real IP:
[16:54:10] * Guest59353 (PI.671.82.u2f.85c-PCS|egnuoleht#PI.671.82.u2f.85c-PCS|egnuoleht) has joined #site17
[16:54:30] <Guest59353> Hi, I finally figured out how to join by android then it said I am banned
[16:55:23] <Hex> Guest59353: When trying to join a channel?
[16:55:38] <Hex> If so, that's because Guest-nicks aren't permitted in the other channels.
[16:56:17] <Guest59353> From my phome I was called AhedShaker
[16:56:52] <Guest59353> it says you have been banned from SkipIRC
[16:57:06] <Hex> Guest59353: Oh, then are you still using a VPN?
[16:57:38] <Guest59353> no, but I used one because my normal ip says I connected too many times tho I didnt
[16:57:47] <Guest59353> but no I am no longer connected to a vpn
[16:58:06] <Hex> Kufat: Do you know what's going on here? ^
[16:58:25] <Kufat> Hex, connect flooding and use of a VPN to get around the z-line for connect flooding
[16:58:27] <Guest59353> he told me I was connected to a vpn so I disconnected
[17:01:50] <Guest59353> no im connected from my laptop although now when I try to connect from my phone it says domain not found
[17:02:06] <Kufat> Given that your first impulse in response to being banned from the network was to ban evade, you're not making a good first impression.
[17:02:23] <MalyceGraves> 👁️
[17:03:22] <Guest59353> Just tell me what I do now and I will do it
[17:03:31] * Guest59353 (PI.671.82.u2f.85c-PCS|egnuoleht#PI.671.82.u2f.85c-PCS|egnuoleht) Quit (Z-lined: Your IP range has been attempting to connect too many times in too short a duration. Wait a while, and you will be able to connect.)
They continued to connect-flood even after the automatic z-line from the last line above lapsed, and so were z-lined again.
I don't think this user is malicious, but the combination of ban-evasion via a VPN and continuing to connect-spam after knowing that they were temporarily banned for doing so concerns me. No disciplinary action was taken; the VPN z-line I implemented is part of our blanket ban on VPNs. Keep an eye on them if they return.
