PDA

View Full Version : Forum Owners/Operators



Ickie
December 14th, 2009, 02:47
I have found the Holy Grail for forum owners and operator's.
It is ZB Block and it is free and easy to install.
http://www.spambotsecurity.com/zbblock.php

Be first in line to get this software, soon everyone will have it running on their forums. This will keep you safe from bots, ip attacks, DDOS attacks and hackers and will save you bandwidth in the process, by keeping them out at the doorway. This will block them ISP's with the "who gives a crap" attitude. I will bet they will have a change in that attitude when it hits them in their pockets when users like you drop their services so you can Cruz the internet without being attacked.

Attacks are on the rise so the time is now to make your website safe and your users safe too.

see my log and you will be sold on this software.
click here to view log (http://www.sim-outhouse.com/zbblock/killed_log.txt)

Francois
December 14th, 2009, 04:29
Looking into it. Thanks for the tip Ickie.

Dain Arns
December 14th, 2009, 06:53
And that is just one weeks worth of logging. Incredible, but also very sad and pathetic. I just really have a hard time wrapping my brain around why someone would want to do that. :kilroy:

Snuffy
December 14th, 2009, 07:21
Good Find Ickie! :applause:

You da Man! :salute:

Ickie
December 14th, 2009, 08:53
that file was only about 5 days worth and it would have been 3 times bigger until I blocked China and North korea, they were always hammering us.

Brian
December 14th, 2009, 14:36
This is really amazing. I checked out the log, it's crazy!

Ickie
December 15th, 2009, 13:09
Here is who is banned and why,

Bad Company


// Blocked ISP's

"hosteurope","Bothost and/or Server Farm"));
"internetserviceteam.com","internetserviceteam, phpbb hackers"));
"kimsufi.com","kimsufi, forum spambots"));
"pool.ukrtel.net","ukrtel, forum spambots"));
"mbox.kz","mbox, blog 'sploit bothost"));
"cjh-law.com","cjh-law, nasty phishers / scammers"));
"kiyosho.jp","kiyosho, infected japanese machine"));
"adsinmedia.co.in","Bothost and/or Server Farm"));
"dreamhost.com","Bothost and/or Server Farm"));
"holhost.com","Bothost and/or Server Farm"));
"vip-net.pl","Bothost and/or Server Farm"));
"23gb.com","Bothost and/or Server Farm"));
"swifttrim.com","Bothost and/or Server Farm"));
"hotchilli.net","Bothost and/or Server Farm"));
"dns-safe.com","Bothost and/or Server Farm"));
"cadinor.com","Bothost and/or Server Farm"));
"neointeractiva.com","Bothost and/or Server Farm"));
"3fn.net","Bothost and/or Server Farm"));
"fsfreeware.com","Bothost and/or Server Farm"));
"linkneo.com","Bothost and/or Server Farm"));
"host.caracastelecom.net","Bothost and/or Server Farm"));
"ig.com.br","Bothost and/or Server Farm"));
"clanmoi.de","Bothost and/or Server Farm"));
"piemontetv.com","Bothost and/or Server Farm"));
"authenticnetworks.com","Bothost and/or Server Farm"));
"ogicom.pl","Bothost and/or Server Farm"));
"agava.net","Bothost and/or Server Farm"));
"rivreg.ru","Bothost and/or Server Farm"));
"americanforeclosures.com","Bothost and/or Server Farm"));
"vampire.pl","Bothost and/or Server Farm"));
"midphase.com","Bothost and/or Server Farm"));
"brasiltelecom.net.br","Bothost and/or Server Farm (credit: eclecticdjs.com)"));
"cantv.net","Bothost and/or Server Farm (credit: eclecticdjs.com)"));
"starnet.md","Bothost and/or Server Farm (credit: eclecticdjs.com)"));
"steephost.com","Bothost and/or Server Farm (credit: eclecticdjs.com)"));
"followmeoffice.com","Bothost / Better idea, don't follow me"));
"dumpyourbitch.com","Rude script attackers"));
"exatt.net","Bad ISP, allows bots to run loose, hides fact it's in Mumbai, India"));
"dotnetdotcom.org","Bad search spider. Ignores robots.txt. Offers an explosive .zip to those who try to use their services"));
"asianet.co.th","Bothost / Fake ISP"));
"veloxzone.com.br","Bothost and/or Server Farm"));
"ono.com","Bothost and/or Server Farm"));
"rima-tde.net","Bothost and/or Server Farm"));
"qvt.net.br","Bothost and/or Server Farm"));
"vtr.net","Bothost and/or Server Farm (weird!)"));
"terra.cl","Bothost and/or Server Farm"));
"net.co","Bothost and/or Server Farm"));
"iam.net.ma","Bothost and/or Server Farm"));
"35up.com","Bothost and/or Server Farm"));
"netvision.net.il","ISP with a filthy reputation"));
"isnet.net","South African Bothosts"));
"tiscali.it","tiscali, constant source of forum spam attempts"));
"dragonara.net","Spamjockey ISP... GO AWAY!"));
"accentrainc.com","Bothost and/or Server Farm"));
"colo.iinet.com","Iterasi site scrapers"));
"smartservercontrol.com","smartservercontrol.com - ya ain't controlling my server bub"));
"hinet.net","Ridin' dirty Chinese ISP"));
"chello.pl","Filthy ISP/Host, constant source of attacks"));
"accelovation.com","Content scraper for paid service"));
"setooz.com","Email harvester from India"));
"altushost.com","Bothost and/or Server Farm"));
"bestprice.com","Spammers"));
"doctore.sk","Skiddy"));
"netvigator.com","Ridin' dirty, referer spam"));
"privatedns.com","No www site, and several attacks"));
"page-store.com","SEOMOZ keyword scraper"));
"mantraonline.com","Indian spammers / malware spreaders"));
"jkserv.net","Game server network that keeps probing the author"));
"webhostserver.biz","Server network that keeps probing the author"));
"retail.telecomitalia.it","Spammer tolerant host network"));
"slicehost.net","slicehost.net bothost"));
"ctinets.com","Bothost and/or Server Farm"));
"server4you.de","Bothost and/or Server Farm"));
".ad.jp","Advertising only addresses"));
"propagation.net","No propogation allowed (spammers)"));
"hostacy.com","Bothost and/or Server Farm"));
"onlinehome-server.com","Bothost and/or Server Farm"));
"onlinehome-server.net","Bothost and/or Server Farm"));
"onlinehome-server.info","Bothost and/or Server Farm"));
"bezeqint.net","Bothost and/or Server Farm"));
"prking.com.au","Spammer"));
"server.de","Bothost and/or Server Farm"));
"nettopia.com","Bothost and/or Server Farm"));
"privatedns.com","Bothost and/or Server Farm"));
"webfusion.co.uk","Bothost and/or Server Farm"));
"phatservers.com","Bothost and/or Server Farm"));
"insite.com.br","Bothost and/or Server Farm"));
"justhost.com","Bothost and/or Server Farm"));

All Of China
All Of N. korea


Blocked IPs and IP Ranges

"65.94.3.","Site Scraper"));
"12.212","Wild Blue Communications (Will Expire on DNS registration)"));
"12.213","Wild Blue Communications (Will Expire on DNS registration)"));
"115.124.102.24","Infected Machine"));
"122.221.10.234","Infected Machine"));
"4.78.243.0","4.78.243.255","Quantcast : Website Spies, Spyware Purveyors. Collects information on websites ith their free service, and

may sell that information to their paid clients later"));
"41.210.192.0","41.210.255.255","Spamhost Movicel Telecomunicacoes LDA Angola"));
"59.93.0.0","59.93.255.255","India Spam Pump"));
"64.128.80.0","64.128.83.255","networkphantom.net - domains by proxy screwball"));
"65.98.0.0","65.98.127.255","pwebtech/FortressITX spam-friendly host/aviary.com unregulated proxy ervice"));
"65.208.151.112","65.208.151.119","Jarvis Universal Purchase Company (botnet)"));
"66.7.192.0","66.7.223.255","3IX / host-care, known bad USA hosts"));
"66.228.192.0","66.228.223.255","Swift Ventures spam/scrape network"));
"67.215.230.0","67.215.230.255","Email harvester from India (setooz.com)"));
"68.168.216.0","68.168.216.255","Attacking /24"));
"69.36.0.0","69.36.15.255","3IX / host-care, known bad USA hosts"));
"69.72.128.0","69.72.159.255","Hacker/Spammer Hosts"));
"69.89.16.0","69.89.31.255","Hacker/Spammer Hosts"));
"69.210.185.0","69.210.185.7","spunge.org, free sitehost with abuse problems"));
"72.20.99.0","72.20.99.255","Content scraper for paid service"));
"79.143.177.0","79.143.177.255","Netherlands Site Host (doesn't need access to other sites)"));
"80.81.159.0","80.81.159.255","Filthy netblock"));
"80.81.208.0","80.81.223.255","Filthy netblock"));
"80.87.152.0","80.87.152.255","Server farm infected with grum spambot"));
"80.93.122.0","80.93.122.255","Ukrainian Attack Prone Netblock"));
"81.21.74.0","81.21.74.255","webfusion.co.uk - sitehost has no business surfing"));
"81.223.254.0","81.223.254.127","smartservercontrol.com - ya ain't controlling my server bub"));
"83.233.30.0","83.233.33.255","Sven and Ole have been bad. Multiple referer spams"));
"85.131.188.0","85.131.191.255",".de hosts - sitehost has no business surfing"));
"87.101.0.0","87.101.15.255","PureHosting.nl, a possible extention of keyweb.de .ru (bothost)"));
"87.118.68.0","87.118.122.255","keyweb.de .ru (bothost)"));
"87.248.64.0","87.248.95.255","Polish Bad Block"));
"87.248.162.0","87.248.189.255","Moldavia Bad Block"));
"91.205.40.0","91.205.43.255","British Virgin Islands Spambots"));
"91.214.44.0","91.214.45.255","Altushost bothost and/or Server Farm"));
"94.102.60.0","94.102.60.255","Netherland Malware Bots"));
"95.24.0.0","95.24.255.255","Filthy Netblock, no ISP in block"));
"95.128.128.0","95.135.255.255","Filthy Netblock"));
"113.160.0.0","113.191.255.255","localhost spoofing netblock"));
"118.98.0.0","118.101.255.255","Filthy/Unassigned Netblock"));
"118.175.254.0","118.175.255.255","Bangkok Attack prone 512 address block"));
"122.182.2.0","122.182.2.255","India spammer/malware host"));
"124.123.0.0","124.125.255.255","Indian hackers - 192K address netblock is bad"));
"187.32.0.0","187.32.255.255","Filthy Brazilian netblock"));
"188.92.72.0","188.92.79.255","adtechnology.lv spammers"));
"189.15.0.0","189.15.255.255","Filthy Brazilian netblock"));
"189.41.0.0","189.41.255.255","Filthy Brazilian netblock"));
"189.112.0.0","189.112.255.255","Filthy Brazilian netblock"));
"193.200.150.0","193.200.150.255","Anonymizing proxy network, hacker's paradise")); //55
"194.8.74.0","194.8.75.255","British Virgin Islands Spambots"));
"195.87.102.0","195.87.102.255","Comment spammer netblock"));
"195.238.38.0","195.238.71.255","Filthy netblock"));
"195.238.95.0","195.238.118.255","Filthy netblock"));
"195.238.172.5","195.238.255.255","Server farms interspersed with attack prone blocks"));
"200.63.42.0","200.63.47.255","panamaserver.com .ru (bothost)"));
"200.146.192.0","200.146.255.255","Filthy Brazilian netblock"));
"200.170.128.0","200.170.255.255","Filthy Brazilian netblock"));
"200.225.192.0","200.225.255.255","Filthy Brazilian netblock"));
"200.233.128.0","200.233.255.255","Filthy Brazilian netblock"));
"201.16.128.0","201.16.255.255","Filthy Brazilian netblock"));
"201.48.0.0","201.48.255.255","Filthy Brazilian netblock"));
"203.160.1.0","203.160.1.255","Vietnam Junk Mailer/Forum Spammer (Spoofed as 203.160.1.49 localhost!)"));
"204.8.34.0","204.8.34.255","Swift Ventures spam/scrape network"));
"204.11.16.0","204.11.19.255","onestop.net - sitehost has no business surfing"));
"204.13.164.0","204.13.167.255","Swift Ventures spam/scrape network"));
"204.15.224.0","204.15.255.255","Swift Ventures spam/scrape network"));
"204.124.180.0","204.124.183.255","Comment spammer netblock"));
"204.244.109.240","204.244.109.247","Tynt, Evil Proxy"));
"204.244.120.176","204.244.120.183","Tynt, Evil Proxy"));
"206.161.0.0","206.161.255.255","Questionable Hosts, some malicious. Do not need access to your site"));
"206.196.110.0","206.196.111.255","Rose Hosting. Does not need access to your site"));
"207.226.88.0","207.226.95.255","many sitehosts - questionable behaviour"));
"208.64.28.0","208.64.31.255",".bh servers caught being b.h. surfers"));
"208.64.200.0","208.64.203.255","Accentra Inc. , Bothost and/or Server Farm"));
"208.64.230.0","208.64.230.127","Possible Terrorist Serverblock (credit: diabolicbg!)"));
"208.99.192.0","208.99.255.255","Swift Ventures spam/scrape network"));
"208.115.111.240","208.115.111.255","Dotbot - Paid Service SEO Service (Keyword Spamming Aides)"));
"209.62.96.0","209.62.127.255","Questionable Hosts, some malicious. Do not need access to your site"));
"209.135.34.0","209.135.157.255","Questionable Hosts, some malicious. Do not need access to your site"));
"209.249.0.0","209.249.255.255","HUGE block of spam-mail servers, and scanbots"));
"210.0.160.0","210.0.255.255","Japanese servers on Hong Kong netblock, suspicious"));
"211.43.0.0","211.45.191.255","Korean Suspicious"));
"211.91.0.0","211.97.255.255","Chinese Bad Block"));
"212.113.41.0","212.113.63.255","Ukraine Bad Block"));
"212.117.188.0","212.117.188.255","Altushost bothost and/or Server Farm"));
"212.178.0.0","212.178.29.255","Ukraine Bad Block"));
"212.235.0.0","212.235.255.255","netvision.net.il (filthy reputation ISP)"));
"213.166.128.0","213.166.159.255","Saudi Arabia bothost"));
"218.56.21.0","218.56.21.255","Chinese Bad Block"));
"222.124.31.0","222.124.255.255","India Bad Block"));


//IP Ranges for internetserviceteam.com/netdirekt e.K./NetDirect/jmhservices.com notorious forum spammers.

"78.159.96.0","78.159.127.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"84.16.224.0","84.16.255.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"89.149.192.0","89.149.255.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"95.168.160.0","95.168.191.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"95.211.85.0","95.211.86.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"212.95.32.0","212.95.159.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"212.95.192.0","212.95.255.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));
"217.20.112.0","217.20.127.255","internetserviceteam/netdirect/netdirekt e.K./JMH forum spammers"));



// *RBN is the Russian Business Network, the internet's answer to the Chicago Outfit.
// Mention a cybercrime, and they are up to their necks in it.

// RBN Hostname Blocks

"keyserver","RBN"));
"keymachine","RBN"));
"keyweb","RBN"));
"oliro","RBN"));
"filmefashion","RBN"));
"poltava.ua","RBN"));
"utel.net.ua","RBN"));
"infobox.ru","RBN"));
"infobox.org","RBN"));
"vdswin.com","RBN"));
"rbn.com.ua","RBN"));
"hc.ru","RBN"));
"telsp.net.br","RBN"));
"power-web34.net","RBN"));
"temka.biz","RBN"));
"dl-hosting.com","RBN"));
"tagdance.de","RBN"));
"efdns.de","RBN"));
"keyaccount.de","RBN"));
"ahost01.de","RBN"));
"em-zwo.de","RBN"));
"amplilogic.com","RBN"));
"creatoor.com","RBN"));
"x-svr.com","RBN"));
"keymars64.de","RBN"));
"haebdler-treff.de","RBN"));
"traders-briefing.de","RBN"));
"hosting-ie.com","RBN"));
"mail.adc.de","RBN"));
"ethymos.com.br","RBN"));
"softel.com.pl","RBN"));
"astranight.com","RBN"));
"ipilum.com","RBN"));
"vilitas.de","RBN"));
"rootbash.de","RBN"));
"securewebserver.de","RBN"));
"w-4.de","RBN"));
"tpnet.pl","RBN"));
"corbina.ru","RBN"));
"qsc.de","RBN"));
"prommorpg.com","RBN"));
"relan.ru","RBN"));
"volia.net","RBN"));
"yandex.ru","RBN"));
"dedibox.fr","RBN"));
"laycat.com","RBN"));
"kyklo.com","RBN"));
"aceleo.com","RBN"));
"majordomo.ru","RBN"));
"sovam.net.ua","RBN"));
"phatservers.com","RBN"));
"limt.ru","RBN"));
"netorn.ru","RBN"));
"netorn.net","RBN"));
"cpms.ru","RBN"));
"itns.ru","RBN"));
"netbynet.ru","RBN"));
"kuzbass.net","RBN"));
"kemhost.net","RBN"));
"spb.ru","RBN"));
"elsv-v.ru","RBN"));
"cosmonova.net.ua","RBN"));
"borderfreehosting.com","RBN"));
"uxxicom.com","RBN"));
"starlogic.biz","RBN"));
"totalstat.ru","RBN"));
"hostrov.net","RBN"));
"nasza-klasa.pl","RBN"));
"datapoint.ru","RBN"));
"orange.sk","RBN"));
"cssgroup.lv","RBN"));
"odessa.ua","RBN"));
"profithost.net","RBN"));
"mtu-net.ru","RBN"));
"volia.ua","RBN"));


// RBN IP and IP Range Blocks Russian Business Network, the internet's answer to the Chicago Outfit.
// Mention a cybercrime, and they are up to their necks in it.


"77.51.0.0","77.51.59.255","RBN"));
"77.92.88.0","77.92.89.255","RBN"));
"77.105.0.0","77.105.63.255","RBN")); //55
"78.24.24.234","78.26.255.255","RBN"));
"78.37.128.0","78.37.191.255","RBN"));
"78.110.175.0","78.110.175.255","RBN"));
"78.129.202.0","78.129.203.255","RBN"));
"78.157.140.0","78.157.143.255","RBN"));
"79.175.64.0","79.175.127.255","RBN")); //55
"81.23.0.0","81.24.127.255","RBN"));
"83.167.98.0","83.167.100.255","RBN"));
"83.167.104.0","83.167.109.255","RBN"));
"83.167.127.0","83.167.127.255","RBN"));
"85.249.0.0","85.251.255.255","RBN"));
"89.108.64.0","89.108.127.255","RBN"));
"89.113.72.0","89.113.79.255","RBN"));
"89.254.192.0","89.254.255.255","RBN"));
"91.205.65.0","91.205.127.255","RBN"));
"91.205.168.0","91.205.168.255","RBN"));
"92.241.0.0","92.241.191.255","RBN"));
"93.174.88.0","93.174.94.255","RBN"));
"94.102.48.0","94.102.51.255","RBN"));
"94.142.128.0","94.142.129.255","RBN"));
"94.181.0.0","94.181.255.255","RBN"));
"109.121.0.0","109.121.63.255","RBN")); //55
"188.134.0.0","188.134.15.255","RBN"));
"193.53.87.0","193.53.89.255","RBN"));
"193.109.248.0","193.109.249.255","RBN"));
"193.189.126.0","193.189.127.255","RBN"));
"194.106.188.0","194.106.191.255","RBN")); //55
"194.165.42.0","194.165.42.255","RBN"));
"195.88.0.0","195.88.255.255","RBN"));
"195.189.80.0","195.189.83.255","RBN"));
"208.64.24.0","208.64.27.255","RBN"));
"212.15.65.0","212.15.255.255","RBN"));
"212.152.60.128","212.152.63.255","RBN"));