Stopping referrer spam (Part 2)

2005-02-17

Let’s add a little more data to my previous article on stopping referrer spam. It’s the current list of blocked IP addresses. Currently the list blocks 245 addresses.

RewriteEngine On
RewriteCond %{REMOTE_ADDR} ^217.106.90.[0-255] [OR]
RewriteCond %{REMOTE_ADDR} ^12.177.13.252$ [OR]
RewriteCond %{REMOTE_ADDR} ^12.177.40.200$ [OR]
RewriteCond %{REMOTE_ADDR} ^130.208.220.208$ [OR]
RewriteCond %{REMOTE_ADDR} ^147.231.100.130$ [OR]
RewriteCond %{REMOTE_ADDR} ^148.223.48.226$ [OR]
RewriteCond %{REMOTE_ADDR} ^148.244.150.58$ [OR]
RewriteCond %{REMOTE_ADDR} ^151.38.133.5$ [OR]
RewriteCond %{REMOTE_ADDR} ^151.8.7.15$ [OR]
RewriteCond %{REMOTE_ADDR} ^163.121.128.210$ [OR]
RewriteCond %{REMOTE_ADDR} ^163.28.33.227$ [OR]
RewriteCond %{REMOTE_ADDR} ^166.114.30.40$ [OR]
RewriteCond %{REMOTE_ADDR} ^168.18.242.50$ [OR]
RewriteCond %{REMOTE_ADDR} ^192.132.218.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.188.105.16$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.188.105.17$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.19.230.50$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.194.84.196$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.231.181.212$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.251.60.99$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.255.207.253$ [OR]
RewriteCond %{REMOTE_ADDR} ^193.77.56.95$ [OR]
RewriteCond %{REMOTE_ADDR} ^194.143.75.179$ [OR]
RewriteCond %{REMOTE_ADDR} ^194.154.149.196$ [OR]
RewriteCond %{REMOTE_ADDR} ^194.2.146.199$ [OR]
RewriteCond %{REMOTE_ADDR} ^194.63.235.139$ [OR]
RewriteCond %{REMOTE_ADDR} ^194.63.235.164$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.113.86.138$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.144.131.10$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.157.178.39$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.175.37.8$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.187.51.200$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.205.121.222$ [OR]
RewriteCond %{REMOTE_ADDR} ^195.205.141.8$ [OR]
RewriteCond %{REMOTE_ADDR} ^196.28.48.100$ [OR]
RewriteCond %{REMOTE_ADDR} ^196.28.48.98$ [OR]
RewriteCond %{REMOTE_ADDR} ^196.40.62.180$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.104.73.27$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.119.27.202$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.171.128.210$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.181.111.106$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.189.80.8$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.21.45.4$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.21.5.122$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.212.114.3$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.242.249.70$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.31.23.195$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.41.109.56$ [OR]
RewriteCond %{REMOTE_ADDR} ^200.58.161.148$ [OR]
RewriteCond %{REMOTE_ADDR} ^201.224.75.198$ [OR]
RewriteCond %{REMOTE_ADDR} ^201.7.98.147$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.106.132.130$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.130.84.133$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.14.68.239$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.155.18.230$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.157.81.81$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.175.95.47$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.179.109.110$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.183.100.22$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.44.183.9$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.98.19.150$ [OR]
RewriteCond %{REMOTE_ADDR} ^202.98.36.247$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.113.29.3$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.116.214.2$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.116.75.5$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.127.190.20$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.130.194.147$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.144.143.6$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.144.143.7$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.160.181.171$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.172.26.72$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.190.254.9$ [OR]
RewriteCond %{REMOTE_ADDR} ^203.59.162.122$ [OR]
RewriteCond %{REMOTE_ADDR} ^206.180.110.11$ [OR]
RewriteCond %{REMOTE_ADDR} ^206.183.210.253$ [OR]
RewriteCond %{REMOTE_ADDR} ^207.134.108.85$ [OR]
RewriteCond %{REMOTE_ADDR} ^207.250.10.170$ [OR]
RewriteCond %{REMOTE_ADDR} ^208.189.232.150$ [OR]
RewriteCond %{REMOTE_ADDR} ^208.3.241.194$ [OR]
RewriteCond %{REMOTE_ADDR} ^208.63.116.194$ [OR]
RewriteCond %{REMOTE_ADDR} ^209.139.197.242$ [OR]
RewriteCond %{REMOTE_ADDR} ^209.203.35.162$ [OR]
RewriteCond %{REMOTE_ADDR} ^209.233.5.162$ [OR]
RewriteCond %{REMOTE_ADDR} ^209.94.209.179$ [OR]
RewriteCond %{REMOTE_ADDR} ^210.187.119.244$ [OR]
RewriteCond %{REMOTE_ADDR} ^210.212.204.241$ [OR]
RewriteCond %{REMOTE_ADDR} ^211.126.213.36$ [OR]
RewriteCond %{REMOTE_ADDR} ^211.185.38.61$ [OR]
RewriteCond %{REMOTE_ADDR} ^211.46.197.60$ [OR]
RewriteCond %{REMOTE_ADDR} ^211.81.33.251$ [OR]
RewriteCond %{REMOTE_ADDR} ^211.98.24.6$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.138.47.11$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.138.47.12$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.138.47.20$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.138.47.21$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.138.47.26$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.165.164.28$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.211.130.248$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.223.50.2$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.249.11.77$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.31.45.191$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.42.250.69$ [OR]
RewriteCond %{REMOTE_ADDR} ^212.97.10.162$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.150.178.86$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.150.178.90$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.16.96.6$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.166.40.170$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.37.79.254$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.56.68.29$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.76.158.91$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.92.68.179$ [OR]
RewriteCond %{REMOTE_ADDR} ^213.92.99.73$ [OR]
RewriteCond %{REMOTE_ADDR} ^216.195.206.249$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.106.90.80$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.110.71.114$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.171.176.5$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.172.174.228$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.172.179.35$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.219.216.3$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.40.219.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.52.41.194$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.59.130.203$ [OR]
RewriteCond %{REMOTE_ADDR} ^217.59.135.138$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.145.25.84$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.188.23.162$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.2.107.169$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.28.9.212$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.4.189.197$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.56.32.230$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.58.76.22$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.68.215.70$ [OR]
RewriteCond %{REMOTE_ADDR} ^218.75.117.194$ [OR]
RewriteCond %{REMOTE_ADDR} ^219.148.151.179$ [OR]
RewriteCond %{REMOTE_ADDR} ^219.239.110.9$ [OR]
RewriteCond %{REMOTE_ADDR} ^220.194.103.65$ [OR]
RewriteCond %{REMOTE_ADDR} ^221.142.244.144$ [OR]
RewriteCond %{REMOTE_ADDR} ^222.35.11.126$ [OR]
RewriteCond %{REMOTE_ADDR} ^24.147.251.90$ [OR]
RewriteCond %{REMOTE_ADDR} ^24.163.230.148$ [OR]
RewriteCond %{REMOTE_ADDR} ^24.2.224.221$ [OR]
RewriteCond %{REMOTE_ADDR} ^24.215.251.77$ [OR]
RewriteCond %{REMOTE_ADDR} ^24.77.196.244$ [OR]
RewriteCond %{REMOTE_ADDR} ^4.11.66.77$ [OR]
RewriteCond %{REMOTE_ADDR} ^61.11.26.134$ [OR]
RewriteCond %{REMOTE_ADDR} ^61.129.192.201$ [OR]
RewriteCond %{REMOTE_ADDR} ^61.186.158.186$ [OR]
RewriteCond %{REMOTE_ADDR} ^61.9.0.99$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.103.197.34$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.14.104.36$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.152.115.69$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.231.38.245$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.233.191.50$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.248.110.2$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.251.183.186$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.49.144.85$ [OR]
RewriteCond %{REMOTE_ADDR} ^62.7.244.103$ [OR]
RewriteCond %{REMOTE_ADDR} ^63.83.19.122$ [OR]
RewriteCond %{REMOTE_ADDR} ^64.235.204.221$ [OR]
RewriteCond %{REMOTE_ADDR} ^64.42.247.203$ [OR]
RewriteCond %{REMOTE_ADDR} ^64.46.86.151$ [OR]
RewriteCond %{REMOTE_ADDR} ^65.34.18.174$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.110.175.139$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.128.202.122$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.134.252.243$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.144.4.8$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.151.181.225$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.165.220.243$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.213.97.12$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.251.18.249$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.33.235.168$ [OR]
RewriteCond %{REMOTE_ADDR} ^66.71.198.10$ [OR]
RewriteCond %{REMOTE_ADDR} ^67.174.152.132$ [OR]
RewriteCond %{REMOTE_ADDR} ^67.182.174.100$ [OR]
RewriteCond %{REMOTE_ADDR} ^68.147.125.137$ [OR]
RewriteCond %{REMOTE_ADDR} ^68.224.170.115$ [OR]
RewriteCond %{REMOTE_ADDR} ^68.250.30.34$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.199.80.43$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.228.154.198$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.240.237.205$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.31.82.202$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.55.67.82$ [OR]
RewriteCond %{REMOTE_ADDR} ^69.70.214.88$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.124.153.34$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.128.163.109$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.128.178.131$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.13.18.27$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.164.199.218$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.22.92.178$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.227.56.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.227.56.46$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.255.49.222$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.48.200.88$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.51.240.130$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.53.19.94$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.53.248.102$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.53.255.174$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.55.242.220$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.1.111$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.11.107$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.19.109$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.19.170$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.2.235$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.20.235$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.32.171$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.33.107$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.33.172$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.39.235$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.4.107$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.4.111$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.4.44$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.4.46$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.44.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.47.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.5.43$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.5.46$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.50.42$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.58.51.170$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.68.242.97$ [OR]
RewriteCond %{REMOTE_ADDR} ^80.78.132.96$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.115.170.2$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.144.174.109$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.192.48.26$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.201.135.217$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.241.224.106$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.4.168.139$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.56.227.32$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.89.134.60$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.93.194.41$ [OR]
RewriteCond %{REMOTE_ADDR} ^81.93.7.110$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.100.24.184$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.101.133.167$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.127.0.112$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.138.15.150$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.142.161.86$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.194.62.16$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.194.62.17$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.200.133.77$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.201.187.136$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.34.97.123$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.36.192.246$ [OR]
RewriteCond %{REMOTE_ADDR} ^82.69.75.251$ [OR]
RewriteCond %{REMOTE_ADDR} ^83.151.49.10$ [OR]
RewriteCond %{REMOTE_ADDR} ^83.16.151.226$ [OR]
RewriteCond %{REMOTE_ADDR} ^83.16.157.242$ [OR]
RewriteCond %{REMOTE_ADDR} ^83.16.79.106$
RewriteRule .* - [F,L]

This list will make sure 245 IP addresses will not be able to spam your website anymore. You can copy-paste these lines into a file named .htaccess, and upload it into the root directory of your website (the one where the index page is in).

The first line enables the Rewrite Engine of Apache, the second line will block an entire subnet of IP addresses (the subnet was pretty abusive). The rest of the lines will block single addresses. The final line tells the Rewrite Engine what to do with all the conditions: F stands for Forbidden, L stands for Last rule.

Upon further inspection, you’ll notice that most, if not all IP addresses are servers with an open proxy. Maintainers of servers who are:

  • not aware of their server running an open proxy;
  • running an open proxy knowingly;
  • too lazy to patch their windows servers;

Should all be deported to China and when arrived, should be executed on international television. According to tradition, the executees’ families should receive the bill for the bullet used in the execution.

apachespam
Creative Commons License

International women's day

Terrorist-proof Volkswagen Polo