Tech Real IP Adresses for EveKnows.com and XXGasm.com? - GoFuckYourself.com

Jigster715 · 07-20-2016, 08:22 PM

We need to block them at IP4 level is possible.

Help would be appreciated. From illegal content to CP these guys got it all...
EveKnows.com and XXGasm.com

Thanks for any help.

Bladewire · 07-20-2016, 08:42 PM

Who do you pay for that info, and how much?

Jigster715 · 07-20-2016, 08:45 PM

Quote:

Originally Posted by Bladewire

Who do you pay for that info, and how much?

Well, the owner is fucking over so many people by site scraping then adding pop up hell that usually someone out there who knows gives it for free. Those are poison sites.
I'm not making money from the info but its nice to get bad sites taken down.

Bladewire · 07-20-2016, 09:07 PM

If more people post in this thread that are known here I will work for free for the community, as I have before.

I'm sorry but I don't know who you are, your properties, history, etc. I'm all about supporting the community or paid work from unknowns. Best of luck to you 👍

Jigster715 · 07-20-2016, 09:24 PM

Quote:

Originally Posted by Bladewire

If more people post in this thread that are known here I will work for free for the community, as I have before.

I'm sorry but I don't know who you are, your properties, history, etc. I'm all about supporting the community or paid work from unknowns. Best of luck to you 👍

Sure. No problem. Thanks anyway.

Jigster715 · 07-20-2016, 09:25 PM

This is another bad site. jpg4.info

They are creating back links to our sites and their back links have cp in them.

Jigster715 · 07-20-2016, 09:28 PM

Here is a page from xxgasm....

xxgasm.com/gokkun-idol/]Gokkun Idol

All stolen content from many programs being used for other purposes.

Bladewire · 07-20-2016, 09:30 PM

What are ALL of YOUR sites they are creating backlinks to?

Jigster715 · 07-20-2016, 09:35 PM

Quote:

Originally Posted by Bladewire

What are ALL of YOUR sites they are creating backlinks to?

Sent you a PM.

Here is the grandaddy of blackhat sites

jjgirls.com - To block them would be great.

Bladewire · 07-20-2016, 09:42 PM

On my phone can't get your PM but yeah I C U BH boy. Carry on 🍆💦

AdultKing · 07-20-2016, 09:52 PM

Someone in our Slack Team might be able to help.

rowan · 07-20-2016, 10:06 PM

They could be lazy and use something that sticks out like a sore thumb (it's obvious from the headers that it's not a real browser) but chances are that they've been blocked before based on this, and so they're now doing something more sophisticated.

IP level blocks won't work very well either, since they can just use proxies.

Jigster715 · 07-20-2016, 10:12 PM

Quote:

Originally Posted by rowan

They could be lazy and use something that sticks out like a sore thumb (it's obvious from the headers that it's not a real browser) but chances are that they've been blocked before based on this, and so they're now doing something more sophisticated.

IP level blocks won't work very well either, since they can just use proxies.

When I was checking these guys before they often show up in mobile networks out of Hong Kong.

Bladewire · 07-20-2016, 10:23 PM

Quote:

Originally Posted by Jigster715

When I was checking these guys before they often show up in mobile networks out of Hong Kong.

What does that tell you?

Jigster715 · 07-20-2016, 10:46 PM

Quote:

Originally Posted by Bladewire

What does that tell you?

Well, I know one of them lives there. That is certain. There are more than 1 persons running their op.
But IPs bounce around, websites bounce around, IPs bounce around.

Jigster715 · 07-21-2016, 11:13 AM

Bumpin the Pumpkin.

Barry-xlovecam · 07-21-2016, 11:52 AM

use $ dig

and $ipcalc ip/CIDR

Bladewire · 07-21-2016, 11:54 AM

104.143.10.70 looks fishy I'd redirect it to a Tumblr. I wouldn't let Versaweb or Leaseweb near my sites if I was you.

unillusionedmethodizing.xyz
weeran.xyz
nibpau.xyz

Bladewire · 07-21-2016, 12:52 PM

89.163.217.5 = weeran.xyz
104.143.10.68 = nibpau.xyz
104.143.10.69 = siddpp.xyz
104.143.10.70 unillusionedmethodizing.xyz & XXGasm.com
89.163.217.5. Not good

Webtropia.com is connected to these you can contact this guy:

Christoph Herrnkind
[email protected]
+49.21117165977

Jigster715 · 07-21-2016, 04:00 PM

You guys, Blade and Barry are awesome. Thank you.

rowan · 07-21-2016, 04:40 PM

Quote:

Originally Posted by Bladewire

I wouldn't let Versaweb or Leaseweb near my sites if I was you.

Building on that: there's probably companies which sell lists, or more likely, access to an API, which will help you determine whether a particular IP is consumer facing, or more likely to be a server in a data centre. That should help quickly narrow down suspicious IPs. Just remember it won't be 100% accurate.

Another possibility may be to analyse logs and look for patterns that suggest it's not a human using the site interactively. For example, on a forum I run, I found a large number of spammers were "filling in" and submitting the registration form less than one second after loading it.

PornDiscounts-V · 07-21-2016, 04:51 PM

We block Hong Kong and China...

Before blocking them $xx,xxx per month
After blocking them $xx,xxx per month

They don't buy shit.

Bladewire · 07-21-2016, 04:54 PM

Quote:

Originally Posted by vvvvv

We block Hong Kong and China...

Before blocking them $xx,xxx per month
After blocking them $xx,xxx per month

They don't buy shit.

Blocking is too obvious, always send to a honeypot is my way

07-20-2016, 08:22 PM	#1
Jigster715 So Fucking Banned Industry Role: Join Date: Jul 2015 Location: elmer blackwood mansion Posts: 1,459	Real IP Adresses for EveKnows.com and XXGasm.com? We need to block them at IP4 level is possible. Help would be appreciated. From illegal content to CP these guys got it all... EveKnows.com and XXGasm.com Thanks for any help.

07-20-2016, 09:07 PM	#4
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	If more people post in this thread that are known here I will work for free for the community, as I have before. I'm sorry but I don't know who you are, your properties, history, etc. I'm all about supporting the community or paid work from unknowns. Best of luck to you 👍 __________________ Skype: CallTomNow

07-21-2016, 04:51 PM	#22
PornDiscounts-V Confirmed User Industry Role: Join Date: Oct 2003 Location: L.A. Posts: 5,744	We block Hong Kong and China... Before blocking them $xx,xxx per month After blocking them $xx,xxx per month They don't buy shit. __________________ Blog Posts - Contextual Links - Hardlinks on 600+ Blog Network * Handwritten * 180 C Class IPs * Permanent! * Many Niches! * Bulk Discounts! GFYPosts /at/ J2Media.net

07-20-2016, 08:42 PM	#2
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	Who do you pay for that info, and how much?

07-20-2016, 09:25 PM	#6
Jigster715 So Fucking Banned Industry Role: Join Date: Jul 2015 Location: elmer blackwood mansion Posts: 1,459	This is another bad site. jpg4.info They are creating back links to our sites and their back links have cp in them.

07-20-2016, 09:28 PM	#7
Jigster715 So Fucking Banned Industry Role: Join Date: Jul 2015 Location: elmer blackwood mansion Posts: 1,459	Here is a page from xxgasm.... xxgasm.com/gokkun-idol/]Gokkun Idol All stolen content from many programs being used for other purposes.

07-20-2016, 09:30 PM	#8
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	What are ALL of YOUR sites they are creating backlinks to?

07-20-2016, 09:42 PM	#10
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	On my phone can't get your PM but yeah I C U BH boy. Carry on 🍆💦

07-20-2016, 09:52 PM	#11
AdultKing Raise Your Weapon Industry Role: Join Date: Jun 2003 Location: Outback Australia Posts: 15,601	Someone in our Slack Team might be able to help.

07-20-2016, 10:06 PM	#12
rowan Too lazy to set a custom title Join Date: Mar 2002 Location: Australia Posts: 17,393	They could be lazy and use something that sticks out like a sore thumb (it's obvious from the headers that it's not a real browser) but chances are that they've been blocked before based on this, and so they're now doing something more sophisticated. IP level blocks won't work very well either, since they can just use proxies.

07-21-2016, 11:13 AM	#16
Jigster715 So Fucking Banned Industry Role: Join Date: Jul 2015 Location: elmer blackwood mansion Posts: 1,459	Bumpin the Pumpkin.

07-21-2016, 11:52 AM	#17
Barry-xlovecam It's 42 Industry Role: Join Date: Jun 2010 Location: Global Posts: 18,083	use $ dig and $ipcalc ip/CIDR

07-21-2016, 11:54 AM	#18
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	104.143.10.70 looks fishy I'd redirect it to a Tumblr. I wouldn't let Versaweb or Leaseweb near my sites if I was you. unillusionedmethodizing.xyz weeran.xyz nibpau.xyz

07-21-2016, 12:52 PM	#19
Bladewire StraightBro Industry Role: Join Date: Aug 2003 Location: Monarch Beach, CA USA Posts: 56,229	89.163.217.5 = weeran.xyz 104.143.10.68 = nibpau.xyz 104.143.10.69 = siddpp.xyz 104.143.10.70 unillusionedmethodizing.xyz & XXGasm.com 89.163.217.5. Not good Webtropia.com is connected to these you can contact this guy: Christoph Herrnkind [email protected] +49.21117165977

07-21-2016, 04:00 PM	#20
Jigster715 So Fucking Banned Industry Role: Join Date: Jul 2015 Location: elmer blackwood mansion Posts: 1,459	You guys, Blade and Barry are awesome. Thank you.