Abuse notification - GSA Proxy scrapper

0
VMartVMart Viral Marketing
@sven I can not able to prevent. You also checked my VPS, and confirm my settings now the server providers blocked my vps. I'm very upset. Help me plz.

> Hello!
> 
> === You are receiving this e-mail in regard to abuse issues against
> our clients coming from the host at IP 181.41.204.25. ===
> 
> WARNING: This issue for this IP has been marked unresolved for 10 days
> and in danger of global blacklisting.
> 
> --- Automated Message - To get a response or report issues with the
> reports, please see the contact info below. ---
> --- Report details are at the bottom of the e-mail. For web attacks
> see the "bot" links for more details about the attack. ----
> 
> Webiron is a security service and this e-mail is being sent on behalf
> of our customers. We do not control how our clients configure their
> protection and as a result do not control how blocks and bans are
> generated. 
> 
> We are committed to providing useful information on abuse issues on
> behalf of our clients to help stop issues related to issues that seem
> to originate from within your network. 
> 
> We value your time and effort and appreciate your assistance in
> handling these issues!
> 
> If you are responsible for abuse issues however the IP being reported
> does not belong to you, please open a ticket or email us to let us
> know of the error and we'll correct it as soon as possible. 
> 
> Please note due to the retaliatory nature of attackers and the
> abundance of internet abuse havens and fake hosting companies, we do
> not give out the exact IP of our clients. If you require further
> assistance we will be more than happy to work with you. Just open a
> ticket our contact us with the details below. 
> 
> -- Who We Are -- 
> A little about our service, we are a server protection solution
> designed to help hosting companies, their customers, and SoC
> departments improve their system security, stability and lower TCO and
> support costs. 
> 
> Please feel free to send us your comments or responses. If you are
> inquiring for more information you must disclosed the offending IP. To
> contact us via e-mail, use , however if you require a ticket tracked
> response you can open one at
> https://www.webiron.com/abuse-soc-issues.html
> 
> -- Abuse Criteria -- 
> To be considered abusive a bot must either be a clear danger (IE:
> exploit attempts, flooding, etc) or match at least two items from the
> list at
> https://www.webiron.com/supporthome/view-article/33-criteria-for-what-makes-a-bot-bad.html
> 
> -- Removal Requests -- 
> To be removed entirely from future reports reply to this e-mail with
> REMOVE (in all caps) in the subject line. Please note this will only
> stop the e-mail to the address the e-mail was sent to and public
> notices will remain as your abuse address will be listed on our BABL
> blacklist. 
> 
> -- Feed/History Links -- 
> IP Abuse Feed: https://www.webiron.com/abuse_feed/181.41.204.25
> IP Detailed Information:
> https://www.webiron.com/iplookup/181.41.204.25
> Your Abuse Report History:
> https://www.webiron.com/abuse_feed/abuse@as61440.net
> 
> --- Blacklist Warning --- 
> In an ongoing effort to stop chronic abuse we maintain several
> blacklists available as flat data or free public DNSRBL.
> 
> For more information see: https://www.webiron.com/rbl.html
> 
> To check the blacklist status of the offending IP, see:
> https://www.webiron.com/iplookup/181.41.204.25
> 
> -- NEW --
> We have now opened access to our RBL API allowing direct access to the
> entire RBL database. For more information please see:
> https://www.webiron.com/rbl.html
> 
> Thank you for your support,
> 
> The WebIron Team
> 
> ----------------------------------------------------------
> *** Note *** - All times are in America/Phoenix (-07:00) 
> ----------------------------------------------------------
> 
> Unwanted and or Abusive Web Requests:
> 
> Offending/Source IP: 181.41.204.25
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-04 03:37:23-07:00
> - Port: 80
> - Service: http
> - Report ID: b696dff6-730d-49aa-8557-1651772d730b
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: New Ban
> - Time: 2018-07-04 03:37:23-07:00
> - Port: 80
> - Service: http
> - Report ID: 5f0c07a2-9574-4d3a-ae37-7e6179f5ee29
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-04 03:37:23-07:00
> - Port: 80
> - Service: http
> - Report ID: 2495a629-c22c-4e53-9a64-6967534d2546
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-04 03:37:23-07:00
> - Port: 80
> - Service: http
> - Report ID: 979ba524-8d59-4f15-b2d3-43a502147b5e
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> 
> Hello!
> 
> === You are receiving this e-mail in regard to abuse issues against
> our clients coming from the host at IP 181.41.204.25. ===
> 
> WARNING: This issue for this IP has been marked unresolved for 8 days
> and in danger of global blacklisting.
> 
> --- Automated Message - To get a response or report issues with the
> reports, please see the contact info below. ---
> --- Report details are at the bottom of the e-mail. For web attacks
> see the "bot" links for more details about the attack. ----
> 
> Webiron is a security service and this e-mail is being sent on behalf
> of our customers. We do not control how our clients configure their
> protection and as a result do not control how blocks and bans are
> generated. 
> 
> We are committed to providing useful information on abuse issues on
> behalf of our clients to help stop issues related to issues that seem
> to originate from within your network. 
> 
> We value your time and effort and appreciate your assistance in
> handling these issues!
> 
> If you are responsible for abuse issues however the IP being reported
> does not belong to you, please open a ticket or email us to let us
> know of the error and we'll correct it as soon as possible. 
> 
> Please note due to the retaliatory nature of attackers and the
> abundance of internet abuse havens and fake hosting companies, we do
> not give out the exact IP of our clients. If you require further
> assistance we will be more than happy to work with you. Just open a
> ticket our contact us with the details below. 
> 
> -- Who We Are -- 
> A little about our service, we are a server protection solution
> designed to help hosting companies, their customers, and SoC
> departments improve their system security, stability and lower TCO and
> support costs. 
> 
> Please feel free to send us your comments or responses. If you are
> inquiring for more information you must disclosed the offending IP. To
> contact us via e-mail, use , however if you require a ticket tracked
> response you can open one at
> https://www.webiron.com/abuse-soc-issues.html
> 
> -- Abuse Criteria -- 
> To be considered abusive a bot must either be a clear danger (IE:
> exploit attempts, flooding, etc) or match at least two items from the
> list at
> https://www.webiron.com/supporthome/view-article/33-criteria-for-what-makes-a-bot-bad.html
> 
> -- Removal Requests -- 
> To be removed entirely from future reports reply to this e-mail with
> REMOVE (in all caps) in the subject line. Please note this will only
> stop the e-mail to the address the e-mail was sent to and public
> notices will remain as your abuse address will be listed on our BABL
> blacklist. 
> 
> -- Feed/History Links -- 
> IP Abuse Feed: https://www.webiron.com/abuse_feed/181.41.204.25
> IP Detailed Information:
> https://www.webiron.com/iplookup/181.41.204.25
> Your Abuse Report History:
> https://www.webiron.com/abuse_feed/abuse@as61440.net
> 
> --- Blacklist Warning --- 
> In an ongoing effort to stop chronic abuse we maintain several
> blacklists available as flat data or free public DNSRBL.
> 
> For more information see: https://www.webiron.com/rbl.html
> 
> To check the blacklist status of the offending IP, see:
> https://www.webiron.com/iplookup/181.41.204.25
> 
> -- NEW --
> We have now opened access to our RBL API allowing direct access to the
> entire RBL database. For more information please see:
> https://www.webiron.com/rbl.html
> 
> Thank you for your support,
> 
> The WebIron Team
> 
> ----------------------------------------------------------
> *** Note *** - All times are in America/Phoenix (-07:00) 
> ----------------------------------------------------------
> 
> Unwanted and or Abusive Web Requests:
> 
> Offending/Source IP: 181.41.204.25
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-02 20:23:50-07:00
> - Port: 80
> - Service: http
> - Report ID: bf7de8c1-c2fa-4c5a-bead-40f633d7f442
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-02 20:23:50-07:00
> - Port: 80
> - Service: http
> - Report ID: e5e27cc2-41c7-457f-ba52-6a0915598068
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: Banned IP
> - Time: 2018-07-02 20:23:50-07:00
> - Port: 80
> - Service: http
> - Report ID: 47571d45-fcb2-4533-8037-3f9158a97e23
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> - Issue: Source has attempted the following botnet activity: URL
> Redirection Link Spam Bot
> - Block Type: New Ban
> - Time: 2018-07-02 20:23:50-07:00
> - Port: 80
> - Service: http
> - Report ID: ec35a0c7-b2a9-43be-9475-c8496d025371
> - Bot Fingerprint: 3ad8edd468ec76b8f5885488f1bf4958
> - Bot Information:
> https://www.webiron.com/bot_lookup/3ad8edd468ec76b8f5885488f1bf4958
> - Bot Node Feed:
> https://www.webiron.com/bot_feed/3ad8edd468ec76b8f5885488f1bf4958
> - Abused Range: 50.116.5.0/24
> - Requested URI: /abuse_feed/
> - User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64)
> AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94
> Safari/537.36
> 
> 



Comments

  • 0
    SvenSven www.GSA-Online.de
    Accepted Answer
    Unfortunately this is not giving me anything again. Why you think this is about Proxy Scraper now?
  • 0
    VMartVMart Viral Marketing
    Are you mean Ip is got blocked and there is no proper information for Block.

    I dont know why server provider is sending me the abuse notice and i cant understand why they block my IP.
    I am using same pattern for several years.
    I dont know what should I do....

    I am non technician I need help...I am in big trouble...help Me
  • 0
    SvenSven www.GSA-Online.de
    Accepted Answer
    if possible, ask them for any detail about this abuse that they can get you as we both are clueless why this happens. There is no evidence than just an ip range and thats it.
  • 0
    VMartVMart Viral Marketing
    Sven I asked the reason he replied

    "We had forwarded the exact email we received from the source where your IP hit multiple time.

    And we can't let it happen."


  • 0
    VMartVMart Viral Marketing

    We send the detailed about the abuse message and it's described everything. We do not care what you use within the vps unless we received any abuse or anything. It's your personal vps and you are responsible for the abuse.

    So you need to fix the issue yourself. And while the main IP listed in abuse mean the application you running behind the IP is not protect with any valid proxies or vpn. Where we strongly mentioned to use such.

  • 0
    VMartVMart Viral Marketing

    Issue: Source has attempted the following botnet activity: URL

    > Redirection Link Spam Bot
    

    The reason for the block as they mentioned is due to bot activity, please check with it.

  • 0
    VMartVMart Viral Marketing
    They informed the issue is from >Redirection Link Spam Bot.
    I'm using GSA Redirect PRO with the proxy scraper elite proxy only.

    After active my vps shall I stop GSA Redirect Pro??? Or Shall I disable any engines??

  • 0
    SvenSven www.GSA-Online.de
    Accepted Answer
    Well stop GSA Redirect PRO for a while and see if it helps. As long as we don't even know from where this is coming, it makes not much sense to me.
  • 0
    VMartVMart Viral Marketing
    "Yes" sven
    Temporally I'll disable GSA Redirect PRO, and sent to me feedback.

  • 0
    VMartVMart Viral Marketing
    sorry.
    sent to you feedback.
Sign In or Register to comment.