« Jabber, Inc. Delivers New Interoperability and Collaboration Hooks in 4.1 Release | Main| 2 Hot dates for Valentines... »

Referrer SPAM

Category
My blog has been getting bombarded lately with referrer spamming, the crazy thing is I don't even show the referers on my site. But at the moment I am getting balsted by about 500 a day. I keep adding the IP address to the deny liston the server and then they just seem to come in from another one...arrrgghhhh...
In case it helps others, these are the IPs I have blocked so far, anyone want to add to the list?


65.35.157.44
212.235.119.44
68.116.96.200
217.132.12.229
62.0.88.57
205.209.148.50
205.209.149.10
205.209.149.50
205.209.149.210
205.209.149.100
205.209.149.230
205.209.149.90
205.209.149.70
212.25.72.228
212.25.72.221
212.25.72.224
67.19.193.50
67.19.188.202
67.19.188.90
67.19.186.154
67.19.191.106
70.84.226.154
70.84.226.226
70.84.226.170
82.80.252.226

The 205.209.* (Managed Solutions Group) and 212.25.* (Israel) and 67.19.* (Dallas) have been the worst so far and all advertise the same lame websites that no one with a brain would ever visit.

Comments

Gravatar Image1 - Carl,

How do you block these referers? - I'm not too fimilar on how to do this on a domino server (my site is on php server).

Below is a sample of ip-addresses from my site's .htaccess file.
I don't really block by ip-addresses - unless I know the entries are coming from the same machine(s) over a period of time. Often the spamfers change ip-addresses or use another machine. Instead, I use the rewrite rule based on keywords found in the referer string.

Like you, I don't list referers on my site, but the spamfers continue to spam. I block them because I'm not paying to have web traffic sent to them!

-- start of the partial contents of the .htaccess file --
# block master-spambots - knockon effect is that the slave-spambots will not post to your site.
deny from 67.19.91.50
deny from 69.50.170.122
deny from 69.148.200.14
deny from 155.158.104.80

# block semi-master/slave spambots - mainly 76 & 77
deny from 38.119.107.71
deny from 38.119.107.72
deny from 38.119.107.73
deny from 38.119.107.74
deny from 38.119.107.75
deny from 38.119.107.76
deny from 38.119.107.77
deny from 38.119.107.78
deny from 38.119.107.79

# deny a bulgarian spam-server ...
deny from 12.163.72.13
-- end of the partial contents of the .htaccess file --

Gravatar Image2 - In Domino I can add them to the incoming IP deny list in the server document. Right now I have blocked them entirely and things seemed to have died down a bit.

Post A Comment

:-D:-o:-p:-x:-(:-):-\:angry::cool::cry::emb::grin::huh::laugh::rolleyes:;-)