rendered paste body blacklist {
name = "rbl.efnet.org";
type = "A record reply";
reply {
1 = "Open proxy";
2 = "Trojan spreader";
3 = "Trojan infected client";
4 = "TOR exit server";
5 = "Drones / Flooding";
};
ban_unknown = yes;
kline = "ZLINE %i 1d :Listed in rbl.efnet.org. See rbl.efnet.org/?i=%i";
};
blacklist {
name = "dnsbl.njabl.org";
type = "A record reply";
reply {
9 = "Open proxy";
};
ban_unknown = no;
kline = "ZLINE %i 1d :%n, Your IP, %i, is in our Open Proxy List.. www.njabl.org/cgi-bin/lookup.cgi?query=%i";
};
blacklist {
name = "ircbl.ahbl.org";
type = "A record reply";
ban_unknown = yes;
reply {
2 = "Abusive";
};
kline = "ZLINE %i 1d :%n, Your IP, %i, is in our DDoS/Drone/Spammer/Abuse List.. http://www.ahbl.org/tools/lookup.php?ip=%i";
};
blacklist {
name = "tor.ahbl.org";
type = "A record reply";
reply {
2 = "Tor exit server";
};
ban_unknown = no;
kline = "ZLINE %i 1d :%n, Your IP, %i, is in our TOR Server List.. http://www.ahbl.org/tools/lookup.php?ip=%i";
};
blacklist {
name = "list.dsbl.org";
type = "A record reply";
reply {
2 = "Open Proxy";
};
ban_unknown = no;
kline = "ZLINE %i 1d :Open proxy found on your host, please visit dsbl.org/listing?%i";
};
blacklist {
name = "xbl.spamhaus.org";
type = "A record reply";
reply {
4 = "CBL";
5 = "NJABL";
6 = "BOPM";
};
ban_unknown = no;
kline = "ZLINE %i 1d :You are in the XBL.spamhaus.org DNSBL. http://www.spamhaus.org/query/bl?ip=%i";
};
blacklist {
name = "dnsbl.sorbs.net";
type = "A record reply";
reply {
2 = "open proxy - HTTP";
3 = "open proxy - SOCKS";
4 = "open proxy - MISC";
5 = "open proxy - SMTP";
7 = "insecure server";
9 = "zombie netblock";
};
ban_unknown = no;
kline = "ZLINE %i 1d :You are in the SORBS.net DNSBL. Please visit http://www.sorbs.net/lookup.shtml?%i";
};
blacklist {
name = "dnsbl.ahbl.org";
type = "A record reply";
reply {
2 = "open relay - mail";
3 = "open proxy";
6 = "insecure website";
14 = "Compromised System - ddos drone/bot infected";
15 = "Compromised System - relay";
16 = "Compromised System - autorooter/scanner";
17 = "Compromised System - worm or mass mailing virus";
18 = "Compromised System - misc virus";
19 = "open proxy";
};
ban_unknown = no;
kline = "ZLINE %i 1d :You are in the AHBL.org DNSBL. Please visit http://www.ahbl.org/tools/lookup.php?ip=%i";
};
blacklist {
name = "tor.sectoor.de";
type = "A record reply";
reply {
1 = "tor exit server";
};
ban_unknown = no;
kline = "ZLINE %i 1d :You are in the tor.sectoor.de DNSBL. Please visit http://www.sectoor.de/tor.php?ip=%i";
};
blacklist {
name = "dnsbl.dronebl.org";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Sample";
3 = "IRC Drone";
5 = "Bottler";
6 = "Unknown spambot or drone";
7 = "DDOS Drone";
8 = "SOCKS Proxy";
9 = "HTTP Proxy";
10 = "ProxyChain";
13 = "Brute force attackers";
14 = "Open Wingate Proxy";
15 = "Compromised router / gateway";
255 = "Unknown";
};
kline = "ZLINE %i 6h :Listed in the DroneBL. See http://dronebl.org/lookup_branded.do?ip=%i";
};
blacklist {
name = "opm.blitzed.org";
type = "A record bitmask";
ban_unknown = no;
reply {
1 = "WinGate";
2 = "Socks";
4 = "HTTP";
8 = "Router";
16 = "HTTP POST";
};
kline = "ZLINE %i 6h :Sorry, %n, Open Proxy found on your host. Please visit http://www.blitzed.org/proxy?ip=%i for more information.";
};
blacklist {
name = "dnsbl.proxybl.org";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Open proxy";
};
kline = "ZLINE %i 6h :Your host is listed in ProxyBL. For more information, visit http://proxybl.org/lookup_branded.do?ip=%i&network=HellasChat";
};
blacklist {
name = "dnsbl.swiftbl.org";
type = "A record reply";
ban_unknown = no;
reply {
2 = "SOCKS Proxy";
3 = "IRC Proxy";
4 = "HTTP Proxy";
5 = "IRC Drone";
6 = "TOR";
};
kline = "ZLINE %i 6h :Listed in SwiftBL. See http://swiftbl.org/lookup";
};
blacklist {
name = "tor.dnsbl.sectoor.de";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Tor exit server";
};
kline = "ZLINE %i 6h :Tor exit server detected. Visit http://www.sectoor.de/tor.php?ip=%i for info.";
};
blacklist {
name = "dnsbl.rizon.net";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Open Proxy";
2 = "Regex Drone Match";
3 = "Spam Trap";
4 = "TOR";
5 = "Drones / Flooding";
6 = "Admin Added";
};
kline = "ZLINE %i 6h :Blacklisted IP found. See http://www.rizon.net/?do=kline§ion=bopm&ip=%i";
};
blacklist {
name = "dronebl.noderebellion.net";
type = "A record reply";
ban_unknown = no;
reply {
3 = "IRC spam drone (litmus/sdbot)";
4 = "Tor anonymous proxy";
5 = "IRC DDoS drone (wisdom/agobot/phatbot/rxbot)";
10 = "Open proxy";
14 = "Unknown worm/bot (found in DDoS attack by dronebl user)";
17 = "Unknown worm/bot (found scanning NodeRebellion's IP network)";
19 = "Open proxy (proxychain)";
};
kline = "ZLINE %i 6h :Your IP (%i), is listed as a %t in the DroneBL, see http://www.noderebellion.net/tools/lookup/?ip=%i";
};
blacklist {
name = "spbl.bl.winbots.org";
type = "A record reply";
ban_unknown = no;
reply {
2 = "UnderNet Spam";
3 = "QuakeNet Spam";
4 = "Winbots Spam";
};
kline = "ZLINE %i 6h :%n, Your IP, %i, is in our %t List.. Email cobi@winbots.org to get this resolved.";
};
blacklist {
name = "tor.kewlio.net.uk";
type = "A record reply";
ban_unknown = no;
reply {
100 = "Tor exit server";
};
kline = "ZLINE %i 6h :Tor exit server detected.";
};
blacklist {
name = "tor.dan.me.uk";
type = "A record reply";
ban_unknown = no;
reply {
100 = "Tor exit server";
};
kline = "ZLINE %i 6h :Tor exit server detected.";
};
blacklist {
name = "rbl.faynticrbl.org";
type = "A record reply";
ban_unknown = no;
reply {
1 = "Open Proxy";
2 = "Trojan/Exploit";
3 = "Botnet";
4 = "Brute force attackers";
5 = "Bottler";
};
kline = "ZLINE %i 6h :Your host is blacklisted. For removal and information: http://www.faynticrbl.org/rbl/lookup/%i/";
};
blacklist {
name = "dnsbl.ipocalypse.net";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Listed";
3 = "Listed";
4 = "Listed";
5 = "Listed";
6 = "Listed";
7 = "Listed";
8 = "Listed";
9 = "Listed";
};
kline = "ZLINE %i 6h :Your connection is listed in a Spam Database. This may be because you have spammed, or are on a compromised connection.";
};
blacklist {
name = "virbl.dnsbl.bit.nl";
type = "A record reply";
ban_unknown = no;
reply {
2 = "Virus";
};
kline = "ZLINE %i 6h :%n, Your IP, %i, is in a Virus List: http://virbl.bit.nl/list.php";
};
blacklist {
name = "no-more-funn.moensted.dk";
type = "A record reply";
ban_unknown = no;
reply {
10 = "Open Proxy";
};
kline = "ZLINE %i 6h :%n, Your IP, %i, is in a Open Proxy List: http://moensted.dk/spam/no-more-funn?addr=%i";
};