Black Listing Pool.ukrtel.net

[imaginarynumber]

Hi all

 

I have a stooopid spammer that thinks that they can use one of my forms to spam other people- they are oblivious to the fact that the reply from us just says "thank you for your interest" and that the hyperlinks that they throw in are not forwarded.

 

Their ip address constantly changes so I guess that they are on a dial up. I am getting bored of blacklisting on an individual ip basis

 

I am happy to blacklist anything from pool.ukrtel.net - the site is for a holiday home in florida and the client has never had a real enquiry from Ukraine.

 

How do I do this in cpanel- when i try it says that it cannot resolve the address.

 

Thanks in advance

[TCH-Thomas]

195.5.46.19 seems to be their ip so I would try 195.5.*.* in the ip deny manager and see if it helps.

[imaginarynumber]

195.5.46.19 seems to be their ip so I would try 195.5.*.* in the ip deny manager and see if it helps.

 

hi Thomas

 

Thanks for the reply.

 

How far can you go??? By that I mean, will 195.5.*.* be for the exclusive use of ukrtel.net or would 195.*.*.* be the whole of ukraine and perhaps surrounding nation states?

 

These are a few of the ip address that resolved back to ukrtel.net

 

92.113.29.119

 

94.178.48.89

 

91.124.242.198

 

So as you can see they seem to cover al lot of ranges which is why I wanted to block pool.ukrtel.net

[TCH-Andy]

ukrtel has the ranges;

 

82.207.0.0 - 82.207.127.255

91.124.0.0 - 91.124.255.255

92.112.0.0 - 92.112.255.255

94.178.0.0 - 94.178.255.255

94.179.0.0 - 94.179.199.255

95.132.0.0 - 95.132.255.255

95.133.0.0 - 95.133.255.255

95.134.0.0 - 95.134.31.255

195.5.0.0 - 195.5.63.255

213.179.224.0 - 213.179.255.255

 

so for some like 92.112 it is the whole range ( from 92.112.0.0 to 92.112.255.255 ) whereas for others like 195.5 they only have the first half of that 16 block.

 

The easiest to block these ranges is probably to use the CIDR (you can convert on ip2cidr.com )

 

deny from 82.207.0.0/17

deny from 91.124.0.0/16

deny from 92.112.0.0/16

deny from 94.178.0.0/16

deny from 94.179.0.0/17

deny from 94.179.128.0/18

deny from 94.179.192.0/21

deny from 95.132.0.0/16

deny from 95.133.0.0/16

deny from 95.134.0.0/19

deny from 195.5.0.0/18

deny from 213.179.224.0/19

[imaginarynumber]

Andy et al

 

You are stars- thank you- I knew nothing about http://ip2cidr.com/ and CIDRs.

 

Cheers

[Henrietta]

I have a pet spammer too.

 

I have enabled Domain Keys and SPF in Cpanel

 

What else do I need to do?

 

Step by step please, this is not something I am really eddjimakated in although with this forum's help I have "come a long way baby" in the last two years.

 

My spammer info is:

 

Login Name: Not logged in

Login Email: Not logged in

IP Address: 212.95.58.93 - 202.54.61.99

Host Address: 212.95.58.93.internetserviceteam.com

Date and Time: Wed Sep 16 2009 3:37:38 EDT

 

I need to be sure I can access my email away from home and my business partners in SD and MO can do their thing too while blocking anyone sending spam through our servers.

 

Thanks

[imaginarynumber]

I have a pet spammer too.

 

I have enabled Domain Keys and SPF in Cpanel

 

What else do I need to do?

 

Step by step please, this is not something I am really eddjimakated in although with this forum's help I have "come a long way baby" in the last two years.

 

My spammer info is:

 

Login Name: Not logged in

Login Email: Not logged in

IP Address: 212.95.58.93 - 202.54.61.99

Host Address: 212.95.58.93.internetserviceteam.com

Date and Time: Wed Sep 16 2009 3:37:38 EDT

 

I need to be sure I can access my email away from home and my business partners in SD and MO can do their thing too while blocking anyone sending spam through our servers.

 

Thanks

Hi there

 

I ended up blocking a bucket load of ip addresses and eventually found that i was getting almost a thousand spams per day. Given that the ip adresses kept changing I decided to use an antispam bot "captcha". As soon as I installed it the spam stopped instantly. The type of captcha will depend on the type of contact form that you use (or cms).

 

If you are being spammed by a robot and do nothing it will only get worse

 

Good luck

[Henrietta]

Thank you for your response!

 

My contact form is within a zen cart.

 

Any captcha recommendations?

[carbonize]

You might find my blog entry on blocking IPs using htaccess useful.

 

http://carbonize.co.uk/wp/2009/05/15/blocking-ip-addresses-using-htaccess/

[imaginarynumber]

Thank you for your response!

 

My contact form is within a zen cart.

 

Any captcha recommendations?

 

http://www.zen-cart.com/index.php?main_page=product_contrib_info&cPath=40_47&products_id=325

 

haven't used it myself but it seems to be ok

 

The problem with ip address blocking is that you might have to enter hundreds per day from robot machines- this will also prevent the owners (read: customers) of those machines from legitimately accessing your site

 

sorry about the tardy reply

 

good luck

Edited October 2, 2009 by imaginarynumber

[MarCn]

Hi all

 

I have a stooopid spammer that thinks that they can use one of my forms to spam other people- they are oblivious to the fact that the reply from us just says "thank you for your interest" and that the hyperlinks that they throw in are not forwarded.

 

Their ip address constantly changes so I guess that they are on a dial up. I am getting bored of blacklisting cheap tadalafil on an individual ip basis

 

I am happy to blacklist anything from pool.ukrtel.net - the site is for a holiday home in florida and the client has never had a real enquiry from Ukraine.

 

How do I do this in cpanel- when i try it says that it cannot resolve the address.

 

Thanks in advance

 

had the same problem with spammers, God i hate them so much :@, if their only would be a way to deactivate all the spam technologies