Apache and mod_rewrite: More Zombified Idiots Dispatched

In: smp

2 May 2005

I have been seeing a large number of hits with the following User-Agent string in my logs lately:

Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.5) Gecko/20031007 Firebird/0.7
  1. Firebird hasn’t existed as a browser for a very long time
  2. A build date of October 7, 2003???
  3. From 3 separate IP Addresses

This Apache REWRITE rule took care of this issue.

RewriteCond %{HTTP_USER_AGENT} .*Gecko\/20031007.*
RewriteRule ^.*$ http://www.pierzchala.com:9080/ [R,L,NS]

Try the URL…it points to this iptables rule.

/sbin/iptables -A INPUT -p tcp -i eth0 -s 0/0 --dport 9080 -j DROP

I love Linux!

Spread the Love:
  • Facebook
  • Twitter
  • Ping.fm
  • Digg
  • StumbleUpon
  • LinkedIn
  • Reddit
  • Slashdot
  • Netvouz
  • Identi.ca
  • Technorati
  • del.icio.us
  • email

Related Posts

blog comments powered by Disqus

About this blog

Stephen Pierzchala is one of a 10-year veteran of the Web performance field who also writes on topics that interest his non-linear world-view.

Contact

stephen@pierzchala.com

+1 (508) 410-3865