{"id":2009,"date":"2007-08-23T14:32:30","date_gmt":"2007-08-23T12:32:30","guid":{"rendered":"http:\/\/vasil.ludost.net\/blog\/?p=2009"},"modified":"2007-08-23T14:32:30","modified_gmt":"2007-08-23T12:32:30","slug":"2007-08-23-1532","status":"publish","type":"post","link":"https:\/\/vasil.ludost.net\/blog\/?p=2009","title":{"rendered":"2007-08-23 15:32"},"content":{"rendered":"<p>Something useful &#8211; <a href=\"http:\/\/www.spamhaus.org\/drop\/index.lasso\">SpamHaus DROP list<\/a>.<\/p>\n<p>In short, a list with networks that are either hijacked or are used ONLY by spammers. The traffic for such networks can only be dropped.<\/p>\n<p>I did the experiment on marla and on a company machine and found some forum spammers :) Here&#8217;s a fun pick from the user-agents for a few days:<\/p>\n<pre>\r\nxxxx:\/var\/log\/apache# grep 85.255.120.58 site1\/access_log |cut -d \" -f 6|sort|uniq\r\nMozilla\/2.0 (compatible; MSIE 3.02; Windows CE; 240x320)\r\nMozilla\/3.0 (x86 [en] Windows NT 5.1; Sun)\r\nMozilla\/4.0 (compatible; MSIE 6.0; Windows NT 5.1; MRA 4.6 (build 01425))\r\nMozilla\/4.0 (compatible; MSIE 6.0; Windows NT 5.1; Q312461)\r\nMozilla\/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.0.3705; .NET CLR 1.1.4322; .NET CLR 2.0.40607)\r\nMozilla\/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; .NET CLR 2.0.50727)\r\nMozilla\/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; XMPP Tiscali Communicator v.10.0.2; .NET CLR 2.0.50727)\r\nMozilla\/5.0 (Windows; U; Windows NT 5.0; de-DE; rv:1.7) Gecko\/20040707 Firefox\/0.9.2\r\nMozilla\/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.5) Gecko\/20031007 Firebird\/0.7\r\nMozilla\/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko\/20040913 Spacebug\/0.10 (aka Firefox\/0.10)\r\nMozilla\/5.0 (Windows; U; WinNT4.0; en-US; rv:1.2) Gecko\/20021126\r\nMozilla\/5.0 (Windows; U; WinNT4.0; en-US; rv:1.5) Gecko\/20031016 K-Meleon\/0.8\r\nOpera\/8.0 (Macintosh; PPC Mac OS X; U; en)\r\n<\/pre>\n<p>I&#8217;ll put this filter on a few places, should help with slimming down the spam.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Something useful &#8211; SpamHaus DROP list. In short, a list with networks that are either hijacked or are used ONLY by spammers. The traffic for such networks can only be dropped. I did the experiment on marla and on a company machine and found some forum spammers :) Here&#8217;s a fun pick from the user-agents [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2009","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2009"}],"version-history":[{"count":0,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2009\/revisions"}],"wp:attachment":[{"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2009"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2009"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vasil.ludost.net\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}