# TrackbackSpammer raus! (WordPress User-Agents)
# 62.213.0.0 - 62.213.5.255 SAMTEL Network of the Samara Telegraph RU
subnet[0]="62.213.0.0/21"
# 212.158.0.0 - 212.158.127.255 EU-EN-990217 Cable & Wireless Telecommunication Services GmbH EU
subnet[1]="212.158.0.0/17"
# 217.23.0.0 - 217.23.15.255 PT-COFINA-20001004 IDCentre, S.A. PT
subnet[2]="217.23.0.0/20"
# 62.213.64.0 - 62.213.127.255 RU-CARAVAN-20011109 PROVIDER RU
subnet[3]="62.213.64.0/17"
# 212.24.32.0 - 212.24.63.255 RU-CARAVAN-990216 Provider Local Registry RU
subnet[4]="212.24.32.0/19"
# 217.23.128.0 - 217.23.159.255 RU-CARAVAN-20001005 PROVIDER RU
subnet[5]="217.23.128.0/19"
# 212.158.160.0 - 212.158.175.255 RU-CARAVAN-990714 PROVIDER RU
subnet[6]="212.158.160.0/20"
for spammer in ${subnet[@]}
do
$IPTABLES -A INPUT -s $spammer -j LOG --log-prefix "* TRACKBACK SPAM * "
$IPTABLES -A INPUT -s $spammer -j DROP
done
RU-CARAVAN seems evil
ranges from ipindex
related: Google:trackback spam, iptables, Spam, Apache, Mediawiki, subnet calculator
Sorry for any false positives this might cause.