Status
Not open for further replies.

John Connor

Lifer
Nov 30, 2012
22,757
619
121
I was just testing my site with Tor since I just blocked it and I know that this site blocks Tor becuaee I've used it before in the past, but I'm using Tor now and this site isn't blockinng me. Has this rule changed now?
 

DrPizza

Administrator Elite Member Goat Whisperer
Mar 5, 2001
49,601
167
111
www.slatebrookfarm.com
There's a reasonable chance your current IP will be blocked. A site we use that monitors spam has noted that your current IP address has been used for a rather prolific amount of spam this month. If any spam is posted here, the IP range will be added to the censor list.
 

John Connor

Lifer
Nov 30, 2012
22,757
619
121
This ZBblock is one of the best scrips I have ever installed on my wordpress site. Amazing! Just have a look at the crap it's stopped today.

<?php die(''); ?>



#: 4 @: Mon, 29 Dec 2014 14:33:46 -0600 Running: 0.4.10a3 / 76

Host: theservercompany.com.125.249.162.in-addr.arpa

IP: 162.249.125.215

Score: 8

Violation count: 1 INSTA-BANNED

Why blocked: POST unescaped < (POST-008). POST unescaped > (POST-009). POST unescaped " (POST-012). POST RFI (POST-045). POST RFI (POST-047). POST RFI (POST-048). POST RFI (POST-049). POST RFI (POST-050). Heavy hit. INSTA-BAN. You have been instantly banned due to extremely hazardous behavior!

Query:

Referer:

User Agent: The Incutio XML-RPC PHP Library -- WordPress/4.1

Reconstructed URL: http:// blog.systechforum.net /xmlrpc.php



#: 5 @: Mon, 29 Dec 2014 14:40:35 -0600 Running: 0.4.10a3 / 76

Host: ec2-23-22-131-24.compute-1.amazonaws.com

IP: 23.22.131.24

Score: 1

Violation count: 1

Why blocked: Amazon Web Services. Not an access provider ISP. Used by hackers, Keyword spamming SEO bots, and other unsavories (CLD-0AMZ). Checked for bypass -

Query:

Referer:

User Agent: viralvideochart.unrulymedia.com vvcscanner@unrulymedia.com

Reconstructed URL: http:// blog.systechforum.net /



#: 6 @: Mon, 29 Dec 2014 14:40:44 -0600 Running: 0.4.10a3 / 76

Host: ec2-54-91-137-217.compute-1.amazonaws.com

IP: 54.91.137.217

Score: 3

Violation count: 1

Why blocked: No known valid Java clients or spiders. Infected machine (UA-0003.1). No known clients in your class (UA-0194). Amazon Web Services. Not an access provider ISP. Used by hackers, Keyword spamming SEO bots, and other unsavories (CLD-0AMZ). Checked for bypass -

Query:

Referer:

User Agent: Apache-HttpClient/4.3.5 (java 1.5)

Reconstructed URL: http:// blog.systechforum.net /



#: 7 @: Mon, 29 Dec 2014 14:42:45 -0600 Running: 0.4.10a3 / 76

Host: localhost

IP: 113.170.80.49

Score: 2

Violation count: 1 INSTA-BANNED

Why blocked: localhost spoofing netblock (IP-044). Local host spoof attack. INSTA-BAN (IB-020). You have been instantly banned due to extremely hazardous behavior!

Query:

Referer:

User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)

Reconstructed URL: http:// blog.systechforum.net /



#: 8 @: Mon, 29 Dec 2014 14:44:51 -0600 Running: 0.4.10a3 / 76

Host: static.163.132.76.144.clients.your-server.de

IP: 144.76.132.163

Score: 2

Violation count: 1

Why blocked: your-server.de, Known host of attack scripts. Not an access provider (HN-0133). Hetzner (ASN-HETZ-9).

Query:

Referer: http://urylaa84.livejournal.com/tag/buy tekton 6017 5/8-inch hitch receiver

User Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; fr; rv:1.9.2.28) Gecko/20120308 Camino/2.1.2 (MultiLang) (like Firefox/3.6.28)

Reconstructed URL: http:// blog.systechforum.net /



#: 9 @: Mon, 29 Dec 2014 14:56:44 -0600 Running: 0.4.10a3 / 76

Host: 26.transminn.cz

IP: 185.8.238.21

Score: 1

Violation count: 1

Why blocked: No access allowed from hosts listed as hostile on Stop Forum Spam (http://www.stopforumspam.com/removal) (local block).

Query:

Referer:

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:31.0) Gecko/20100101 Firefox/31.0

Reconstructed URL: http:// blog.systechforum.net /



#: 10 @: Mon, 29 Dec 2014 16:57:19 -0600 Running: 0.4.10a3 / 76

Host: s231.n12.n11.n66.static.ohio1.vcentercloud.com

IP: 66.11.12.231

Score: 1

Violation count: 1

Why blocked: Phishing for a WordPress real username is NOT allowed (QU-254).

Query: author=1

Referer:

User Agent: Mozilla/5.0 (compatible; Attracta)

Reconstructed URL: http:// blog.systechforum.net /?author=1



#: 11 @: Mon, 29 Dec 2014 16:57:39 -0600 Running: 0.4.10a3 / 76

Host: s231.n12.n11.n66.static.ohio1.vcentercloud.com

IP: 66.11.12.231

Score: 1

Violation count: 2

Why blocked: No registrations, or logins, from hosts listed as hostile on http://hosts-file.net/ .

Query: action=register

Referer:

User Agent: Mozilla/5.0 (compatible; Attracta)

Reconstructed URL: http:// blog.systechforum.net /wp-login.php?action=register



#: 12 @: Mon, 29 Dec 2014 16:57:45 -0600 Running: 0.4.10a3 / 76

Host: s231.n12.n11.n66.static.ohio1.vcentercloud.com

IP: 66.11.12.231

Score: 1

Violation count: 3 BANNED

Why blocked: No registrations, or logins, from hosts listed as hostile on http://hosts-file.net/ .

Query:

Referer:

User Agent: Mozilla/5.0 (compatible; Attracta)

Reconstructed URL: http:// blog.systechforum.net /wp-login.php



#: 13 @: Mon, 29 Dec 2014 17:18:45 -0600 Running: 0.4.10a3 / 76

Host: boson018.ahrefs.com

IP: 188.165.15.79

Score: 3

Violation count: 1

Why blocked: Bot UA (UA-0120). Possibly hostile scraper/harvester (SPD-0104). OVH Networks (ASN-OVH-38).

Query: p=82

Referer:

User Agent: Mozilla/5.0 (compatible; AhrefsBot/5.0; +http://ahrefs.com/robot/)

Reconstructed URL: http:// blog.systechforum.net /?p=82



#: 14 @: Mon, 29 Dec 2014 17:59:44 -0600 Running: 0.4.10a3 / 76

Host: b110153.yse.yahoo.net

IP: 68.180.228.238

Score: 1

Violation count: 1

Why blocked: Phishing for a WordPress real username is NOT allowed (QU-254).

Query: author=1

Referer:

User Agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)

Reconstructed URL: http:// blog.systechforum.net /?author=1



#: 15 @: Mon, 29 Dec 2014 18:46:49 -0600 Running: 0.4.10a3 / 76

Host: ns505712.ip-198-27-66.net

IP: 198.27.66.185

Score: 2

Violation count: 1

Why blocked: Use of MJ12 bot not authorized by website admin (UA-0025). OVH Networks (ASN-OVH-52).

Query: cat=1&paged=2

Referer:

User Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.5; http://www.majestic12.co.uk/bot.php?+)

Reconstructed URL: http:// blog.systechforum.net /?cat=1&paged=2



#: 16 @: Mon, 29 Dec 2014 18:46:58 -0600 Running: 0.4.10a3 / 76

Host: ns505712.ip-198-27-66.net

IP: 198.27.66.185

Score: 2

Violation count: 2

Why blocked: Use of MJ12 bot not authorized by website admin (UA-0025). OVH Networks (ASN-OVH-52).

Query: paged=2&cat=1

Referer:

User Agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.5; http://www.majestic12.co.uk/bot.php?+)

Reconstructed URL: http:// blog.systechforum.net /?paged=2&cat=1



#: 17 @: Mon, 29 Dec 2014 18:56:08 -0600 Running: 0.4.10a3 / 76

Host: spider-5-255-253-141.yandex.com

IP: 5.255.253.141

Score: 2

Violation count: 1 INSTA-BANNED

Why blocked: Yandex is banned. INSTA-BAN (SPD-0110). Yandex is banned. INSTA-BAN (HN-0110). You have been instantly banned due to extremely hazardous behavior!

Query: p=72

Referer:

User Agent: Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)

Reconstructed URL: http:// blog.systechforum.net /?p=72
 

rsbennett00

Senior member
Jul 13, 2014
962
0
76
This is why I use Tor through a secondary VPN. If it's working as I think, this site should always see me as coming from some anonymous place in the midwest instead of where I really am.
 
Status
Not open for further replies.