I run Statcounter on my forum.. I have noticed recently an awful lot of IP addresses coming from China..
And of course in my forum Logs are pages of errors from these bots, known spammers..
Not sure if they are bots checking us out or spammers looking..
What happens if I block all the Chinese IP's I see in the Statcounter..I block my IP addresses through the cPanel..
They are Baidu and from China Telecom Beijing
Nothing will happen if you block them all except no one from China will be able to access your site...unless that is what you what. Keep in mind that all of the IP's and bots you see may not be good ones and may have their IP's masked.
You can also use a .htaccess file to help block them:
http://www.parkansky.com/china.htm
You may also delete that spider from you list in the admin controls. Depends on you target group. for me the less members the better, I add over 4 or 5 thousand of inactive members now it down to 100s of in active members LMAO. But my site any one and view without signing up. a lot fewer visits but this will tell the real interest in what your sites about.
I think when I start giving away themes it may increase and have some interaction.
regards,
Maxx
Quote from: Skhilled on September 03, 2015, 08:11:50 AM
Nothing will happen if you block them all except no one from China will be able to access your site...unless that is what you what. Keep in mind that all of the IP's and bots you see may not be good ones and may have their IP's masked.
You can also use a .htaccess file to help block them:
http://www.parkansky.com/china.htm
That script sounds good, how would I do this..
Quote from: Maxx on September 03, 2015, 08:28:01 AM
You may also delete that spider from you list in the admin controls. Depends on you target group. for me the less members the better, I add over 4 or 5 thousand of inactive members now it down to 100s of in active members LMAO. But my site any one and view without signing up. a lot fewer visits but this will tell the real interest in what your sites about.
I think when I start giving away themes it may increase and have some interaction.
regards,
Maxx
Thanks Maxx, I'll take a look at this..
Quote from: Oldcrow on September 03, 2015, 10:22:28 AM
Quote from: Skhilled on September 03, 2015, 08:11:50 AM
Nothing will happen if you block them all except no one from China will be able to access your site...unless that is what you what. Keep in mind that all of the IP's and bots you see may not be good ones and may have their IP's masked.
You can also use a .htaccess file to help block them:
http://www.parkansky.com/china.htm
That script sounds good, how would I do this..
In your root folder you should have a .htaccess file. Add what is shown in the link. Wait a few days and check and see if it starts to work.
I would copy the code to the desktop then slide it into the .htaccess file..Any special area in the .htaccess...Sounds simple enough..
Problem is I don't see any code for China.. I do see a code that is very short..if that is it..
Anywhere in there should be fine. Just as long as you leave a blank line before and after the code.
This part here will block China, Hong Kong, and Korea:
order allow,deny
allow from all
# Get up-to-date list (in .htaccess format) from http://www.wizcrafts.net/chinese-blocklist.html
# China IP Address Blocks
deny from 1.80.0.0/13 1.92.0.0/14 1.192.0.0/13 1.202.0.0/15 1.204.0.0/14 14.144.0.0/12 14.208.0.0/12 23.80.54.0/24 23.104.141.0/24 23.105.14.0/24 27.8.0.0/13 27.16.0.0/12 27.36.0.0/14 27.40.0.0/13 27.50.128.0/17 27.54.192.0/18 27.106.128.0/18 27.115.0.0/17 27.148.0.0/14 27.152.0.0/13 27.184.0.0/13 36.32.0.0/14 36.248.0.0/14 42.96.128.0/17 42.120.0.0/15 58.16.0.0/15 58.20.0.0/16 58.21.0.0/16 58.22.0.0/15 58.34.0.0/16 58.37.0.0/16 58.38.0.0/16 58.40.0.0/16 58.42.0.0/16 58.44.0.0/14 58.48.0.0/13 58.56.0.0/15 58.58.0.0/16 58.59.0.0/17 58.60.0.0/14 58.68.128.0/17 58.82.0.0/15 58.100.0.0/15 58.208.0.0/12 58.242.0.0/15 58.246.0.0/15 58.248.0.0/13 59.32.0.0/12 59.51.0.0/16 59.52.0.0/14 59.56.0.0/13 59.72.0.0/16 59.108.0.0/15 59.172.0.0/14 60.0.0.0/13 60.11.0.0/16 60.12.0.0/16 60.24.0.0/13 60.160.0.0/11 60.194.0.0/15 60.208.0.0/13 60.216.0.0/15 60.220.0.0/14 61.4.64.0/20 61.4.80.0/22 61.4.176.0/20 61.48.0.0/13 61.128.0.0/10 61.135.0.0/16 61.136.0.0/18 61.139.0.0/16 61.145.73.208/28 61.147.0.0/16 61.150.0.0/16 61.152.0.0/16 61.154.0.0/16 61.160.0.0/16 61.162.0.0/15 61.164.0.0/16 61.175.0.0/16 61.177.0.0/16 61.179.0.0/16 61.183.0.0/16 61.184.0.0/16 61.185.219.232/29 61.187.0.0/16 61.188.0.0/16 61.232.0.0/14 61.236.0.0/15 61.240.0.0/14 101.64.0.0/13 101.72.0.0/14 101.76.0.0/15 101.80.0.0/12 103.253.4.0/22 106.112.0.0/13 110.6.0.0/15 110.51.0.0/16 110.52.0.0/15 110.80.0.0/13 110.88.0.0/14 110.96.0.0/11 110.173.0.0/19 110.173.32.0/20 110.173.64.0/18 110.192.0.0/11 110.240.0.0/12 111.0.0.0/10 111.72.0.0/13 111.121.0.0/16 111.128.0.0/11 111.160.0.0/13 111.172.0.0/14 111.176.0.0/13 111.228.0.0/14 112.0.0.0/10 112.64.0.0/14 112.80.0.0/12 112.100.0.0/14 112.111.0.0/16 112.122.0.0/15 112.224.0.0/11 113.0.0.0/13 113.8.0.0/15 113.12.0.0/14 113.16.0.0/15 113.18.0.0/16 113.62.0.0/15 113.64.0.0/10 113.128.0.0/15 113.136.0.0/13 113.194.0.0/15 113.204.0.0/14 114.28.0.0/16 114.80.0.0/12 114.96.0.0/13 114.104.0.0/14 114.112.0.0/14 112.109.128.0/17 114.216.0.0/13 114.224.0.0/11 115.24.0.0/15 115.28.0.0/15 115.32.0.0/14 115.48.0.0/12 115.84.0.0/18 115.100.0.0/15 115.148.0.0/14 115.152.0.0/15 115.168.0.0/14 115.212.0.0/16 115.230.0.0/16 115.236.96.0/23 115.236.136.0/22 115.239.228.0/22 116.1.0.0/16 116.2.0.0/15 116.4.0.0/14 116.8.0.0/14 116.16.0.0/12 116.52.0.0/14 116.76.0.0/15 116.90.80.0/20 116.112.0.0/14 116.128.0.0/10 116.204.0.0/15 116.208.0.0/14 116.224.0.0/12 116.254.128.0/18 117.8.0.0/13 117.21.0.0/16 117.22.0.0/15 117.24.0.0/13 117.32.0.0/13 117.40.0.0/14 117.44.0.0/15 117.79.224.0/20 117.80.0.0/12 117.136.0.0/13 118.26.0.0/16 118.72.0.0/13 118.112.0.0/13 118.120.0.0/14 118.132.0.0/14 118.144.0.0/14 118.180.0.0/14 118.186.0.0/15 118.192.0.0/16 118.248.0.0/13 119.0.0.0/13 119.8.0.0/16 119.10.0.0/17 119.18.192.0/20 119.36.0.0/16 119.57.0.0/16 119.60.0.0/16 119.88.0.0/14 119.96.0.0/13 119.112.0.0/13 119.120.0.0/13 119.128.0.0/12 119.144.0.0/14 119.164.0.0/14 119.176.0.0/12 119.233.0.0/16 120.0.0.0/12 120.24.0.0/14 120.32.0.0/13 120.40.0.0/14 120.68.0.0/14 120.80.0.0/13 120.192.0.0/10 121.0.16.0/20 121.8.0.0/13 121.16.0.0/12 121.32.0.0/14 121.60.0.0/14 121.76.0.0/15 121.196.0.0/14 121.204.0.0/14 121.224.0.0/12 122.10.128.0/17 122.51.128.0/17 122.64.0.0/11 122.119.0.0/16 122.136.0.0/13 122.156.0.0/14 122.188.0.0/14 122.192.0.0/14 122.198.0.0/16 122.200.64.0/18 122.224.0.0/12 123.4.0.0/14 123.8.0.0/13 123.52.0.0/14 123.64.0.0/11 123.97.128.0/17 123.100.0.0/19 123.112.0.0/12 123.128.0.0/13 123.138.0.0/15 123.150.0.0/15 123.152.0.0/13 123.164.0.0/14 123.180.0.0/14 123.184.0.0/14 123.196.0.0/15 123.232.0.0/14 123.249.0.0/16 124.42.64.0/18 124.64.0.0/15 124.67.0.0/16 124.73.0.0/16 124.114.0.0/15 124.126.0.0/15 124.128.0.0/13 124.160.0.0/15 124.162.0.0/16 124.163.0.0/16 124.192.0.0/15 124.200.0.0/13 124.226.0.0/15 124.228.0.0/14 124.236.0.0/14 124.240.0.0/17 124.240.128.0/18 124.248.0.0/17 125.36.0.0/14 125.40.0.0/13 125.64.0.0/12 125.79.0.0/16 125.80.0.0/13 125.88.0.0/13 125.104.0.0/13 125.112.0.0/12 125.210.0.0/15 140.224.0.0/16 140.237.0.0/16 140.246.0.0/16 140.249.0.0/16 159.226.0.0/16 171.34.0.0/15 171.36.0.0/14 171.40.0.0/13 175.0.0.0/12 175.16.0.0/13 175.24.0.0/14 175.30.0.0/15 175.42.0.0/15 175.44.0.0/16 175.46.0.0/15 175.48.0.0/12 175.64.0.0/11 175.102.0.0/16 175.106.128.0/17 175.146.0.0/15 175.148.0.0/14 175.152.0.0/14 175.160.0.0/12 175.178.0.0/16 175.184.128.0/18 175.185.0.0/16 175.186.0.0/15 175.188.0.0/14 180.76.0.0/16 180.96.0.0/11 180.136.0.0/13 180.152.0.0/13 180.208.0.0/15 182.18.0.0/17 182.32.0.0/12 182.88.0.0/14 182.112.0.0/12 182.128.0.0/12 183.0.0.0/10 183.64.0.0/13 183.129.0.0/16 183.148.0.0/16 183.160.0.0/12 183.184.0.0/13 183.192.0.0/11 192.34.109.224/28 192.74.224.0/19 198.2.203.64/28 198.2.212.160/28 202.43.144.0/22 202.46.32.0/19 202.66.0.0/16 202.75.208.0/20 202.96.0.0/12 202.111.160.0/19 202.112.0.0/14 202.117.0.0/16 202.165.176.0/20 202.196.80.0/20 203.69.0.0/16 203.86.0.0/18 203.86.64.0/19 203.93.0.0/16 203.169.160.0/19 203.171.224.0/20 210.5.0.0/19 210.14.128.0/19 210.21.0.0/16 210.32.0.0/14 210.51.0.0/16 210.52.0.0/15 210.77.0.0/16 210.192.96.0/19 211.76.96.0/20 211.78.208.0/20 211.86.144.0/20 211.90.0.0/15 211.92.0.0/14 211.96.0.0/13 211.136.0.0/13 211.144.12.0/22 211.144.96.0/19 211.144.160.0/20 211.147.0.0/16 211.152.14.0/24 211.154.64.0/19 211.154.128.0/19 211.155.24.0/22 211.157.32.0/19 211.160.0.0/13 211.233.70.0/24 218.0.0.0/11 218.56.0.0/13 218.64.0.0/11 218.84.0.0/14 218.88.0.0/13 218.96.0.0/14 218.102.0.0/16 218.104.0.0/14 218.108.0.0/15 218.194.80.0/20 218.200.0.0/13 218.240.0.0/13 219.128.0.0/11 219.154.0.0/15 219.223.192.0/18 219.232.0.0/16 219.234.80.0/20 219.235.0.0/16 220.112.0.0/16 220.154.0.0/15 220.160.0.0/11 220.181.0.0/16 220.191.0.0/16 220.192.0.0/12 220.228.70.0/24 220.242.0.0/15 220.248.0.0/14 220.250.0.0/19 220.252.0.0/16 221.0.0.0/12 221.122.0.0/15 221.176.0.0/13 221.192.0.0/14 221.200.0.0/14 221.204.0.0/15 221.206.0.0/16 221.207.0.0/16 221.208.0.0/12 221.212.0.0/15 221.214.0.0/15 221.216.0.0/13 221.224.0.0/13 221.228.0.0/14 221.232.0.0/13 222.32.0.0/11 222.64.0.0/12 222.80.0.0/12 222.132.0.0/14 222.136.0.0/13 222.168.0.0/13 222.172.222.0/24 222.176.0.0/13 222.184.0.0/13 222.200.0.0/16 222.208.0.0/13 222.219.0.0/16 222.220.0.0/15 222.240.0.0/13 223.4.0.0/14 223.64.0.0/11 223.144.0.0/12 223.240.0.0/13
# Hong Kong (HK)
deny from 58.65.232.0/21 59.148.0.0/15 103.253.96.0/22 103.253.140.0/22 110.173.48.0/20 112.121.160.0/19 112.213.64.0/20 112.213.96.0/19 113.10.128.0/17 113.252.0.0/14 118.99.0.0/18 118.140.0.0/14 121.127.224.0/19 122.10.0.0/17 123.242.229.0/24 147.8.0.0/16 180.235.134.0/24 202.69.64.0/19 202.85.128.0/19 202.133.8.0/21 203.78.32.0/21 203.198.0.0/16 203.218.0.0/16 210.176.0.0/19 210.176.48.0/20 210.176.64.0/18 210.176.128.0/17 210.177.0.0/16 210.209.64.0/18 218.103.0.0/16 218.250.0.0/16 218.252.0.0/14 219.76.0.0/14 219.90.112.0/20 222.166.0.0/16 223.16.0.0/14
# Korea (KR) (including North Korea) IP addresses follow:
deny from 1.208.0.0/12 1.224.0.0/11 14.32.0.0/11 14.64.0.0/11 27.115.128.0/17 27.255.64.0/18 58.72.0.0/13 58.120.0.0/13 58.140.0.0/14 58.148.0.0/14 58.180.40.0/21 58.224.0.0/12 59.0.0.0/11 59.86.192.0/18 59.186.0.0/15 61.32.0.0/13 61.40.0.0/14 61.72.0.0/13 61.80.0.0/15 61.96.0.0/12 61.110.16.0/20 61.248.0.0/13 101.79.0.0/16 110.8.0.0/13 110.45.0.0/16 112.144.0.0/12 112.160.0.0/11 112.216.0.0/13 113.30.64.0/18 114.29.0.0/17 114.108.0.0/17 114.108.128.0/18 114.200.0.0/13 115.0.0.0/12 115.16.0.0/13 115.40.0.0/15 115.68.0.0/16 115.88.0.0/13 116.40.0.0/16 116.45.176.0/20 116.93.192.0/19 116.120.0.0/13 117.110.0.0/15 118.32.0.0/11 118.128.0.0/14 118.216.0.0/13 119.64.0.0/13 119.192.0.0/11 120.50.64.0/18 121.78.0.0/16 121.88.0.0/16 121.101.224.0/19 121.127.64.0/18 121.127.128.0/18 121.128.0.0/10 121.254.0.0/16 122.32.0.0/13 122.44.112.0/20 122.99.128.0/17 123.111.0.0/16 123.140.0.0/14 123.212.0.0/14 123.248.0.0/16 124.0.0.0/15 124.50.87.161 124.136.0.0/14 124.217.192.0/19 125.128.0.0/11 125.176.0.0/12 125.240.0.0/13 125.248.0.0/14 143.248.0.0/16 166.104.0.0/16 168.188.0.0/16 175.45.176.0/22 175.112.0.0/12 180.64.0.0/13 180.224.0.0/13 202.30.0.0/15 202.133.16.0/20 202.179.176.0/21 203.226.0.0/15 203.228.0.0/14 203.244.0.0/14 203.248.0.0/13 210.93.0.0/16 210.94.0.0/15 210.108.0.0/14 210.112.0.0/14 210.117.128.0/18 210.118.216.192/26 210.124.0.0/14 210.178.0.0/15 210.180.0.0/15 210.204.0.0/15 210.210.192.0/18 210.219.0.0/16 210.220.0.0/14 211.32.0.0/12 211.48.0.0/15 211.50.0.0/15 211.52.0.0/16 211.62.35.0/24 211.104.0.0/13 211.112.0.0/13 211.168.0.0/13 211.176.0.0/12 211.192.0.0/12 211.208.0.0/14 211.216.0.0/13 211.224.0.0/13 211.232.0.0/13 211.240.0.0/12 218.36.0.0/14 218.48.0.0/13 218.144.0.0/12 218.209.0.0/16 218.232.0.0/14 218.236.0.0/14 219.240.0.0/15 219.248.0.0/13 219.250.88.0/21 220.72.0.0/13 220.80.0.0/13 220.95.88.0/24 220.118.0.0/16 220.119.0.0/16 221.128.0.0/12 221.144.0.0/12 221.160.0.0/13 221.168.0.0/16 221.163.46.0/24 222.96.0.0/12 222.112.0.0/13 222.120.0.0/15 222.122.0.0/16 222.231.0.0/18 222.232.0.0/13
Thanks Steve, nice of you to do this for me, I appreciate the help..
Ron..
No problem. ;D
Done, we'll see what happens.. :groan:
Give it a couple of days. The real search bots will obey it. The fake ones may not.
The ones that do not obey just add them to IPDeny in cPanel. ;)
Quote from: Skhilled on September 05, 2015, 11:40:29 AM
Give it a couple of days. The real search bots will obey it. The fake ones may not.
The ones that do not obey just add them to IPDeny in cPanel. ;)
I installed early this morning, and I thought I noticed a few missing already..
B ut I will look for what you say..
Thanks.. :taz:
No problem, Ron. ;D
Its working good, no more China bots..
emsisoft joined my board today, is posting about Windows 10..All lead back go to emsisoft
Well, you can block it...if you choose.
Quote from: Skhilled on September 08, 2015, 07:53:44 AM
Well, you can block it...if you choose.
I am wondering if it's real or a bot.. I have to check this out.. She does have a facebook account and a few others..
That's very possible that it's a real person...trying to drum up some business. But it still sounds like spamming, nonetheless.
Quote from: Skhilled on September 08, 2015, 09:08:51 AM
That's very possible that it's a real person...trying to drum up some business. But it still sounds like spamming, nonetheless.
I can agree with you on this.. I will check her and maybe send her this way..
PM me her her IP and email addy and I'll do a check on her
Quote from: Skhilled on September 08, 2015, 09:17:19 AM
PM me her her IP and email addy and I'll do a check on her
Here you go buddy
Username:
emsisoftPosts:
1 (N/A per day)
Email:
**********************Facebook, Twitter, Google+, LinkedIn, YouTube, My Space, GitHub, VK, Spring & FQuick Details:
Gender:
FemaleAge:
N/A
Date Registered:
Yesterday at 01:27:14 PM
IP:
***.**.***.**Hostname:
***.**.***.**Local Time:
September 08, 2015, 09:28:05 AM
Last Active:
I joined the Emsisoft forum and posted about this, see what they say.. I did not find any name on the emsisoft forum related to her..
I'd love to have someone like this posting on the forum, as long as it's a real person..
Yesterday at 01:58:08 PM
Seems to be from the Ukraine.
I did ask for this in a PM in case she is real. You should never post IP or email addresses openly. Bad bots can read them and spam them....I edited your post to block them. ;)
Btw, does she actually respond to users who post in her topics?
Quote from: Skhilled on September 08, 2015, 09:48:49 AM
Seems to be from the Ukraine.
I did ask for this in a PM in case she is real. You should never post IP or email addresses openly. Bad bots can read them and spam them....I edited your post to block them. ;)
Btw, does she actually respond to users who post in her topics?
Sorry about that Steve.. Still to early in the morning, and I guess I didn't see the PM part.. Sorry..
Yea Ukraine but profile say New Zeland..
No problem. :) You just don't want to want to give them problems if they are real and just may be trying to be helpful...even tho they shouldn't be doing this. LOL
stopforumspam.com says Ukraine. So they are spoofing/lying. Go to their profile then Profile Info -> Track User -> IP Address. Under "Look up IP on a regional whois-server" something should be in bold text. If it is click on it and it should tell you where they are from.
Then look in "Members from IP (range)" (right below "Look up IP on a regional whois-server") and see if there are multiple usernames there. If so, then they have created multiple accounts. Good users should not do that unless they have multiple users registered in the same household. On this site, no one is allowed to have multiple accounts unless they specifically ask for it. Bots will not ask for it but humans might. ;)
Quote from: Skhilled on September 08, 2015, 10:11:38 AM
No problem. :) You just don't want to want to give them problems if they are real and just may be trying to be helpful...even tho they shouldn't be doing this. LOL
stopforumspam.com says Ukraine. So they are spoofing/lying. Go to their profile then Profile Info -> Track User -> IP Address. Under "Look up IP on a regional whois-server" something should be in bold text. If it is click on it and it should tell you where they are from.
Then look in "Members from IP (range)" (right below "Look up IP on a regional whois-server") and see if there are multiple usernames there. If so, then they have created multiple accounts. Good users should not do that unless they have multiple users registered in the same household. On this site, no one is allowed to have multiple accounts unless they specifically ask for it. Bots will not ask for it but humans might. ;)
I also get the same.. I did a full check after the member registered.
I'm happy if she posts more and is legit..
Nothing back from the emsisoft forum.. I got some good friends in the security forums I might check with them..
Steve it is the real thing..had confirmation from her..
Okay...