Forum Groups
  All forums
    Help & Feedback
      Questions
      Work in progress
      Finished Art
      Non-Max related
    Community
      Offtopic
      News
    Hardware
    Photography



Maxunderground news unavailable

Country IP blocking for your sites
show user profile  HappyDude2
Since so many people are posting about their websites and on-line portfolios, I thought I'd share a few handy tools and sites that have really helped me.

I run a mountain biking trail database that covers parts of Canada, recently I have been flooded with post after post after post after post of SPAM comments in my forum, and even in the sections I have where riders can comment on trails, etc...

The SPAM is always just a large number of text links to porn and viagra type websites.

It finally got so bad that I had to choose between either disabling all public commenting (something I didn't really want to do) or start blocking the IP's that the spammers are using.

I tried blocking the exact IP each time a spamer posted their junk, but this didn't help much, as the next time they(or their script) would just use a different IP.
I did some searching, and found this handy website:

http://www.dnsstuff.com/pages/testbed.htm


Here you can find out what IP is assigned to what country, and what range of IP's that country is assigned.

Using this tool, I was able to see that 99% of all the spam my site was receiving was from (surprise surprise) China, Korea, and various islands.



I also found this great site, that lists all the known spamer IP blocks, countries, and companies.

http://www.unixhub.com/block.html


Since so much of the world's SPAM seems to originate in Asia, and since my site is pretty much only useful to mountain bikers in Canada, and perhaps North America (if I use my imagination) :) I blocked a lot of the Asian IP ranges.

Since blocking Asian ranges, my SPAM bombardment has dropped from about 70 spam postings per day, to only one of two per week, and each time someone spams my site now, I simply use the first website listed above to lookup the country block range assigned to the IP address, then block that entire range if it is somewhere obscure or useless to a Canadian biking site.

Pretty soon I'll have all the main trouble spots around the world blocked and a lot less headaches. :o)



Here's a list of my currently blocked IP ranges (I'm sure it will grow).

If you only see the first set of numbers, assume the following sets are "*" (meaning "anything", as in *.*) :)

219.
220.
221.
200.
209.67.38.99
204.178.112.170
205.138.3.62
199.95.207.0
199.95.208.0
216.52.13.23
216.52.13.39
207.79.74.222
209.204.128.0
209.122.130.0
211.
210.
222.
59.
196.40.
84.204.
218.








I hope that helps others block annoying script kiddies or forum / comment spammers for your websites!
So far so good for me... keeping my fingers crossed!


You can also use the list from the 2nd site above to block email coming from known SPAM countries (Mainly Asian countries). PRetty handy if you don't get "real" emails from Asia. :)




read 3152 times
5/19/2006 1:41:19 PM (last edit: 5/19/2006 1:45:55 PM)
show user profile  Manolo
Great info, I should send this list to the yahoo mail admon. Each day I also get flooded by viagra and penis enlargement (!) spam. My business' mail is also spammed, same stuff, and with that machine I never surf the "wild side".

Do you know if outlook can be set to avoid those IPs?

Cool, HD.

Cheers,

Manolo
read 3131 times
5/19/2006 2:10:29 PM (last edit: 5/19/2006 2:10:29 PM)
show user profile  paconavarro
Very handy indeed...

if my pennis would grow just 1mm for each spammail about pennis enlargement I recieve, by now I'ill need a separate car just for it... :P


--- http://www.exododw.com

read 3129 times
5/19/2006 2:18:03 PM (last edit: 5/19/2006 2:18:03 PM)
show user profile  jonnybravo_87
lmao paco :))

thx for the info happydude :D White Death

read 3127 times
5/19/2006 2:19:38 PM (last edit: 5/19/2006 2:19:38 PM)
show user profile  Dr. Jim
That is helpful to some I suppose.....BUT is there any way I can use those IP ranges to GET spam sent to me of porn links and viagra??



read 3124 times
5/19/2006 2:23:51 PM (last edit: 5/19/2006 2:23:51 PM)
show user profile  reeves1984
nice one HD

lol jeff

--
Simon Reeves


www.simonreeves.com - VFX Artist & Blog
twitter


www.analogstudio.co.uk <-- I work here

read 3118 times
5/19/2006 2:50:43 PM (last edit: 5/19/2006 2:50:43 PM)
show user profile  HappyDude2
lol Dr. Jim.
I'll sign you up for some gay monkey pron right away! :)

lol paconavarro :)

-Manolo-
Do you have access to your email server?
If so, you can use the list of IP's below (or your own list) in your email servers 'block' 'hosts' file.
I don't think outlook by itself can block IP ranges (someone PLEASE prove me wrong!) :) however, there are addon programs (free to cheap) like SpamCatcher Outlook, Open Relay Filter, etc... that will give Outlook (and many other email clients) the ability to block IP ranges and more.




So far so good, I have added a few more IP ranges to the block list and in the past few days, I have not received a SINGLE spam posting (keepign fingers crossed).
Yes, my regular users can still access me site. lol :)

Here's the new range list:


157.158.
196.40.
199.95.207.0
199.95.208.0
200.
204.178.112.170
205.138.3.62
207.79.74.222
209.122.130.0
209.204.128.0
209.67.38.99
210.
211.
216.52.13.23
216.52.13.39
218.
219.
220.
221.
222.
59.
61.
82.114.
84.204.




read 2994 times
5/26/2006 9:28:25 AM (last edit: 5/26/2006 9:28:25 AM)
show user profile  -=LeadMagnet=-
Cool, well done.
Those asian countries are jerks. That's right, i just insulted a whole set of countries.



Do A Barrel Roll!!!

read 2976 times
5/26/2006 10:41:23 AM (last edit: 5/26/2006 10:41:23 AM)
show user profile  HappyDude2
-Modena-
lol, you're a dink
Good one though :)




read 2964 times
5/26/2006 11:56:13 AM (last edit: 5/26/2006 11:56:26 AM)
show user profile  HappyDude2
One more update to the ol' list:

157.158.
196.40.
199.95.207.0
199.95.208.0
200.
204.178.112.170
205.138.3.62
207.79.74.222
209.122.130.0
209.204.128.0
209.67.38.99
210.
211.
216.52.13.23
216.52.13.39
218.
219.
220.
221.
222.
58.72.
58.73.
58.74.
58.75.
58.76.
58.77.
58.78.
58.79.
59.
61.
82.114.
84.108.
84.109.
84.110.
84.111.
84.204.




read 2882 times
5/31/2006 4:21:39 PM (last edit: 5/31/2006 4:21:39 PM)
show user profile  HappyDude2
Bump, and added a few more trouble Thailand and Russian ranges... watch out for moose and squirrel...
har har har

157.158.
158.64.
193.109.91.
195.131.
196.40.
199.95.207.0
199.95.208.0
200.
204.178.112.170
205.138.3.62
207.79.74.222
209.122.130.0
209.204.128.0
209.67.38.99
210.
211.
212.110.
216.52.13.23
216.52.13.39
218.
219.
220.
221.
222.
58.147.
58.72.
58.73.
58.74.
58.75.
58.76.
58.77.
58.78.
58.79.
59.
61.
66.226.
66.227.
82.114.
83.237.
84.108.
84.109.
84.110.
84.111.
84.204.




read 2801 times
6/9/2006 1:38:01 PM (last edit: 6/9/2006 1:38:01 PM)
show user profile  paconavarro
TNKS :)

--- http://www.exododw.com

read 2795 times
6/9/2006 1:51:56 PM (last edit: 6/9/2006 1:51:56 PM)
show user profile  Sypher-5
You would need access to the mail server to block the IP's from outlook.

There's a few progams that you can use to download emails and the send them back with "no such address" server replies. Of course this is only useful if the spammer isn't wise to it and thinks to bother removing the email address from his list.
Signature Pending Redesign

read 2780 times
6/9/2006 6:38:42 PM (last edit: 6/9/2006 6:38:42 PM)
show user profile  timpa
Bulk and en masse blocking of IP's is ugly.

For instance you have the 220. range in there, but this is used in Australia by Optus.

And our mobile broadband products assign a hong kong based ip because thats where our parent company is.

Maybe 10 years ago you could block an IP to block a country. But it's just not that specific anymore.
I'm sure most of your regular posters are fine, but you're blocking more than you realise.


read 2774 times
6/9/2006 10:05:25 PM (last edit: 6/9/2006 10:05:25 PM)
show user profile  HappyDude2
I have no qualms about blocking Asian (and other) frequent known SPAM trouble ranges.

My site is a family website about mountain biking in Ontario Canada. I really don't need some Chinese SPAMMER filling up my public forums and trail comments with "cum see Paris Hilton's big snatch" and "get cheap penis growth powder... you likey loooong time!" smut where families and children are viewing innocent information.

they get exposed to that filth everywhere else, not my site.

99% of land based ISP's use the IP ranges for their countries, it's only some hand held manufacturers that sold out to the Chinese for cheaper labor and service (another problem and rant for another discussion). :)

For MY use, country based IP range blocking works great. IT may not work for everyone, but people can make that decision for themselves based on their needs and uses.

Here's an updated list, there is a lot more Korean ranges in it now (125.240.*.* and 203.224.*.* thru 203.255.*.*) and more.

As always, you can use http://www.dnsstuff.com/pages/testbed.htm
to look up a specific IP and see what geographical area it is from, and what range it is included in.

125.240.
125.241.
125.242.
125.243.
125.245.
125.246.
125.247.
143.248.
157.158.
158.64.
168.131.
193.109.91.
193.201.208.
193.201.209.
193.201.210.
193.201.211.
194.165.
195.131.
195.174.
195.175.
196.40.
199.95.207.0
199.95.208.0
200.
201.244.
201.245.
202.100.
202.101.
202.102.
202.103.
202.104.
202.105.
202.106.
202.107.
202.108.
202.109.
202.110.
202.111.
202.96.
202.97.
202.98.
202.99.
203.160.
203.199.
203.200.
203.224.
203.225.
203.226.
203.227.
203.228.
203.229.
203.230.
203.231.
203.232.
203.233.
203.234.
203.235.
203.236.
203.237.
203.238.
203.239.
203.240.
203.241.
203.242.
203.243.
203.244.
203.245.
203.246.
203.247.
203.248.
203.249.
203.250.
203.251.
203.252.
203.253.
203.254.
203.255.
204.178.112.170
205.138.3.62
207.79.74.222
209.122.130.0
209.204.128.0
209.67.38.99
210.
211.
212.110.
213.96.
213.97.
213.98.
213.99.
216.52.13.23
216.52.13.39
217.147.
217.172.
217.77.64.
217.77.65.
217.77.66.
217.77.67.
217.77.68.
217.77.69.
217.77.70.
217.77.71.
217.77.72.
217.77.73.
217.77.74.
217.77.75.
217.77.76.
217.77.77.
217.77.78.
217.77.79.
218.
219.
220.
221.
222.
58.147.
58.180.
58.224.
58.225.
58.226.
58.227.
58.228.
58.229.
58.230.
58.231.
58.232.
58.233.
58.234.
58.235.
58.236.
58.237.
58.238.
58.239.
58.72.
58.73.
58.74.
58.75.
58.76.
58.77.
58.78.
58.79.
59.
61.
64.34.170.15
66.199.
66.226.
66.227.
66.36.
69.231.
70.87.
80.128.
80.58.
80.59.
81.169.141.
82.114.
82.160.
82.179.
83.237.
84.108.
84.109.
84.110.
84.111.
84.204.
84.235.
84.47.
85.206.
87.248.173.
88.152.
88.153.
88.154.
88.155.




read 2644 times
7/24/2006 8:50:59 AM (last edit: 7/24/2006 8:50:59 AM)
#Maxforums IRC
Open chat window


Support Maxforums.org