# TrackbackSpammer raus! (WordPress User-Agents) # 62.213.0.0 - 62.213.5.255 SAMTEL Network of the Samara Telegraph RU subnet[0]="62.213.0.0/21" # 212.158.0.0 - 212.158.127.255 EU-EN-990217 Cable & Wireless Telecommunication Services GmbH EU subnet[1]="212.158.0.0/17" # 217.23.0.0 - 217.23.15.255 PT-COFINA-20001004 IDCentre, S.A. PT subnet[2]="217.23.0.0/20" # 62.213.64.0 - 62.213.127.255 RU-CARAVAN-20011109 PROVIDER RU subnet[3]="62.213.64.0/17" # 212.24.32.0 - 212.24.63.255 RU-CARAVAN-990216 Provider Local Registry RU subnet[4]="212.24.32.0/19" # 217.23.128.0 - 217.23.159.255 RU-CARAVAN-20001005 PROVIDER RU subnet[5]="217.23.128.0/19" # 212.158.160.0 - 212.158.175.255 RU-CARAVAN-990714 PROVIDER RU subnet[6]="212.158.160.0/20" for spammer in ${subnet[@]} do $IPTABLES -A INPUT -s $spammer -j LOG --log-prefix "* TRACKBACK SPAM * " $IPTABLES -A INPUT -s $spammer -j DROP done
RU-CARAVAN seems evil
ranges from ipindex
related: Google:trackback spam, iptables, Spam, Apache, Mediawiki, subnet calculator
Sorry for any false positives this might cause.