どうもここ最近，TBスパムが増えているようなので，ログを見てみた．以下，一部抜粋．
@s333:~/log> cat 4403.biz.2008-10-26.log | grep tb.cgi
67.159.44.159 - - [26/Oct/2008:00:12:14 +0900] "POST /mt/mt-tb.cgi/416 HTTP/1.0" 200 79 "-" "Jakarta Commons-HttpClient/3.0.1"
67.159.44.159 - - [26/Oct/2008:01:57:31 +0900] "POST /mt/mt-tb.cgi/254 HTTP/1.0" 200 79 "-" "Jakarta Commons-HttpClient/3.0.1"
208.43.255.124 - - [26/Oct/2008:03:41:16 +0900] "POST /mt/mt-tb.cgi/162 HTTP/1.0" 200 79 "-" "Jakarta Commons-HttpClient/3.1"
78.86.153.121 - - [26/Oct/2008:04:12:35 +0900] "POST /mt/mt-tb.cgi/254 HTTP/1.0" 200 79 "-" "Jakarta Commons-HttpClient/3.1"
208.109.181.122 - - [26/Oct/2008:04:15:17 +0900] "POST /mt/mt-tb.cgi/64 HTTP/1.0" 200 79 "-" "Jakarta Commons-HttpClient/3.1"
なるほどなるほど．クズだな．じゃぁ，それならそれで，それなりに対処して差し上げよう．以下，対策を抜粋．
@s333:~/public_html/4403.biz/mt> cat .htaccess <Files mt-tb.cgi> <limit POST> SetEnvIf User-Agent "^TrackBack/1.6" trackers SetEnvIf User-Agent "^TrackBack/1.02" trackers SetEnvIf User-Agent "^libghttp/1.0" trackers SetEnvIf User-Agent "^$" trackers SetEnvIf User-Agent "^.$" trackers SetEnvIf User-Agent "^NP_Trackback/2.0.3" trackers SetEnvIf User-Agent "^User-Agent" trackers SetEnvIf User-Agent "^Opera/" trackers SetEnvIf User-Agent "^Mozilla/" trackers SetEnvIf User-Agent "^USERAGENT" trackers SetEnvIf User-Agent "^Jakarta Commons-HttpClient/3" trackers Order Allow,Deny Allow from all Deny from env=trackers </limit> </Files>
死ねばいいのに．
関連：
芳立五蘊 | Jakarta Commons-HttpClient/3.0.1
Jakarta Commons-HttpClient (翻弄されつづけるblog)
ねこまじん王国 » トラックバックスパム対策（Jakarta Commons-HttpClient）
