Ho John Lee’s Weblog

Here’s a list of IP addresses that have been sending me referrer spam this week. I haven’t a major attack like this past week before, I’m currently getting something like 10,000 per day since last week.

Most of the bad referrers point to”.go.to”, “.drop.to”, “.hey.to”, “.dive.to”, “.come.to”, “switch.to” and other “.to” TLD sites. The originating IPs are all over the internet. The typical pattern seems to be a few requests from each IP, rather than a stream from a single IP. The user-agent strings are all different, so perhaps these are individual PCs that have been hacked into a botnet for spamming purposes.

If your IP address is on this list, you’re temporarily blocked here, and your computer probably needs to be checked for viruses.

I’m still working on getting the regular expressions working in .htaccess. They’re not behaving consistently, which is too bad since this batch of referrer spam would easily be blocked that way.

See also: Blocking Referrer Spam

	
# Bad IP blocklist 10-2-2005
deny from 64.193.62.232
deny from 70.84.211.130
deny from 69.28.242.87
	
# Bad IP blocklist 10-6-2005
deny from 66.246.218.114
deny from 71.57.133.162
deny from 67.186.112.106
deny from 84.139.88.151
deny from 172.202.144.111
deny from 172.206.206.111
deny from 210.213.132.240
deny from 195.252.85.29
deny from 200.116.118.149
deny from 83.109.41.39
deny from 68.228.171.28
deny from 71.57.17.237
deny from 211.30.20.3
deny from 65.1.135.21
deny from 85.140.26.144
deny from 60.228.205.13
deny from 172.195.205.18
deny from 218.111.180.243
deny from 194.158.220.138
deny from 24.239.174.55
deny from 84.110.62.170
deny from 84.58.193.189
deny from 221.97.4.165
deny from 85.140.26.144
deny from 220.137.197.52
deny from 201.8.242.11
deny from 202.81.183.165
deny from 201.240.21.13
deny from 211.223.170.139
deny from 82.229.255.13
deny from 213.250.5.19
deny from 193.144.203.77
deny from 81.4.130.215
deny from 202.138.169.17
deny from 195.210.209.115
deny from 85.220.2.62
deny from 201.29.222.32
deny from 60.42.186.227
deny from 86.193.134.182
deny from 84.25.70.194
deny from 200.172.43.67
deny from 213.66.174.126
deny from 203.92.47.66
deny from 172.207.120.78
deny from 87.3.211.214
deny from 68.107.174.200
deny from 172.199.172.194
deny from 201.140.73.130
deny from 83.244.23.109
deny from 172.152.183.58
deny from 172.178.14.8
deny from 84.58.145.157
deny from 200.110.140.116
deny from 84.227.139.211
deny from 71.129.52.170
deny from 213.219.95.143
deny from 172.132.189.121
deny from 85.202.149.22
	
# added 10-07-2005
deny from 69.243.192.12
deny from 202.188.11.198
deny from 80.193.21.24
deny from 67.83.162.159
deny from 68.218.172.174
deny from 202.188.11.198
deny from 217.69.246.176
deny from 68.191.140.212
deny from 217.69.246.176
deny from 65.197.39.136
deny from 71.56.28.100
deny from 200.45.239.242
deny from 81.206.15.69
deny from 172.145.127.57
deny from 60.231.122.178
deny from 220.139.58.234
deny from 83.99.169.78
deny from 172.148.63.162
deny from 172.216.76.225
deny from 172.134.233.108
deny from 61.206.107.252
deny from 218.111.40.5
deny from 213.94.235.219
deny from 71.50.252.214
deny from 82.122.69.26
deny from 85.18.136.77
deny from 218.237.94.161
deny from 203.160.1.39
deny from 219.198.40.228
deny from 82.125.202.48
deny from 172.197.232.34
deny from 172.148.71.151
deny from 219.8.135.17
deny from 71.96.28.185
deny from 66.24.44.67
deny from 69.232.100.136
deny from 218.111.203.111
deny from 70.118.248.68
deny from 202.150.96.38
deny from 60.231.218.253
deny from 138.130.48.174
deny from 172.193.178.40
deny from 220.208.94.40
deny from 69.63.50.211
deny from 24.207.35.31
deny from 219.95.215.106
deny from 202.70.206.34
deny from 4.247.49.125
deny from 24.6.128.195
deny from 175.155.157.72
deny from 70.116.132.154
deny from 70.171.34.93
deny from 172.176.231.93
deny from 172.188.232.156
deny from 209.62.198.28
deny from 172.163.161.250
deny from 193.230.181.249
deny from 24.83.50.167
deny from 221.152.50.145
deny from 221.188.182.33
deny from 206.248.94.3
	
## added 10-08-2005
deny from 203.186.238.239
deny from 82.44.39.104
deny from 172.195.168.35
deny from 69.181.144.132
deny from 220.35.108.250
deny from 85.117.39.130
deny from 172.216.15.107
deny from 69.145.15.24
deny from 195.146.112.130
deny from 203.186.238.240
deny from 70.30.235.27
deny from 64.147.167.130
deny from 172.187.185.145
deny from 68.7.68.46
deny from 64.39.152.1
deny from 172.171.237.162
deny from 80.235.89.91
deny from 64.110.109.253
deny from 172.207.231.89
deny from 61.214.91.105
deny from 70.30.227.73
deny from 69.174.197.196
deny from 172.170.50.116
deny from 86.133.42.86
deny from 65.69.88.137
deny from 24.185.78.84
deny from 221.140.103.198
deny from 85.192.22.6
deny from 212.127.163.23
deny from 85.140.102.49
deny from 85.192.22.6
deny from 85.140.102.49
deny from 84.166.115.140
deny from 212.33.81.18
deny from 64.230.24.143
deny from 84.184.114.158
deny from 80.235.67.123
deny from 83.248.24.217
deny from 81.15.167.146
deny from 200.72.175.16
deny from 172.153.161.35
deny from 213.172.254.45
deny from 209.34.34.33
deny from 193.77.173.58
deny from 68.218.8.107

This entry was posted on Saturday, October 8th, 2005 at 10:48 am and is filed under Web Site Development. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.