could u remove my IP address from the ban list?

ronniebfuk · 2009-08-07 11:38 am

im a moderator on a car forum, I tried to register on your forum to report some spammers but got banned and had my username listed twice? Rather confused about the whole thing! Can I have some help here please.

ronniebfuk · 2009-08-07 12:13 pm

also why was my IP put on the ban list in the first place? as far as I know it's a residential IP for my area of the UK. I've never spammed a forum or website in my life and am a Mod on 2 forums. Im rather peeved about it, I had to register on my mobile as I can't get online with my PC due to the black list.

Last edited by ronniebfuk (2009-08-07 12:26 pm)

ih8spam · 2009-08-07 4:17 pm

check your computer for viruses/spyware/malware

if your IP is on this site's block list, and you are not really a spammer,
then your computer has been hijacked and is being used in a bot-net to send spam .

if your computer is clean, fill out the Removal form to get your IP removed from the database .

ronniebfuk · 2009-08-07 4:39 pm

That sounds bad! I presume a sweep using Webroot or AVG will unearth any troubles? Im not computer savvy! How does my computer get used in a bot net? im worried now! And thanks for your time.

ih8spam · 2009-08-07 5:01 pm

there are any number of ways you could get infected .

you could have clicked on a link, opened an e-mail, or sometimes, just visiting an infected website will infect your computer .

and if you see spam on a forum, especially PORN spam,
NEVER click on the link or the pictures (if any),
the link could infect your computer .

make sure your anti-virus is up to date & scan your computer .

ronniebfuk · 2009-08-07 5:16 pm

That helps alot, on one of the forums I mod on we've had alot of porn posted which ive deleted everytime, so guess it got picked up from their, . Currently scanning computer now. Will keep fingers crossed.

ih8spam · 2009-08-07 5:27 pm

good luck

and make sure you tell your members to never click on spam links, I use Linux so I don't get viruses, and nearly every spam porn link I have ever clicked tried to download a virus onto my computer, this is one way the bad guys build up their bot-nets .

ronniebfuk · 2009-08-07 5:29 pm

Also. what's the best malware finder to use? is AVG or Websoot spy sweeper up to it? Quite concerned now.

ih8spam · 2009-08-07 5:34 pm

well, as I said in my post above, I use Linux, so I don't really need anti-virus, I have one, but it's lame & I never really use it .

but some people on my forum seem to like Trend Micro's Housecall
you can get a free scan there .

zaphod · 2009-08-07 5:51 pm

ronniebfuk wrote:

Also. what's the best malware finder to use?

It really is a multi-pronged approach you need. For my recommendations, please see...

http://www.spambotsecurity.com/anti-virus.php

and

http://www.spambotsecurity.com/anti-spyware.php

Zap

ronniebfuk · 2009-08-07 6:00 pm

AVG has come up with some items which might not look good. Am I going to be OK trying to log on here on my PC? or will the fact my IP is blacklisted make this account unusable if I do that? Am on phone cuqrently. so slow.

ih8spam · 2009-08-07 6:05 pm

I don't know how this site's anti-spam works, maybe since you had signed up here under a different IP you may be able to log in now, or maybe not, the only way to find out is to try to log on here with your computer & see what happens .

zaphod · 2009-08-07 6:23 pm

ih8spam wrote:

well, as I said in my post above, I use Linux, so I don't really need anti-virus, I have one, but it's lame & I never really use it .

Uhhh, I respectfully disagree... You do need an anti-virus, not for yourself, but for those who may come in contact with files you do not currently see as threats, or if you run a php or asp webserver.

Also, if your machine is a server, you are most certainly infectable. Not with x86 or 680x machine language viruses, but definitely PHP viruses, which can compromise your whole system due to PHP's ability to write, read, and execute files system-wide! Setting up php to have a limited scope helps, but your machine can still be made into a "zombie" purely within the limited scope of your webroot.

How? The current generation of php script infections are actually bots themselves, they never need to infect your system to any level deeper than the user permissions of php. They do not need access to MySql either, as any local storage they need, if any, is done in flat-files, or remote.

They can make your machine do things like...

* DoS attack other sites
* Send out mail spam
* Infect other sites/forums
* Act as an http: proxy server
* Send out forum spam

and all of that (and more) can be done when you have limited the scope of php to the website directories alone, no exposed MySQL passwords, and even file writes turned off (remote execution alone).

Recently I helped take one of these viruses off the street (see http://www.forumpostersunion.com/showth … #post39597 post 149 onwards ), and here is what Avira said when I sent them a copy of the referenced file...

*** START MESSAGE ***
Dear Sir or Madam,

Thank you for your email to Avira's virus lab.
Tracking number: (REMOVED).

A listing of files alongside their results can be found below:
File ID Filename Size (Byte) Result
25420065 lime2.txt 22.41 KB MALWARE

Please find a detailed report concerning each individual sample below: Filename Result lime2.txt MALWARE

The file 'lime2.txt' has been determined to be 'MALWARE'. Our analysts named the threat PHP/Deftol.A. The term "PHP/" denotes a PHP scriptvirus.Detection will be added to our virus definition file (VDF) with one of the next updates.

*** END OF MESSAGE ***

So, as you can see, virus companies do care about the viruses that can infect your machine, and as a matter of fact...

http://free-av.com/en/download/download_servers.php has listed a free version of Avira AntiVir for *nix machines.

I use it on my 'dows boxes, and I love it. It's as paranoid as I am.

Zap

Last edited by zaphod (2009-08-07 6:26 pm)

ronniebfuk · 2009-08-07 6:31 pm

well im going to try logging in from my PC, if you hear nothing back from me then it's gone pear shaped and the sites banned me. Hopefully Admin will rectify the problem if he sees this thread. And all this because of a spammer! :mad. I hate them.

ih8spam · 2009-08-07 6:33 pm

zaphod wrote:

ih8spam wrote:
well, as I said in my post above, I use Linux, so I don't really need anti-virus, I have one, but it's lame & I never really use it .
Uhhh, I respectfully disagree... You do need an anti-virus, not for yourself, but for those who may come in contact with files you do not currently see as threats, or if you run a php or asp webserver.

Yeah, you got a point there, Zap

even though the chances mf my computer are very small, I can still be a "carrier" of windows viruses, but I have no reason to be passing .EXE files to anyone .

and I don't run a web server on my computer, at least not one that's connected to the internet .

ronniebfuk · 2009-08-07 6:37 pm

you'll know if it goes wrong as my Username will come up in the spam list. Trying now!

Well I'm on, phew! that's a relief!

Last edited by ronniebfuk (2009-08-07 6:39 pm)

ih8spam · 2009-08-07 6:42 pm

ronniebfuk wrote:

you'll know if it goes wrong as my Username will come up in the spam list. Trying now!
Well I'm on, phew! that's a relief!

I guess that SFS only blocks registrations like my forum does, but not logins .

and welcome to the forum, ronniebfuk

ronniebfuk · 2009-08-07 7:13 pm

ih8spam wrote:

ronniebfuk wrote:
you'll know if it goes wrong as my Username will come up in the spam list. Trying now!
Well I'm on, phew! that's a relief!
I guess that SFS only blocks registrations like my forum does, but not logins .

and welcome to the forum, ronniebfuk

Cheers ih8spam, hopefully I'll be a regular contributor here, get alot of spam on one of the forums I'm on, the other main forum(car) doesn't get so much due to having a huge long ban list of IP's!

Scan is still ongoing on computer, so will wait till that has finished, then look at removing my name from the spam list.

BANDIT · 2009-08-08 4:21 am

.
.
.
Hello ronniebfuk
Welcome to @SFS forumz bro.

I won't get into this conversation "Big-time", but i have some Info
for you. I've been around a lot of years, and the Internet is my home
so to speak.

My (home) Forum contributions require me to enter some sensitve sites,
and work with some (very abrasive) files. Viruses and Trojans are an
everyday occurance for me.

Clicking links can cause severe problems for the every-day computer
enthusiast. A warning may jump out at you, but in the main, your
computer will usually lock, and you need to Re-Boot from being On-line.

I've used most Av Software, but am using ESETNod32 nowadays.
My advice .... NEVER use free Av/sw. Never crack Av/sw onto your
system. Using cracked Av/sw (warez) on your system, means you will be
hunting for the latest activation keys. BUT .... The sofware also
needs the Modules updating as well. So, a bit of a loser really.

NOD32...
If you click a scabby link, a warning ALWAYS pops up. If you download
a file with trojan, the link is broken. If you enter any site with
crap in there, you will be warned.

Incidentally. I also use Windows Defender. (Auto updates every 2
days). NOD32 updates about 6 times a day. And the creme de la creme.
I have "Rollback Rx" installed.

I'm not posting links to the S/w i have mentioned. Use Google.
But if you want to use sensitive sites or material. Get tooled
up..!!
.
.
.
Best wishes to all you guys. Happy surfing...
.
.
.

[EDIT]
6 months ago, I re-newed my license for NOD32. About UK£50 for 3 years.
That is Half a penny a day. And considering my daily actions .. WINK

My system is worth that !! .. I've done the Re-Format thing, and that sux.
[EDIT]

.
.
.

Last edited by BANDIT (2009-08-08 4:28 am)

SpamHammer · 2009-08-08 8:17 am

@ Zap

You mentioned Avira. It was recommended to me on another forum and I've used it on one of my machines for a couple of years now.

I use Norton 360 on the other two but I am impressed with Avira.

I often wonder why I still pay for Norton when Avira is free. I guess it's just a case of "old habits die hard".

ronniebfuk · 2009-08-08 11:22 am

Well I've scanned my computer and no viruses or malware e.t.c were on the computer, there was a spy cookie which has been quarantined.

Downloaded Avira and that found nothing, happy days!

Doing a search on DNSBL on my IP lists this, of which I don't understand a thing :rofl

"A special case is the misc.spam group, which includes entire blocks of addresses that have a) sent spam here, b) have consecutive or missing reverse dns, and c) have no customer sub-delegation via either the controlling RIR (ARIN, RIPE, LACNIC, APNIC, etc) or an rwhois server referenced in the main RIR records."

What does that mean??????

Last edited by ronniebfuk (2009-08-08 11:33 am)

BobSfs · 2009-08-08 12:08 pm

By FAR the most likely reason your IP address is on the block list is that it is a dynamic IP (as most are) and was allocated by your ISP to someone else in the past and their machine was infected by a bot or proxy (or they themselves actually used it to spam). Check the dates of the report(s) and you will probably find it was some time in the past when you did not have that IP address. If the date is current however, then you may have a problem.

On my site we only bock IP addresses that were reported under 3 months ago to avoid blocking legitimate users who have simply been assigned a IP address that was used in the past for spamming.

If you are normally connected 24/7 try shutting the ADSL or cable modem down for several hours - there is a good chance you will get a new IP address when you reconnect.

Good luck, Bob.

Last edited by BobSfs (2009-08-08 12:10 pm)

ronniebfuk · 2009-08-08 1:17 pm

Some great info there Bob, much appreciated, I'll give that a try.

I need to contact my ISP as my Fiancées Outlook Express can receive Email but can't send it, she can't remember her password either! Whether some setting have got changed I'm not sure.

It doesn't rain :lol

zaphod · 2009-08-08 3:22 pm

@ Bandit...

I have had wonderful success with Avira free. With it's heuristics turned up on high, it is overly paranoid...

... to the point I have had to report many falses to their signature team.

I also like the expedient manner they help me get php script viruses, that I've baited/captured with ZB Block (special in-house version), added to the world's signature files. My body-count so far is at ~15 trojan php shells and one nasty self-propagating php virus shell (botnet in a can kind of thing).

But, to each their own when it comes to choice of AV scanner. If what you have works, good. If it fails, none of us will know it till it's too late.

@ SpamHammer...

Thanks for the vote of confidence.

Zap

diabolic.bg · 2009-08-08 6:47 pm

I like Avira too but why Windows Security Center don't like it?

Last edited by diabolic.bg (2009-08-08 6:48 pm)

#1 2009-08-07 11:38 am

could u remove my IP address from the ban list?

#2 2009-08-07 12:13 pm

Re: could u remove my IP address from the ban list?

#3 2009-08-07 4:17 pm

Re: could u remove my IP address from the ban list?

#4 2009-08-07 4:39 pm

Re: could u remove my IP address from the ban list?

#5 2009-08-07 5:01 pm

Re: could u remove my IP address from the ban list?

#6 2009-08-07 5:16 pm

Re: could u remove my IP address from the ban list?

#7 2009-08-07 5:27 pm

Re: could u remove my IP address from the ban list?

#8 2009-08-07 5:29 pm

Re: could u remove my IP address from the ban list?

#9 2009-08-07 5:34 pm

Re: could u remove my IP address from the ban list?

#10 2009-08-07 5:51 pm

Re: could u remove my IP address from the ban list?

#11 2009-08-07 6:00 pm

Re: could u remove my IP address from the ban list?

#12 2009-08-07 6:05 pm

Re: could u remove my IP address from the ban list?

#13 2009-08-07 6:23 pm

Re: could u remove my IP address from the ban list?

#14 2009-08-07 6:31 pm

Re: could u remove my IP address from the ban list?

#15 2009-08-07 6:33 pm

Re: could u remove my IP address from the ban list?

#16 2009-08-07 6:37 pm

Re: could u remove my IP address from the ban list?

#17 2009-08-07 6:42 pm

Re: could u remove my IP address from the ban list?

#18 2009-08-07 7:13 pm

Re: could u remove my IP address from the ban list?

#19 2009-08-08 4:21 am

Re: could u remove my IP address from the ban list?

#20 2009-08-08 8:17 am

Re: could u remove my IP address from the ban list?

#21 2009-08-08 11:22 am

Re: could u remove my IP address from the ban list?

#22 2009-08-08 12:08 pm

Re: could u remove my IP address from the ban list?

#23 2009-08-08 1:17 pm

Re: could u remove my IP address from the ban list?

#24 2009-08-08 3:22 pm

Re: could u remove my IP address from the ban list?

#25 2009-08-08 6:47 pm

Re: could u remove my IP address from the ban list?

Board footer