ZB Block being over-zealous?

[Flup]

Hi,

I usually browse the forum either from work or via a VPS, but today both are being blocked by ZB Block. Is it using a more restrictive ruleset?

Cheers
- Ian

[webhick]

I checked all the IPs you've posted from so I can locate the reason in the logs. Your most common IP is assigned to a company with a 20.42% listing on CleanTalk.org and 1.45% on Google's Malware Dashboard.

PM me the current IP addresses for your work and VPN. There might be additional information there that I can work with to get you back online with us.

[Arthur Rubin]

I was blocked while using a public WiFi on an Amtrak train.

I thought, at first, it was Amtrak blocking Quatloos.com. Amtrak seems to block anything NSFW.

[webhick]

Public WiFis are hit-or-miss. Someone must have used that IP or block of IPs to behave badly (hacking, spamming, etc).

[Arthur Rubin]

Cannot log in over wireless, either....

[webhick]

ZB Block doesn't care if you're on wireless. Can you PM me the affected IP address so I can track down the reason why you were blocked?

[AnOwlCalledSage]

Noticed that I'm now getting blocked when using the Tunnel Bear Chrome VPN extension with the ZB Block message.

Countries: UK, USA, Canada, France, Germany, Romania and Australia fail 403 forbidden (haven't tried all yet).

Example:
The detected reason(s) you were blocked are:
Spamhaus DROP/EDROP (IP4-SPAMHAUSDROPEDROP-759).

UK IP address for Tunnel Bear is is 206.189.112.252

Connects to Quatloos fine if I switch it off or set it to New Zealand (as I am now)!

[webhick]

Anonymizer services are havens for spammers and hackers. These services issue you an IP that someone else has used and therefore might have been used by a spammer. The SpamHaus blocked IP lists change over time as a result. An IP that is blocked one day may not be blocked the next due to decreased abusive behavior coming from that IP. An IP that is fine today might not be tomorrow because a spammer started using it.

It seems there has not been much abuse from the NZ IPs.

[Arthur Rubin]

Blocked from "public" Wi-Fi; blocked IP address was 70.42.240.140 .

[webhick]

Blocked from "public" Wi-Fi; blocked IP address was 70.42.240.140 .

If the IP block's owner had a borderline reputation, I would temporarily open it up for you (since I can't open the IP since public wifis change your IPs a lot)....but there are a lot of bad bots using their network. We've even got recent hits on our own logs from those bots.