ZBblock+Stopforum spam any using them/thinking about it?

[133794m3r]

Ok, today i somehow ended up at zb block i don't even remember how, but well clicking around the internet like a madman, i ended up there.  The link for this site plus the stop forum spam page with the links is below this text as to not interrupt my train of thought. After reading over these things, it seems to be a pretty good easy measure to take to help my site be protected from random spammers and script kiddies who are just really there to be annoying(at least that's how i see those types of people) now of course, it won't stop all hackers as that's impossible to do but i thought it still seemed so far at least on paper to be pretty interesting. The other one was stop forum spam, and i found it by clicking through their page on how to help protect yourself against bots/spammers. It has a pretty nice list of spamming emails/ip addresses it seems. And there is even lists to scripts that'll let you check to see if someone's safe or not and by that i mean not a spammer. Has anyone here heard about/used these technologies? And if so what were your experiences.(now the links will be posted below promptly)

ZB block http://www.spambotsecurity.com/zbblock.php
stop forum spam http://www.stopforumspam.com/
stop forum spam's php implementation http://guildwarsholland.nl/phphulp/testspambot.php

interested in hearing all of yoru views on this topic.

[Chris]

http://www.spambotsecurity.com/zbblock.php This page blocked my provider's IP (access via US proxy works fine) as a spam bot... Pathetic
If their whole idea of blocking spam is banning whole countries then I do not think highly of the efficiency of their solution

Another one http://guildwarsholland.nl/phphulp/testspambot.php, check carefully the source code they have 'mail.ru' as a filter
Sorry for my sarcasm, but this is indeed a very sophisticated spam detection algorithm, really...

[133794m3r]

http://www.spambotsecurity.com/zbblock.php This page blocked my provider's IP (access via US proxy works fine) as a spam bot... Pathetic
If their whole idea of blocking spam is banning whole countries then I do not think highly of the efficiency of their solution

Another one http://guildwarsholland.nl/phphulp/testspambot.php, check carefully the source code they have 'mail.ru' as a filter
Sorry for my sarcasm, but this is indeed a very sophisticated spam detection algorithm, really...

well of course blocking/banning entire countries is never a good thing and i'd never block the entire thing. But the use of it for the RBN lists was my main thing also blocking people from malforming urls and such. As a second preventive measure for myself. And o.O wait... so how is "mail.ru" not wait... i don't get it... but er ok haha i guess... The other one is as i can see it makes sense. If all you get is spambots 24/7 attacking your site from a country and this goes on for a month straight without a single person coming to your site from that country for a legitimate reason and they've done it in the past i can see why you'd do that. He also didn't block free countries just ones like China, and N. Korea. And to be honest, i don't know if my site would even be allowed to be seen by them well the future one since it will be promoting having fun. And the other one is well it's N. Korea. I can see why he did it.

If you had someone spaming your site 24/7 for x amount of days and also had it happen previously i'd say that you'd say whatever and bye bye to that entire country too. And hmm... i'm thinking about using this site in addition to the stopforumspam site. http://www.projecthoneypot.org/  and all of this is to well just block people who are only there to cause me headaches.

[zaphod]

http://www.spambotsecurity.com/zbblock.php This page blocked my provider's IP (access via US proxy works fine) as a spam bot... Pathetic
If their whole idea of blocking spam is banning whole countries then I do not think highly of the efficiency of their solution

Actually, your ISP was blocked. tpnet.pl is known as a pit of nastiness on the web. Here are your 3 accesses before the permanent banning system took hold...

Code: [Select]

#: 19824 @: Wed, 10 Feb 2010 11:57:09 -0700
Host: bbd204.neoplus.adsl.tpnet.pl
IP: 83.27.193.204
Score: 1
Why blocked: RBN.
Query:
Referer: http://community.bbgamezone.net/index.php/topic,2680.msg18800/topicseen.html
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7
Reconstructed URL: http:// www.spambotsecurity.com /zbblock.php

#: 19825 @: Wed, 10 Feb 2010 11:57:21 -0700
Host: bbd204.neoplus.adsl.tpnet.pl
IP: 83.27.193.204
Score: 1
Why blocked: RBN.
Query:
Referer:
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7
Reconstructed URL: http:// www.spambotsecurity.com /zbblock.php

#: 19826 @: Wed, 10 Feb 2010 11:57:26 -0700
Host: bbd204.neoplus.adsl.tpnet.pl
IP: 83.27.193.204
Score: 1
Why blocked: RBN.
Query:
Referer:
User Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; pl; rv:1.9.1.7) Gecko/20091221 Firefox/3.5.7
Reconstructed URL: http:// www.spambotsecurity.com /
Your IP is also very well known as being highly dangerous... please see http://www.robtex.com/ip/83.27.193.204.html#blacklists .

I suggest your find a cleaner ISP. BTW, the basic install of ZB Block bans no countries in total. However I do distribute a list (which I use) of optional signatures to ban China and Korea. I had never in months had a valid visitor from those places, so it was time to do something about it.

Have a great day!
Zap

[zaphod]

Oops... Chris, if you were the Korean that came from here shortly after the tpnet.pl user, yes, I do have your contry banned, because of it's loose laws regarding hacking. This is not a default mode of ZB Block, it is an optional, added block.

That IP, however, isn't wholly clean either... http://www.robtex.com/ip/118.34.141.74.html

Sorry,
Zap

[Chris]

tpnet.pl is not just "IPS provider", it is the major ISP, by banning it you banned like 99% of users from Poland
And no, you can not find a cleaner ISP in Poland (unless you go for some completely small one).

You lame solution is banning whole countries. And that's the whole knowledge you are to offer, you really have guts to call this website "spambotsecurity"...

Your IP is also very well known as being highly dangerous

Yawn. Have you heard about dynamic IP? I can change it with one click. It always amuses me why these "spam experts" insist of banning IP from dynamic IP pool. I mean, there are millions of people who could be using this IP after I reset my router.

[133794m3r]

zap's here? O.O i was just asking the rest of the people on these forums...
edit:ah, i just saw that it had you being redirected there on his list... and interesting didn't know that polish people were alot of spammers :/
and i don't know if i'll keep poland on there then, since chris is from there and doesn't seem to be all that bad.

And what do you mean by "major isp"? Do you mean the people there have no choice like how it is in lebanon?

I'm probably going to just give poland a trial run :/ if my support thing shows nasty nasty 99%+ then i'll probably readd it.

[zaphod]

Yeah, it's a minor thing to bypass a block. The signature in the signatures.inc is

Code: (php) [Select]

$ax = $ax + (rmatch($hoster,"tpnet.pl","RBN"));To negate that just add

Code: (php) [Select]

$ax = $ax - (rmatch($hoster,"tpnet.pl","RBN")); to your customsig.inc . Please note the sign flip from "+" to "-". This way the bypass will remain in place even if you update the main signatures.inc .

tpnet.pl has such a bad track record, and was found to be in the middle of a huge block controlled by the Russian Business Network, that chances are the ban will never be lifted. Sorry Chris.

And please don't get me wrong, Poles rank very highly in my list of good people. Without them, we would never have cracked the German Enigma machines. The best demo coders come out of Poland too (well, if yer an Atarian they do). It's just your ISP has been a source of nasty attacks for a long time.

Zap

[133794m3r]

Yeah, it's a minor thing to bypass a block. The signature in the signatures.inc is

Code: (php) [Select]

$ax = $ax + (rmatch($hoster,"tpnet.pl","RBN"));To negate that just add

Code: (php) [Select]

$ax = $ax - (rmatch($hoster,"tpnet.pl","RBN")); to your customsig.inc . Please note the sign flip from "+" to "-". This way the bypass will remain in place even if you update the main signatures.inc .

tpnet.pl has such a bad track record, and was found to be in the middle of a huge block controlled by the Russian Business Network, that chances are the ban will never be lifted. Sorry Chris.

And please don't get me wrong, Poles rank very highly in my list of good people. Without them, we would never have cracked the German Enigma machines. The best demo coders come out of Poland too (well, if yer an Atarian they do). It's just your ISP has been a source of nasty attacks for a long time.

Zap

i still don't have a site up yet, but i was going to use it simply to well, save me the headache of dealing with such things myself.

[zaphod]

Just wanted to add, tpnet.pl cleaned up their act in a major way. They have been removed from ZB Block's internal bans. If you have bypassed the ban, please remember to remove the bypass when you update.

Zap