Trackback-Spam

From S23Wiki
Jump to: navigation, search
# TrackbackSpammer raus! (WordPress User-Agents)

# 62.213.0.0 - 62.213.5.255  SAMTEL Network of the Samara Telegraph  RU
subnet[0]="62.213.0.0/21"
# 212.158.0.0 - 212.158.127.255 EU-EN-990217 Cable & Wireless Telecommunication Services GmbH  EU
subnet[1]="212.158.0.0/17"
# 217.23.0.0 - 217.23.15.255    PT-COFINA-20001004      IDCentre, S.A.  PT
subnet[2]="217.23.0.0/20"
# 62.213.64.0 - 62.213.127.255  RU-CARAVAN-20011109     PROVIDER        RU
subnet[3]="62.213.64.0/17"
# 212.24.32.0 - 212.24.63.255   RU-CARAVAN-990216       Provider Local Registry RU
subnet[4]="212.24.32.0/19"
# 217.23.128.0 - 217.23.159.255 RU-CARAVAN-20001005     PROVIDER        RU
subnet[5]="217.23.128.0/19"
# 212.158.160.0 - 212.158.175.255       RU-CARAVAN-990714       PROVIDER        RU
subnet[6]="212.158.160.0/20"

for spammer in ${subnet[@]}
 do
        $IPTABLES -A INPUT -s $spammer -j LOG --log-prefix "* TRACKBACK SPAM * "
        $IPTABLES -A INPUT -s $spammer -j DROP
 done


RU-CARAVAN seems evil

ranges from ipindex

related: Google:trackback spam, iptables, Spam, Apache, Mediawiki, subnet calculator

Sorry for any false positives this might cause.