Post by Dhaupin » Tue Aug 19, 2014 10:20 pm

Opencart India SEO spammers are extremely annoying. Whats the best way to catch where the source of the mail is coming from? Set a trap link and wait for them to visit it. The trap link triggers a log. You see their IP in the log. Also if its not a gmail account, use "view original" to get their client IP in headers. This will often expose their mail relay.

Here is a list of IP addresses that are reading trap replies. Regardless of where they come from, these are the locations that are reading them, as well as their relays. These are ISP IP's so they are like cable modems over there....the IP's may change but for now ban all of these from your server firewall (best) or HTACCESS (good) or OC ip block (ok):

Code: Select all

### SEO EMAIL RELAYS AND PROXIES
deny from 37.157.195.143
deny from 64.202.189.17
deny from 68.168.251.144
deny from 162.253.53.10
deny from 172.245.62.225
deny from 173.242.20.90
deny from 192.3.121.144
deny from 199.182.173.7
deny from 202.162.242.100


### INDIA MAILSPAM BANS
deny from 1.22.164.143
deny from 1.22.175.4
deny from 1.23.43.52
deny from 1.23.109.198
deny from 1.39.24.30
deny from 14.99.200.45
deny from 27.48.198.170
deny from 27.49.68.21
deny from 27.49.68.227
deny from 27.49.69.51
deny from 27.49.69.86
deny from 27.60.117.143
deny from 27.251.215.132
deny from 27.251.215.133
deny from 27.251.215.186
deny from 27.255.159.106
deny from 49.204.110.235
deny from 49.204.111.195
deny from 58.68.53.82
deny from 58.68.53.83
deny from 58.68.53.84
deny from 59.91.224.233
deny from 59.97.0.231
deny from 59.97.164.25
deny from 59.97.164.127
deny from 59.97.164.253
deny from 59.97.165.4
deny from 59.97.165.9
deny from 59.97.166.67
deny from 59.97.166.100
deny from 101.56.155.250
deny from 103.9.223.221
deny from 103.11.116.46
deny from 103.12.134.68
deny from 103.12.134.254
deny from 103.29.221.127
deny from 103.243.52.67
deny from 103.248.246.184
deny from 103.253.200.251
deny from 106.78.15.53
deny from 106.78.58.26
deny from 106.205.96.24
deny from 106.205.136.133
deny from 106.208.7.69
deny from 109.73.111.19
deny from 113.19.82.14
deny from 113.19.176.207
deny from 113.19.193.61
deny from 113.19.208.44
deny from 113.19.208.47
deny from 113.19.208.68
deny from 113.19.210.176
deny from 113.193.216.154
deny from 115.112.33.74
deny from 115.118.50.132
deny from 115.118.236.140
deny from 116.202.3.117
deny from 117.201.144.230
deny from 117.201.156.1
deny from 117.201.161.154
deny from 117.206.181.40
deny from 117.220.173.50
deny from 117.215.8.17
deny from 117.215.8.37
deny from 117.215.8.193
deny from 117.222.235.105
deny from 117.245.0.20
deny from 117.245.18.114
deny from 117.245.19.159
deny from 117.251.22.146
deny from 117.251.22.235
deny from 117.245.24.91
deny from 119.82.66.132
deny from 119.82.85.167
deny from 120.57.155.25
deny from 120.72.95.92
deny from 122.50.216.119
deny from 122.161.203.187
deny from 122.167.11.89
deny from 122.167.35.76
deny from 122.167.73.208
deny from 122.169.216.150
deny from 122.171.88.64
deny from 122.171.114.144
deny from 122.172.100.240
deny from 122.175.193.133
deny from 122.176.13.85
deny from 122.176.118.47
deny from 122.176.129.226
deny from 122.176.159.26
deny from 122.176.162.230
deny from 122.176.164.186
deny from 122.176.170.60
deny from 122.176.214.249
deny from 122.176.215.51
deny from 122.176.235.8
deny from 122.176.248.128
deny from 122.176.251.91
deny from 122.177.4.64
deny from 122.177.6.90
deny from 122.177.21.197
deny from 122.177.35.73
deny from 122.177.42.149
deny from 122.177.44.159
deny from 122.177.45.120
deny from 122.177.52.48
deny from 122.177.54.6
deny from 122.177.58.172
deny from 122.177.58.191
deny from 122.177.59.62
deny from 122.177.66.22
deny from 122.177.67.40
deny from 122.177.73.186
deny from 122.177.76.54
deny from 122.177.79.34
deny from 122.177.79.123
deny from 122.177.82.174
deny from 122.177.87.137
deny from 122.177.88.183
deny from 122.177.88.150
deny from 122.177.89.192
deny from 122.177.90.152
deny from 122.177.91.75
deny from 122.177.96.130
deny from 122.177.98.6
deny from 122.177.106.105
deny from 122.177.115.191
deny from 122.177.141.71
deny from 122.177.178.117
deny from 122.177.181.36
deny from 122.177.184.25
deny from 122.177.195.217
deny from 122.177.201.85
deny from 122.177.207.162
deny from 122.177.215.99
deny from 122.177.218.137
deny from 122.177.226.229
deny from 122.177.237.71
deny from 122.177.251.96
deny from 122.179.186.104
deny from 123.236.58.149
deny from 123.238.20.120
deny from 125.62.105.178
deny from 125.62.107.205
deny from 125.62.123.208 
deny from 125.99.186.58
deny from 180.87.201.150
deny from 180.87.201.224
deny from 180.87.230.150
deny from 180.87.230.240
deny from 180.87.230.250
deny from 180.87.230.251
deny from 180.87.245.126
deny from 180.87.245.137
deny from 180.87.253.11
deny from 180.87.253.83
deny from 180.87.253.166
deny from 180.87.254.44
deny from 180.87.255.60
deny from 180.87.255.70
deny from 180.87.255.82
deny from 180.87.255.92
deny from 180.87.255.134
deny from 180.87.255.153
deny from 180.87.255.201
deny from 182.18.151.43
deny from 182.64.34.41
deny from 182.64.119.161
deny from 182.68.41.100
deny from 182.68.106.101
deny from 182.68.133.178
deny from 182.68.195.241
deny from 182.69.202.80
deny from 182.68.213.244
deny from 182.71.117.134
deny from 182.73.118.214
deny from 182.73.148.94
deny from 182.73.177.53
deny from 182.73.177.55
deny from 182.73.243.66
deny from 182.237.141.41
deny from 203.98.104.128
deny from 203.129.207.246
deny from 210.56.120.47
deny from 223.176.209.86
deny from 223.176.225.94
deny from 223.176.240.190
deny from 223.176.248.142
deny from 223.184.73.100
deny from 223.225.53.115
deny from 223.226.72.85
Have fun :)
Last edited by Dhaupin on Mon Nov 24, 2014 11:10 pm, edited 35 times in total.

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA

Post by Johnathan » Tue Aug 19, 2014 11:50 pm

Thanks for these

Image Image Image Image Image


User avatar
Administrator

Posts

Joined
Fri Dec 18, 2009 3:08 am


Post by Dhaupin » Fri Aug 22, 2014 10:07 pm

Np brother. Added a handful more spammer IP's to that list if you need em. Got flooded again today so im sure there will be more offenders post-2am this evening :)

Does anyone know more IP ranges to block SEO tools? Specifically SEObook - they have a TON of bots on like 100+ subdomains

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA

Post by Dhaupin » Tue Sep 09, 2014 10:28 pm

Added more india spammerzzzzzzzzzz if anyone needs. Anyone here from India that can deliver a punch to the face if i give you an address?

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA

Post by Dhaupin » Tue Oct 07, 2014 12:23 am

These all seem to be related to 1 major "SEO lead generation" service in India. Turns out giving them junk leads all the time gets you removed from that service :) The rest keep getting burned by clicking baits, its too funny

Updated with fresh IP's since last month and added a couple relays too.

https://creadev.org | support@creadev.org - Opencart Extensions, Integrations, & Development. Made in the USA.


User avatar
Active Member

Posts

Joined
Tue May 13, 2014 3:45 am
Location - PA
Who is online

Users browsing this forum: Semrush [Bot] and 12 guests