Blazing SEO

From LinuxReviews
Jump to navigationJump to search

Blazing SEO, LLC is an American corporation based in Nevada, USA, who specialize in offers server and proxy services to customers who pollute the Internet with HTTP POST spam. They claim to offer "Search Engine Optimization" services and "proxy and server solutions". Their network is, used to spam blogs, wikis and other content management systems that allow users to post content with lots and lots of links to their own and their customers websites.

Blazing SEO differs from other Internet server providers in their stance towards spam: Their services are targeting those who do not want to play by the rules, their niece is to offer their customers a service where they can engage in spam behaviour that would get them kicked off the vast majority of other service providers.

Blazing SEO has a very wide and large range of subnets. This makes them somewhat effective. Their and their customers "work" can be seen in the recent changes logs in a lot of older MediaWiki and WordPress installations.

HTTP POST requests out of the Blazing SEO network tend to have legitimate-looking user-agent strings like:

Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.181 Safari/537.36.

It is somewhat hard to filter Blazing SEO bots by user-agent since the requests look like mostly older versions of regular web browsers. The requests their spam bots do look different in some respects: They do not fetch images, JavaScript, CSS or anything else beyond the HTML pages.

IP Ranges Worth Blocking

Remember to change the interface (or the variables) before using piece of iptables code:

BLACKLISTIF="enp2s0"
IPTABLES="/usr/sbin/iptables"

#####################################################################
## Blazing SEO, LLC, NE
# ServerMania
$IPTABLES -I INPUT -i $BLACKLISTIF -s 23.229.52.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 23.236.221.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 23.250.4.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 23.250.94.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 23.254.64.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 103.247.22.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.129.41.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.17.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.21.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.139.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.155.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.179.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.186.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.144.228.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 104.168.65.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.152.196.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.152.201.0/24 -j DROP

# VortexServers
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.172.150.0/26 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 192.210.200.0/24 -j DROP

# ColoCrossing
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.173.85.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.175.78.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 107.175.158.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 198.23.238.0/24 -j DROP

# KZ
$IPTABLES -I INPUT -i $BLACKLISTIF -s 176.110.125.0/24 -j DROP

# Hudson Valley Host
$IPTABLES -I INPUT -i $BLACKLISTIF -s 192.3.124.0/24 -j DROP

# Blazing SEO, LLC
$IPTABLES -I INPUT -i $BLACKLISTIF -s 138.229.102.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.99.0/24   -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.100.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.101.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.102.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.103.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.104.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.105.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.106.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.107.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.108.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.109.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.110.0/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 152.44.110.1/24  -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 162.244.148.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 172.96.84.0/24   -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 192.171.80.0/24 -j DROP
$IPTABLES -I INPUT -i $BLACKLISTIF -s 216.180.109.0/24 -j DROP

See Web crawlers for information about other good and bad actors crawling the Internet.