13.Jul.2004 I had a major problem with the foul spammers as well at the OpenNETCF WIki (if you're interested, use Google to find it. I'm afraid to post a link for the spam engines to follow). Implementing a CAPTCHA cut it to almost nothing.
Info: If someone would like to know, how many times those IP-Ranges got Recorded for Abuse - Use: DShield Intrusion System IP Checkpage
I have sent a Spam Notice for following IP Ranges to anti-spam at ns. chinanet. cn. net
218.13.193, 218.13.194, 218.13.216, 218.13.217, 218.13.218, 218.13.219,
219.131.234, 219.131.239, 220.174.75, 220.176.108, 221.136.29, 222.183.78, 222.248.16
All those IPs are from the Chinese Telecom IP-Range. Please Laurens, ban them and it will be wonderful quiet in this wiki ;o)
Range is:
218.5.0.0 - 218.5.255.255 CHINANET Fujian province network
218.7.0.0 - 218.10.255.255 CNCGROUP Heilongjiang province network
218.13.0.0 - 218.18.255.255 CHINANET Guangdong province network
219.128.0.0 - 219.137.255.255 CHINANET Guangdong province network
220.174.0.0 - 220.174.255.255 CHINANET Hainan province network
220.175.0.0 - 220.177.255.255 CHINANET Jiangxi province network
221.136.0.0 - 221.136.255.255 NBIP CNC(Ningbo)info-Port co.,Ltd, China
222.176.0.0 - 222.183.255.255 CHINANET Chongqing province network
222.248.0.0 - 222.248.255.255 Shen Zhen Topway Cable Net CO., China
--Added by Robert Waldhans, 30.June.04
Big problem here as well with this range;
119.128.0.0 - 119.143.255.255 CHINANET Guangdong province network
--Added by Rodney Miller PCA, 12.November.09
Thanks, added -- Laurens Pit, 28.Aug.04
Better yet, any pages saved by anyone who has ever posted from an IP in those ranges has been deleted. -- Laurens Pit, 28.Aug.04
New ones for the deny list:
172.185.211.xxx
172.185.165.xxx (Sept 2004)
- Gordon
There's a considerable similarity of address ranges, which have earned a DENY in my firewall, to the ones given here, therefore i better post a link to the address excluded at my (and another about 50) wikis:
http://www.forthfreak.net/wiki/index.cgi?BlockedAddresses
Number of incidences originating from Mongolia and Siberia nets is rising.
The Chinese link spammers seem to circulate wiki addresses, and wikis with protective measures seem to be taken off their lists. To this conclusion i come by comparing the hit counts of blocked nets on several wikis:
case1
This shows the first of my wikis which has been hit by link spam, also the first where i started to block addresses:
This wiki hasn't been affected by link spam for quite some time, only a few days ago it has been discovered (through google search "chatbox" or "forum", not entirely sure about the search term anymore)
the hits on case2 are the result of 2 days only. with case1 wiki, the spammers seem to have given up.
(oh right, the number in the first column is the number of packets, blocked by the corresponding chain)
I was considering to redirect hits from the blocked addresses to another page/server, which apologizes for the fact that visitors are not able to enter, and *recommend them to change their provider*, than post that link to the affected providers - but, in fact, there's fairly little the providers can do about it (except kick their clients), so it may not really be a good step to take. Anyway, access providers are much more willing to cooperate if you recommend to their customers to change to another service.
Wikihowto spammers list