Content added Content deleted
imported>mutante mNo edit summary |
imported>mutante mNo edit summary |
||
Line 1: | Line 1: | ||
<pre> |
<pre> |
||
# TrackbackSpammer raus! ( |
# TrackbackSpammer raus! (WordPress User-Agents) |
||
# 62.213.0.0 - 62.213.5.255 SAMTEL Network of the Samara Telegraph RU |
# 62.213.0.0 - 62.213.5.255 SAMTEL Network of the Samara Telegraph RU |
||
Line 8: | Line 8: | ||
# 217.23.0.0 - 217.23.15.255 PT-COFINA-20001004 IDCentre, S.A. PT |
# 217.23.0.0 - 217.23.15.255 PT-COFINA-20001004 IDCentre, S.A. PT |
||
subnet[2]="217.23.0.0/20" |
subnet[2]="217.23.0.0/20" |
||
# 62.213.64.0 - 62.213.127.255 RU-CARAVAN-20011109 PROVIDER RU |
|||
subnet[3]="62.213.64.0/17" |
|||
# 212.24.32.0 - 212.24.63.255 RU-CARAVAN-990216 Provider Local Registry RU |
|||
subnet[4]="212.24.32.0/19" |
|||
# 217.23.128.0 - 217.23.159.255 RU-CARAVAN-20001005 PROVIDER RU |
|||
subnet[5]="217.23.128.0/19" |
|||
# 212.158.160.0 - 212.158.175.255 RU-CARAVAN-990714 PROVIDER RU |
|||
subnet[6]="212.158.160.0/20" |
|||
for spammer in ${subnet[@]} |
for spammer in ${subnet[@]} |
||
do |
do |
||
$IPTABLES -A INPUT -s $spammer -j LOG --log-prefix " |
$IPTABLES -A INPUT -s $spammer -j LOG --log-prefix "* TRACKBACK SPAM * " |
||
$IPTABLES -A INPUT -s $spammer -j DROP |
$IPTABLES -A INPUT -s $spammer -j DROP |
||
done |
done |
||
</pre> |
</pre> |
||
RU-CARAVAN seems evil |
|||
ranges from [[ipindex]] |
ranges from [[ipindex]] |
||
related: [[Google:trackback spam]], [[iptables]], [[Spam]], [[Apache]], [[Mediawiki]] |
related: [[Google:trackback spam]], [[iptables]], [[Spam]], [[Apache]], [[Mediawiki]], [[subnet calculator]] |
||
Sorry for any false positives this might cause. |
Sorry for any false positives this might cause. |
Revision as of 12:05, 18 November 2007
# TrackbackSpammer raus! (WordPress User-Agents) # 62.213.0.0 - 62.213.5.255 SAMTEL Network of the Samara Telegraph RU subnet[0]="62.213.0.0/21" # 212.158.0.0 - 212.158.127.255 EU-EN-990217 Cable & Wireless Telecommunication Services GmbH EU subnet[1]="212.158.0.0/17" # 217.23.0.0 - 217.23.15.255 PT-COFINA-20001004 IDCentre, S.A. PT subnet[2]="217.23.0.0/20" # 62.213.64.0 - 62.213.127.255 RU-CARAVAN-20011109 PROVIDER RU subnet[3]="62.213.64.0/17" # 212.24.32.0 - 212.24.63.255 RU-CARAVAN-990216 Provider Local Registry RU subnet[4]="212.24.32.0/19" # 217.23.128.0 - 217.23.159.255 RU-CARAVAN-20001005 PROVIDER RU subnet[5]="217.23.128.0/19" # 212.158.160.0 - 212.158.175.255 RU-CARAVAN-990714 PROVIDER RU subnet[6]="212.158.160.0/20" for spammer in ${subnet[@]} do $IPTABLES -A INPUT -s $spammer -j LOG --log-prefix "* TRACKBACK SPAM * " $IPTABLES -A INPUT -s $spammer -j DROP done
RU-CARAVAN seems evil
ranges from ipindex
related: Google:trackback spam, iptables, Spam, Apache, Mediawiki, subnet calculator
Sorry for any false positives this might cause.