Author Archives: dontai

Host Name 0 Zero or localhost in your Raw Access Log

Does your raw access log display a host name of “0”, or zero? Very odd, is it not? I have been struggling with this for a couple of months, and my ISP Site5 had no answers. It turns out that one of my spammers, NFORCE_ENTERTAINMENT, puts an unprintable character into their host table, so that when my ISP looks them up, they display the unprintable character in my log as “0”.

Trying to control your site’s spam can be challenging. If you try to ban an IP that is simply 0, or a host name of “0” you will fail, because there is no zero in their host name, but an unprintable character. Ban these guys instead.

Getting Old Sucks, Especially if you are a Smartphone

The march of time stops for no one, rich or poor, for whomever. While humans may be able to mitigate their demise with a bit of compassion, there is none for old phones. Android phones grow old, older than 2 years old, slow down, and then get pitched into the back drawer, replaced by a new Android model, never to be turned on again.

Managing a Large Apache htaccess: Tips

After a long while your htaccess might get a tad long. My favourite htaccess checker only processes files up to 5,000 lines. Often this is due to lots of comments, which I encourage. Let us cover some ways you can shorten your htaccess:

Combine your user agents/referrers
If you have multiple user agent or referrers that have similar names, combine them into a single statement,
from:
RewriteCond %{HTTP_USER_AGENT} ^.*Blackboard\ Safeassign [OR]
RewriteCond %{HTTP_USER_AGENT} ^.*BlackWidow [OR]
to:
RewriteCond %{HTTP_USER_AGENT} ^.*Black(board\ Safeassign|Widow) [OR]

From:
RewriteCond %{HTTP_REFERER} ^http://.*pizza\-imperia [NC,OR]
RewriteCond %{HTTP_REFERER} ^http://.*pizza\-tycoon [NC,OR]
To:
RewriteCond %{HTTP_REFERER} ^http://.*pizza(\-imperia|\-tycoon) [NC,OR]

Spiralized Potato Shoestring Fries

Bought yesterday, I did, a Starfrit Spiralizer. Since Little Weed wanted to see how it worked his first choice, of course, was french fries.

Spiralized white potato was really simple to do. It looks but does not taste like pasta spaghetti. Photo by Don Tai, Toronto, Canada

Spiralized white potato was really simple to do. It looks but does not taste like pasta spaghetti. Photo by Don Tai, Toronto, Canada

I used the smallest shoestring blade, the spaghetti size, which turned out to be too small. Potatoes need a larger sized tube. It took only 8 minutes in my deep fryer but came out acceptably. There are shoestring french fry recipies out there that are baked rather than deep fried. I’ll try that next.

Trying Rona Canada Price Match Policy: Not Smooth

Rare, is my visits to Rona Home and Garden Store, here in Scarborough, Toronto, Canada, at Midland near Steeles. While they are pretty clean and almost all the sales associates speak Mandarin, close by there is also the Home Depot Head Office store, as well as Lowes.

Starfrit Spriralizer cuts veg into long and thin spaghetti, on sale at Cantire for $20, Walmart regular price $26, Rona regular price $23. Rona grudgingly price matched Cantire and then beat them by an additional 10 percent. Yay, but laborious to remind Rona staff of their online policy.

Starfrit Spriralizer cuts veg into long and thin spaghetti, on sale at Cantire for $20, Walmart regular price $26, Rona regular price $23. Rona grudgingly price matched Cantire and then beat them by an additional 10 percent. Yay, but laborious to remind Rona staff of their online policy.

no-ptr.as20860.net Comment Spammer: Research, Ban

no-ptr.as20860.net is a dual Ip spammer with a twist. The originating IP hostname lookup returns three IPs! You’ll need to ban all three, but there’s a lot more. They use IOMart, GB as their ISP.

It seems like this hostname also morphs to numerous IP addresses, making them difficult to track down.

Observation:
no-ptr.as20860.net hostname lookup 62.128.193.135 84.22.161.172 50.97.43.3

Method:
no-ptr.as20860.net not only uses the dual ip spammer strategy, but also changes its host name through many ip addresses, making it double difficult to ban.

fvds.ru Content Spammer: Research, Ban

fvds.ru spammed me, so I researched them. A good portion of their IPs are in the range of 62.109.24.0/24 but there are others. They use a wide variety of names.

Observation:
t-testing.fvds.ru host lookup 62.109.2.78 is bogus. Research revealed 62.109.24.26 and 62.109.24.27.

Research:
tinchurin.fvds.ru 62.109.16.78
info2.fvds.ru 62.109.18.75
dap.fvds.ru 62.109.24.110
zwrk018.fvds.ru 62.109.24.115
esesovets.fvds.ru 62.109.24.132
ensore.fvds.ru 62.109.24.14
camedia.fvds.ru 62.109.24.145
a777825.fvds.ru 62.109.24.157
move.fvds.ru 62.109.24.20
izhirnoff.fvds.ru 62.109.24.215
pool-62.109.24.0.fvds.ru 62.109.24.218
app777.fvds.ru 62.109.24.236
darthspacker.fvds.ru 62.109.24.249
motorspb4.fvds.ru 62.109.24.30
admin15.fvds.ru 62.109.24.35
cyberilya32.fvds.ru 62.109.24.53
merchdist.fvds.ru 62.109.24.61
aachibilyaevyandex.ru.fvds.ru 62.109.24.82
realmyst1.fvds.ru 62.109.24.95
nkryptor.fvds.ru 62.109.29.208
dimys12373.fvds.ru 62.109.31.36
frederick.fvds.ru 62.109.31.91

Mgi.fvds.ru 78.24.219.148
Fvds.ru 78.24.219.165
fakeyoudeadxtv.fvds.ru 78.24.221.1
MMM5.FVDS.RU 82.146.33.242
alosvlad.fvds.ru 82.146.34.229
voloshenko.ilya.fvds.ru 82.146.36.96
exiex.fvds.ru 82.146.38.254
leonid.fvds.ru 91.240.85.23
fdvcxvcxv.fvds.ru 92.63.98.50

Googlebot Errors caused by Errant htaccess rule

Difficult it was, this afternoon, after 7 days of Googlebot crawl error 500s, but I am learning. One htaccess regex line error was the cause. Hopefully it will go away.

I tried to compress some HTTP_USER_AGENT mod rewrite rules in my htaccess, into a single line, in order to shorten my htaccess, from:

RewriteCond %{HTTP_USER_AGENT} ^.*Go\ 1\.1 [NC,OR]
RewriteCond %{HTTP_USER_AGENT} ^.*Go\!Zilla [OR]
RewriteCond %{HTTP_USER_AGENT} ^.*Go!Zilla [OR]
RewriteCond %{HTTP_USER_AGENT} ^.*Go\-Ahead\-Got\-It [OR]
RewriteCond %{HTTP_USER_AGENT} ^.*Go\-http [NC,OR]

to:
RewriteCond %{HTTP_USER_AGENT} ^.*Go[\ 1\.1|\!Zilla|\-Ahead\-Got\-It|\-http] [NC,OR]

static.vdc.vn: Research, Ban

static.vdc.vn is regular content scraper, but it did POST to me and left its IP address. I have been trying to track this one down for a while, but it uses such a wide variety of IP addresses that this is difficult. I could ban large ranges but this would also ban a wide swath of Vietnam, which I do not wish.

Observation:
static.vdc.vn 113.160.112.9 2017-feb-27
static.vdc.vn 113.160.141.120 2016-nov-03
static.vdc.vn 113.160.198.115 2017-jan-14
static.vdc.vn 113.160.248.143 2016-nov-22
static.vdc.vn 113.161.6.96 2016-oct-31
static.vdc.vn 113.161.71.3 2017-jan-18
static.vdc.vn 113.161.77.63
static.vdc.vn 113.161.90.11 2016-dec-27
static.vdc.vn 113.161.162.64 2017-feb-20
dynamic.vdc.vn 113.162.185.98 2016-dec-26
dynamic.vdc.vn 113.163.110.14 2017-jan-30
dynamic.vdc.vn 113.163.202.82
dynamic.vdc.vn 113.163.233.155 2017-jan-23
dynamic.vdc.vn 113.163.241.225 2016-dec-18
dynamic.vdc.com.vn 113.176.61.178 2017-jan-22
dynamic.vdc.vn 113.190.55.36 2016-oct-21
dynamic.vdc.vn 113.190.135.160 2017-feb-08
dynamic.vdc.vn 113.190.202.218 2017-jan-09
dynamic.vdc.vn 113.191.253.253 2016-nov-21
dynamic.vdc.vn 123.24.112.23 2016-nov-25
static.vdc.vn 123.30.238.16 2016-nov-03
static.vdc.vn 123.30.245.239 2016-dec-23
static.vdc.vn host name 203.162.0.78 actual 123.30.75.115

vivawebhost.com: Research, Ban

vivawebhost.com visited me with a “-” user agent, suspicious at best and certainly a bot. Please, identify yourself.

Observation:
lucky.vivawebhost.com h 78.142.63.208

Research:
wanted.vivawebhost.com 72.249.68.129
core.vivawebhost.com 78.128.60.1
lucky.vivawebhost.com 78.142.63.208
gate.vivawebhost.com 78.142.63.244
europe.vivawebhost.com 78.142.63.38
passat.vivawebhost.com 78.142.63.61
passat.vivawebhost.com 78.142.63.63
tesla.vivawebhost.com 78.142.63.64
lion.vivawebhost.com 91.148.168.30
guard.vivawebhost.com 91.148.168.34
Colonel.vivawebhost.com 173.237.189.70
vivawebhost.com 173.237.190.141
fastest.vivawebhost.com 174.136.29.112
junior.vivawebhost.com 174.136.57.185
general.vivawebhost.com 174.136.57.228
dragon.vivawebhost.com 174.136.57.60
fireblade.vivawebhost.com 217.174.148.86