X-Git-Url: http://git.osdn.net/view?a=blobdiff_plain;f=spam%2Fspam.ini.php;h=2f6ce0fca94b257c285c4025e91a7287adb77253;hb=4ce3df78e4b285d8c1bf64326872a62abe104d30;hp=c4786bd843585fb20c071888ff984b7bacc0f770;hpb=ade4bcd940467ff142ddca7653e9a6915ba74434;p=pukiwiki%2Fpukiwiki_sandbox.git diff --git a/spam/spam.ini.php b/spam/spam.ini.php index c4786bd..2f6ce0f 100644 --- a/spam/spam.ini.php +++ b/spam/spam.ini.php @@ -1,5 +1,5 @@ array( '*.get2.us', @@ -572,6 +573,7 @@ $blocklist['A-1'] = array( ), 'irotator.com', '.iwebtool.com', + 'j6.bz', 'jeeee.net', 'Jaze Redirect Services' => array( '*.arecool.net', @@ -844,6 +846,13 @@ $blocklist['A-1'] = array( 'miniurl.pl', 'mixi.bz', 'mo-v.jp', + 'MoldData.md' => array( // Note: Some part of '.md' ccTLD + '.com.md', + '.co.md', + '.org.md', + '.info.md', + '.host.md', + ), 'monster-submit.com', 'mooo.jp', 'murl.net', @@ -1338,6 +1347,7 @@ $blocklist['A-1'] = array( 'zaable.com', 'zapurl.com', 'zarr.co.uk', + 'zerourl.com', 'ZeroWeb.org' => array( '*.80t.com', '*.firez.org', @@ -1391,6 +1401,7 @@ $blocklist['A-2'] = array( '*.jdyn.cc', '*.jspeed.jp', ), + '*.mydyn.de', '*.nerdcamp.net', 'No-IP.com' => array( '*.bounceme.net', @@ -1416,6 +1427,7 @@ $blocklist['A-2'] = array( '*.zapto.org', ), '*.zenno.info', + '*.opendns.be', '.cm', // 'Cameroon' ccTLD, sometimes used as typo of '.com', // and all non-recorded domains redirect to 'agoga.com' now // http://money.cnn.com/magazines/business2/business2_archive/2007/06/01/100050989/index.htm @@ -1447,6 +1459,7 @@ $blocklist['B-1'] = array( '*.00freehost.com', // by David Mccall (superjeeves at yahoo.com), ns *.0catch.com '*.0catch.com', // by Sam Parkinson (sam at 0catch.com), also zerocatch.com '*.100freemb.com', // by Danny Ashworth (dan at 0catch.com), ns *.0catch.com + '*.1sweethost.com', // 209.63.57.10(www1.0catch.com) by whois at bluehost.com, ns *.0catch.com '*.envy.nu', // by Dave Ellis (dave at larryblackandassoc.com), ns *.0catch.com '*.galaxy99.net', // by Bagchi.Org (admin at bagchi.org), ns *.0catch.com '*.zomi.net', // by sianpu at gmail.com, ns *.0catch.com @@ -1454,7 +1467,7 @@ $blocklist['B-1'] = array( '*.1asphost.com', // by domains at dotster.com '100 Best Inc' => array( // by 100 Best Inc (info at 100best.com) '*.0-st.com', - '*.150m.com', // by 100 Best, Inc., NS by 0catch.com + '*.150m.com', // by 100 Best, Inc., ns *.0catch.com '*.2-hi.com', '*.20fr.com', '*.20ii.com', @@ -1463,11 +1476,13 @@ $blocklist['B-1'] = array( '*.20m.com', // by jlee at 100bestinc.com '*.20me.com', '*.20to.com', + '*.250m.com', // by Jason Fahlman (jason at fahlman.net), ns *.0catch.com '*.2u-2.com', '*.3-st.com', '*.fws1.com', '*.fw-2.com', '*.inc5.com', + '*.maddsites.com', // by Antonio Brice (big.tone at maddhattentertainment.com), ns *.0catch.com '*.on-4.com', '*.st-3.com', '*.st20.com', @@ -1486,8 +1501,10 @@ $blocklist['B-1'] = array( '.dreipage.de', '.2page.de', ), + '*.3-hosting.net', '*.30mb.com', // by 30MB Online (63681 at whois.gkg.net) '*.50megs.com', // by hostmaster at northsky.com + '*.50webs.com', // by LiquidNet Ltd. (support at propersupport.com), redirect to mpage.jp '*.5gbfree.com', '*.789mb.com', // by Nicholas Long (nicolas.g.long at gmail.com) '*.9999mb.com', // by allan Jerman (prodigy-airsoft at cox.net) @@ -1507,6 +1524,10 @@ $blocklist['B-1'] = array( '*.atwiki.com', // by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp) '*.asphost4free.com', 'basenow.com', + 'BatCave.net' => array( + '.batcave.net', // 64.22.112.226 + '.freehostpro.com', // 64.22.112.226 + ), '*.bb-fr.com', '*.beeplog.com', 'bestfreeforums.com', @@ -1526,10 +1547,11 @@ $blocklist['B-1'] = array( 'blogfreely.com', '*.blogdrive.com', '*.blogg.de', + 'bloggerblast.com', // by B. Kadrie (domains at starwhitehosting.com) 'bloggercrab.com', + 'bloggers.nl', '*.bloggingmylife.com', '*.bloggles.info', - 'bloggers.nl', '*.blogharbor.com', '*.bloguj.eu', 'bloguitos.com', @@ -1592,6 +1614,7 @@ $blocklist['B-1'] = array( 'dakrats.net', '*.dcswtech.com', '*.devil.it', + '*.dex1.com', '*.diaryland.com', 'domains at galaxywave.net' => array( 'blogstation.net', @@ -1624,13 +1647,17 @@ $blocklist['B-1'] = array( '*.fanforum.cc', 'fingerprintmedia.com', '*.filelan.com', + '*.fora.pl', '*.foren-city.de', 'foren-gratis.de', '*.foros.tv', 'foroswebgratis.com', '*.forum-on.de', + '*.forum24.se', '*.forum5.com', // by Harry S (hsg944 at gmail.com) '.forum66.com', + '*.forumcommunity.net', + 'forumhosting.org', '*.forums.com', 'forumbolt.com', 'phpbb.forumgratis.com', @@ -1653,6 +1680,7 @@ $blocklist['B-1'] = array( 'myblogstreet.com', // by Robert Vigil, ns *.phpwebhosting.com 'blogbeam.com', // by Robert Vigil, ns *.phpwebhosting.com ), + '*.free-forums.org', // 209.62.43.2(ev1s-209-62-43-2.ev1servers.net) by Teodor Turbatu (tteo at zappmobile.ro) 'free-guestbook.net', '*.free-site-host.com', // by CGM-Electronics (chris at cgm-electronics.com) 'freebb.nl', @@ -1663,6 +1691,9 @@ $blocklist['B-1'] = array( 'freeforum.at', // by Sandro Wilhelmy 'freeforumshosting.com', // by Adam Roberts (admin at skaidon.co.uk) '*.freeforums.org', // by 1&1 Internet, Inc. - 1and1.com + '*.freehostia.com', + '*.freewebhostingpro.com', + '*.freehostingz.com', // no dns reply => 67.159.33.10 by Marx Lomas (marvellousmarx at hotmail.com) 'FreeWebHostingArea.com' => array( // or www.freewha.com '*.6te.net', '*.ueuo.com', @@ -1678,7 +1709,10 @@ $blocklist['B-1'] = array( 'freepowerboards.com', '*.freepowerboards.com', '*.fsphost.com', // by Michael Renz (michael at fsphost.com) - '*.funpic.de', + 'Funpic.de' => array( // by alexander at liemen.net + '*.funpic.de', + '*.funpic.org', + ), '*.genblogger.com', 'geocities.com', 'GetBetterHosting.com' => array( @@ -1697,10 +1731,31 @@ $blocklist['B-1'] = array( 'groups-beta.google.com', // by Google 'healthcaregroup.com', '*.heliohost.org', + 'Halverston Holdings Limited' => array( // pochta.ru?lng=en + // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com) + '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru) + '*.front.ru', // (domain at hc.ru) + '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru) + '*.hotbox.ru', // (domain at hc.ru) + '*.hotmail.ru', // (hosting at hc.ru) + '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru) + '*.land.ru', // (domain at hc.ru) + '*.mail15.com', // (hosting at hc.ru) + '*.mail333.com', // (hosting at hc.ru) + '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru) + '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru) + '*.pisem.net', // (hosting at hc.ru) + '*.pochta.ru', // (domain at hc.ru) + '*.pochtamt.ru', // (domain at hc.ru) + '*.pop3.ru', // (domain at hc.ru) + '*.rbcmail.ru', // (domain at hc.ru) + '*.smtp.ru', // (domain at hc.ru) + ), '*.hit.bg', // by forumup.com ?? '*.host-page.com', '*.hostingclub.de', 'forums.hspn.com', + '*.httpsuites.com', '*.hut2.ru', 'IC.cz' => array( '*.ezin.cz', // internetcentrum at gmail.com, ns ignum.com, ignum.cz @@ -1723,6 +1778,7 @@ $blocklist['B-1'] = array( '*.teracities.com', '*.xoompages.com', ), + '*.icspace.net', 'iEUROP.net' => array( '*.ibelgique.com', '*.iespana.es', @@ -1732,6 +1788,8 @@ $blocklist['B-1'] = array( '*.isuisse.com', ), '*.ihateclowns.net', + '*.ii55.com', + '*.ipbfree.com', '*.iphorum.com', '*.blog.ijijiji.com', '*.info.com', @@ -1742,6 +1800,7 @@ $blocklist['B-1'] = array( '*.jeeran.com', '*.jeun.fr', '*.journalscape.com', + '*.justfree.com', '*.blog.kataweb.it', '*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com '*.kokoom.com', @@ -1788,6 +1847,7 @@ $blocklist['B-1'] = array( '*.tripod.com', ), 'mbga.jp', // by DeNA Co.,Ltd. (barshige at hq.bidders.co.jp, torigoe at hq.bidders.co.jp) + '*.memebot.com', '*.messageboard.nl', 'mokono GmbH' => array( '*.blog.com.es', @@ -1832,7 +1892,6 @@ $blocklist['B-1'] = array( 'neweconomics.info', '*.nm.ru', '*.obm.cn', // by xiaobak at yahoo.com.cn - '*.w100.okwit.com', // by chen jinian (dfym at dfym.cn) 'onlyfree.de', '*.ooblez.com', // by John Nolande (ooblez at hotmail.com) '*.ohost.de', @@ -1880,26 +1939,6 @@ $blocklist['B-1'] = array( '*.sbn.bz', '*.wol.bz', ), - 'Halverston Holdings Limited' => array( // pochta.ru?lng=en - // Seems one of affiliates of RBC, RosBusinessConsulting (rbc.ru, rbcnews.com) - '*.fromru.com', // by Lapeshkina Tatyana (noc at pochta.ru) - '*.front.ru', // (domain at hc.ru) - '*.hc.ru', // by (domain at hosting.rbc.ru, domaincredit at hosting.rbc.ru) - '*.hotbox.ru', // (domain at hc.ru) - '*.hotmail.ru', // (hosting at hc.ru) - '*.krovatka.su', // (domain at hc.ru, hosting at hc.ru) - '*.land.ru', // (domain at hc.ru) - '*.mail15.com', // (hosting at hc.ru) - '*.mail333.com', // (hosting at hc.ru) - '*.newmail.ru', // (domain at hc.ru, hosting at hc.ru) - '*.nightmail.ru', // (domain at hc.ru, hosting at hc.ru) - '*.pisem.net', // (hosting at hc.ru) - '*.pochta.ru', // (domain at hc.ru) - '*.pochtamt.ru', // (domain at hc.ru) - '*.pop3.ru', // (domain at hc.ru) - '*.rbcmail.ru', // (domain at hc.ru) - '*.smtp.ru', // (domain at hc.ru) - ), '*.sayt.ws', 'Seblg.com' => array( '*.seblg.com', // by Dao Lee (st at seblg.com) @@ -1934,6 +1973,7 @@ $blocklist['B-1'] = array( 'strikebang.com', '*.sultryserver.com', '*.t35.com', + '*.talks.at', 'tabletpcbuzz.com', '*.talkthis.com', 'tbns.net', @@ -2085,6 +2125,7 @@ $blocklist['B-1'] = array( ), 'webblog.ru', 'weblogmaniacs.com', + '.webng.com', // www.*, www3.* '*.webnow.biz', // by Hsien I Fan (admin at servcomputing.com), ServComputing Inc. 'websitetoolbox.com', 'Welnet.de' => array( @@ -2098,8 +2139,10 @@ $blocklist['B-1'] = array( '*.wordpress.com', '.wsboards.com', // by Chris Breen (Cbween at gmail.com) 'xeboards.com', // by Brian Shea (bshea at xeservers.com) + '*.xforum.se', 'xfreeforum.com', '.freeblogs.xp.tl', + '*.xphost.org', // by alex alex (alrusnac at hotmail.com) '*.ya.com', // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'... 'YANDEX, LLC.' => array( // noc at yandex.net '*.narod.ru', @@ -2121,6 +2164,7 @@ $blocklist['B-2'] = array( // (e.g. some sort of blog comments, BBSes, forums, wikis) '*.3dm3.com', '3gmicro.com', // by Dean Anderson (dean at nobullcomputing.com) + '*.1fr1.com', 'a4aid.org', 'aac.com', '*.aamad.org', @@ -2168,6 +2212,7 @@ $blocklist['B-2'] = array( 'fbwloc.com', '.fhmcsa.org.au', 'findyourwave.co.uk', + 'frogcafe.net', 'plone4.fnal.gov', 'freeforen.com', 'funkdoc.com', @@ -2192,6 +2237,7 @@ $blocklist['B-2'] = array( '.hyba.info', 'inda.org', '*.indymedia.org', // by abdecom at riseup.net + 'instantbulletin.com', 'internetincomeclub.com', '*.inventforum.com', 'Iowa State University' => array('boole.cs.iastate.edu'), @@ -2224,6 +2270,7 @@ $blocklist['B-2'] = array( 'mountainjusticemedia.org', '*.mybbland.com', 'mydlstore.com', + '*.netboardz.com', 'North Carolina A&T State University' => array( 'ncat.edu', 'my.ncat.edu', @@ -2273,6 +2320,7 @@ $blocklist['B-2'] = array( 'Tennessee Tech University' => array('manila.tntech.edu'), 'thebluebird.ws', 'theosis.org', + '*.thoforum.com', 'troms-slekt.com', 'theedgeblueisland.com', 'toyshop.com.tw', // /images/sigui/ @@ -2560,6 +2608,7 @@ $blocklist['C'] = array( // by David C. Lack (David.C.Lack at dodgeit.com) // by Kuzma V Safonov (admin at irtes.ru) // by Petrov Vladimir (vvm_kz at rambler.ru) + // by LAURI FUNK (vvm_kz at rambler.ru) '.abrek.info', // by Petrov '.accommodationwiltshire.com', // by Petrov '.allsexonline.info', // by Varsylenko @@ -2569,11 +2618,14 @@ $blocklist['C'] = array( '.freeforworld.info', // by Varsylenko '.gitsite.info', // by Petrov '.goodworksite.info', // by Varsylenko + '.michost.info', // by LAURI '.onall.info', // by Varsylenko '.organiq.info', // by Petrov + '.parther.info', // by LAURI '.powersiteonline.info', // by Varsylenko '.rentmysite.info', // by Varsylenko '.levines.info', // by Petrov + '.modacha.info', // by LAURI '.mp3vault.info', // by Petrov '.sernost.info', // by Petrov '.sexdrink.info', // by Petrov @@ -2701,8 +2753,18 @@ $blocklist['C'] = array( '.lzy88588.com', '.ragnaroklink.com', + // 125.65.112.24 + '.rmtfane.com', + '.fc2weday.com', + '.nlftweb.com', + + // 125.65.112.27 + '.i520i.com', + '.sunwayto.com', + + // 125.65.112.31 // The same IP: web016.cdnhost.cn - '.twyaooplay.com', // 125.65.112.31 + '.twyaooplay.com', // 125.65.112.32 // The same IP: web037.cdnhost.cn @@ -2735,6 +2797,9 @@ $blocklist['C'] = array( '.ragnarok-search.com', '.rinku-livedoor.com', + // 125.65.112.90 + '.gtvxi.com', + // 125.65.112.91 // The same IP: web004.cdnhost.cn '.6828teacup.com', @@ -2794,6 +2859,9 @@ $blocklist['C'] = array( '.yahoodoor-blog.com', '.yy14-kakiko.com', + // 125.65.112.137 + '.clublineage.com', + // 228.14.153.219.broad.cq.cq.dynamic.163data.com.cn '.kaukoo.com', // 219.153.14.228, by zeng xianming (expshell at 163.com) '.linrmb.com', // 219.153.14.228, by zeng xianming (qqvod at qq.com) @@ -3484,71 +3552,90 @@ $blocklist['C'] = array( '.antivirus1.info', '.antivirus2.info', ), - 'wasam at vangers.net' => array( // by Ashiksh Wasam - '.290cabeza.org', // 69.31.91.226(colo-69-31-91-226.pilosoft.com) + 'wasam at vangers.net and family' => array( + + // 69.31.82.51(colo-69-31-82-51.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net) + '.bahatoca.org', + '.digestlycos.org', + '.educativaanale.info', + '.guildstuscan.org', + '.isaakrobbins.info', + '.isfelons.org', + '.lvwelevated.org', + '.macphersonaca.org', + '.markyaustrian.org', + '.michelepug.org', + '.opalbusy.info', + '.quijotebachata.info', + '.salthjc.info', + '.solarissean.org', + '.tarzanyearly.org', + '.tulabnsf.org', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Bipik Joshu (bipik at vangers.net) + '.e2007.info', + '.cmoss.info', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Kasturba Nagari (kasturba at vangers.net) + '.finddesk.org', + '.gsfind.org', // You mean: sfind.net by tvaals at vangers.net + '.my-top.org', // You mean: my-top.net by tvaals at vangers.net + '.rcatalog.org', + '.sbitzone.org', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Thomas Vaals (tvaals at vangers.net) + '.cheapns.org', + '.my-top.net', + '.sfind.net', + '.sspot.net', + '.suvfind.info', + + // 69.31.82.53 by Mariano Ciaramolo (marion at vangers.net) + '.trumber.com', + + // 69.31.82.53(colo-69-31-82-53.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net) '.blogduet.org', - '.bossierpainted.org', '.carelf.info', - '.cmagic.org', + '.cmagic.org', '.cspell.org', '.dspark.org', '.dtonic.org', - '.gradetelemundo.info', - '.indicadorestmj.info', - '.keeleykincaid.org', '.mcharm.info', '.mslook.info', '.phpdinnerware.info', - '.pipnickname.info', - '.pacolily.org', - '.redeemtrabalho.info', '.rnation.org', - '.titanmessina.info', - '.tragratuit.org', '.uzing.org', - '.yeareola.info', - ), - 'kadilk at vangers.net' => array( // by Kadil Kasekwam - '.allbar.info', // 69.31.91.226 + + // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Kadil Kasekwam (kadilk at vangers.net) + '.allbar.info', '.allersearch.org', + '.allzoom.org', '.dynall.org', - '.educativaanale.info', '.fastopia.org', - '.guildstuscan.org', - '.isfelons.org', - '.solarissean.org', - '.opalbusy.info', '.rblast.org', '.rette.org', - '.salthjc.info', '.suvlook.org', - '.tarzanyearly.org', - '.tulabnsf.org', - ), - 'tvaals at vangers.net' => array( // by Thomas Vaals - '.cheapns.org', - '.my-top.net', - '.sfind.net', - '.sspot.net', - '.suvfind.info', - ), - 'kasturba at vangers.net' => array( // by Kasturba Nagari - '.finddesk.org', - '.gsfind.org', - '.my-top.org', - '.rcatalog.org', - '.sbitzone.org', - ), - 'bipik at vangers.net' => array( // by Bipik Joshu - '.e2007.info', - '.cmoss.info', + + // 69.31.91.226(colo-69-31-91-226.pilosoft.com) by Ashiksh Wasam (wasam at vangers.net) + '.290cabeza.org', + '.bossierpainted.org', + '.connickkarel.info', // Admin: tvaals at vangers.net + '.definekonica.info', // Admin: tvaals at vangers.net + '.gradetelemundo.info', + '.indicadorestmj.info', + '.keeleykincaid.org', + '.pipnickname.info', + '.pacolily.org', + '.redeemtrabalho.info', + '.titanmessina.info', + '.tragratuit.org', + '.yeareola.info', ), - 'marion at vangers.net' => array('.trumber.com'), // by Mariano Ciaramolo 'SearchHealtAdvCorpGb.com' => array( // by Jonn Gardens (admin at SearchHealtAdvCorpGb.com -- no such domain) - '.canadianmedsworld.info', - '.tabsdrugstore.info', - '.tabsstore.info', - '.topcholesterol.info', + '.canadianmedsworld.info', // 84.252.133.112 + '.tabsdrugstore.info', // 84.252.133.114 + '.tabsstore.info', // 84.252.133.114 + '.topcholesterol.info', // 84.252.133.132 ), 'be.cx' => array( '.be.cx', @@ -3557,6 +3644,7 @@ $blocklist['C'] = array( 'john780321 at yahoo.com' => array( // by John Brown '.bestdiscountpharmacy.biz', // 2007-01-27, 61.144.122.45 '.drugs4all.us', // 2007-03-09, 202.67.150.250 + '.online-pharmacy-no-prescription.org', // 69.56.135.222(de.87.3845.static.theplanet.com) ), 'tremagl.freet at gmail.com' => array( // by Treman Eagles, redirect to searchadv.com '.bertela.info', @@ -4116,8 +4204,71 @@ $blocklist['C'] = array( // fresadultapple.info // fresadultclick.info // frestheplace.info + + // 66.232.113.44 '.nuhost.info', '.susearch.info', + + // 66.232.126.74(hv94.steephost.com) + '.dilej.com', + '.fyvij.com', + '.howus.com', + '.jisyn.com', + '.kaxem.com', + '.mihug.com', + '.qidat.com', + '.qihek.com', + '.ryzic.com', + '.sasuv.com', + '.tuquh.com', + '.vehyq.com', + '.wezid.com', + '.wifuj.com', + '.xijyt.com', + '.zuqyn.com', + ), + 'jakaj ay hotmail.com' => array( // 66.232.113.46, the same approach and timing of clickx at bk.ru + '.hitsearching.info', + '.hugeamountdata.info', + '.megafasthost.info', + '.real-big-host.info', + '.search4freez.info', + '.yasech.info', + ), + 'ice--man at mail.ru' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru + '.exoticmed.com', + '.feelview.com', + '.greatexotic.com', + '.icyhip.com', + '.icyiceman.com', + '.margansitio.com', + '.margantierra.com', + '.mimargan.com', + '.oilkeys.com', + '.thekeyse.com', + '.viewgreat.com', + ), + 'nijeoi at hotmai.com' => array( + //by 66.232.126.74 Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru + '.bowij.com', + '.bozib.com', + '.cavux.com', + '.dipov.com', + '.gumoz.com', + '.hepyt.com', + '.kyheq.com', + '.kyzad.com', + '.qicad.com', + '.qubyd.com', + '.mocyq.com', + '.muloq.com', + '.myxim.com', + '.nufyp.com', + '.xomej.com', + '.xykyl.com', + '.zakuw.com', + '.zeliw.com', + '.zimev.com', ), 'porychik at hot.ee' => array( // by Igor '.tedstate.info', // "Free Web Hosting" @@ -4299,9 +4450,15 @@ $blocklist['C'] = array( '.gamanir.com', // by yangjianhe (upload888 at 126.com), malicious file '.twurbbs.com', // by mingzhong ni (ggyydiy at 163.com) ), - '81.0.195.148' => array( // Says: "GOOGLE LOVES ME!!!", I don't think so. + 'm_koz at mail.ru' => array( // 217.11.233.76 by Kozlov Maxim + '.beta-google.com', + '.tv-reklama.info', + '.ebooktradingpost.com', // Anonymous like 81.0.195.148 but 217.11.233.76 + ), + '81.0.195.148' => array( // Says: "GOOGLE LOVES ME!!!", I don't think so. the same post with m_koz found '.abobrinha.org', - '.physcomp.org', // / Not Found + '.aneurysmic.com', // / not found + '.physcomp.org', // / not found '.seriedelcaribe2006.org', '.refugeeyouthinamerica.com', ), @@ -4324,6 +4481,7 @@ $blocklist['C'] = array( 'admin at newestsearch.com' => array( // by Gibrel Sitce '.emr5ce.org', '.wfe7nv.org', + '.xyr99yx.org', ), '203.171.230.39' => array( // registrar bizcn.com, iframe + cursor '.playonlinenc.com', @@ -4447,6 +4605,144 @@ $blocklist['C'] = array( '.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript '.ringtonecooler.com', // 217.11.233.34 ), + 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn) + '.okwit.com', // 220.166.64.44 + '.sakerver.com', // 220.166.64.194 + '.motewiki.net', // 220.166.64.194 + ), + 'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com) + '.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net) + '.lookmedicine.info', // 206.161.205.22 + '.lookshop.info', // 209.8.40.52(goes.to.high.school.in.beverly-hills.ca.us) + '.searchhealth.info', // 206.161.205.30(seg.fau.lt) + '.worldsitesearch.info', // 209.8.40.59 + ), + 'lee.seery at gmail.com' => array( + '.klikgoogle.com', // 64.21.34.55(klikgoogle.com), by KLIK Media GmbH (max at awmteam.com) + '.lingvol.com', // 64.21.34.55 + '.micevol.com', // 64.21.34.55 + '.heyhey.info', // 64.21.34.55 by anonymous + ), + '69-64-64-71.dedicated.abac.net etc' => array( // ns *.trklink.com + // 69-64-64-71.dedicated.abac.net + '.cacrdscreating.info', + '.caditbegging.info', + '.cadr-establilsh.info', + '.cadrs-buildercredit.info', + '.cads-565.info', + + // 69-64-64-113.dedicated.abac.net + '.interistacards.info', + '.intrust-ards.info', + '.intrustacrds.info', + '.lowerate-ard.info', + '.lowpercentageacrd.info', + ), + 'acua at mail.ru' => array( + + // 84.16.249.240(euro.lotgd.pl -> 88.198.6.42), / says 'noy found' + '.dns4babka.info', // by acua at mail.ru + // by webmaster at dns4babka.info + '.credh.cn', + '.fucfv.cn', + '.gdxnk.cn', + '.sqrrt.cn', + '.ywtmd.cn', + '.kncqy.cn', // by webmaster at allmyns.info + + // 84.16.251.222(alinoe.org -> 212.85.96.95 -> v00095.home.net.pl), / says 'noy found' + '.dedka2ns.info', // by acua at mail.ru + // by webmaster at dedka2ns.info + '.ascpo.cn', + '.jgycr.cn', + '.nqdtt.cn', + '.oswde.cn', + '.qeyig.cn', + '.soqsx.cn', + '.ukncd.cn', + '.zijgb.cn', + + // 84.16.255.253(84-16-255-253.internetserviceteam.com), / says 'noy found' + '.dns4dedka.info', // by acua at mail.ru + // by webmaster at dns4dedka.info + '.bcpnb.cn', + '.cfbpr.cn', + '.dnndb.cn', + '.ekwme.cn', + '.iutps.cn', + '.ryftj.cn', + '.vxqcb.cn', + '.zxvlr.cn', // by webmaster at allmyns.info + + '.allmyns.info', // 84.16.226.29(www.billago.de -> 80.244.243.173 -> billago.de) by acua at mail.ru, / forbidden + // by webmaster at allmyns.info + '.degvc.cn', // 84.16.226.216(s3an.ath.cx -- DyDNS) + '.ihpvy.cn', // 84.16.226.28(www.fs-tools.de -> 80.244.243.172 -> fs-tools.de) + '.lbtuo.cn', // 84.16.255.254(84-16-255-254.internetserviceteam.com) + '.liunc.cn', // 84.16.249.241(ip2.frankfurt.mabako.net -> 84.16.234.167 -> frankfurt.mabako.net) + '.rcyqr.cn', // 84.16.226.217(mand.zapto.org -- Non-existent) + '.rekth.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de) + '.riumh.cn', // 84.16.226.28 + '.zbtym.cn', // 84.16.251.219(84-16-251-219.internetserviceteam.com) + '.zjcgx.cn', // 217.20.112.102(217-20-112-102.internetserviceteam.com) + + ), + 'gilvcta sy jilbertsbram.com' => array( + '.dsfljkeilm1.cn', // 206.53.51.126 + '.dsfljkeilm2.cn', // 206.53.51.126 + '.dsfljkeilm3.cn', // IP not allocated now + '.dsfljkeilm4.cn', // IP not allocated now + '.dsfljkeilm5.cn', // IP not allocated now + '.dsfljkeilm6.cn', // IP not allocated now + '.dsfljkeilm7.cn', // IP not allocated now + '.dsfljkeilm8.cn', // IP not allocated now + '.dsfljkeilm9.cn', // IP not allocated now + '.dsfljkeilm10.cn', // IP not allocated now + ), + 'ganzer3 at gmail.com' => array( // by Roman Shteynshlyuger (ganzer3 at gmail.com) + + // 69.64.82.76(*.dedicated.abac.net) + '.bruised-criedit.info', + '.bruised-crtedit.info', + '.bruised-czrd.info', + '.bruisedcreitcard.info', + '.bruisedcreitd.info', + '.cleaningup-cerdic.info', + '.cleanup-crrd.info', + + // 69.64.82.77(*.dedicated.abac.net) + '.bruised-credtid.info', + '.bruisedcriet.info', + '.bruisedredit.info', + '.cleaningupccreditcards.info', + '.cleaningupcedirt.info', + '.cleaningupceidt.info', + '.cleaningupcreait.info', + + // 69.64.82.78(*.dedicated.abac.net) + '.bruised-cridet.info', + '.bruised-drecit.info', + '.bruised-reditcards.info', + '.bruisedcredikt.info', + '.bruisedcredith.info', + '.bruisedcredtid.info', + '.cleanup-criet.info', + '.cleanup-dards.info', + + // 69.64.82.79(*.dedicated.abac.net) + '.bruised-crediotcards.info', + '.bruised-creid.info', + '.cleaningup-ceridt.info', + '.cleaningupcrecit.info', + '.cleanupdredit.info', + ), + '.malwarealarm.com', + // (206.161.201.216 -> 206-161-201-216.pccwglobal.net) + // by Eddie Sachs (hostmaster at isoftpay.com), scaring virus, spyware or something + // NOTE: scanner.malwarealarm.com(206.161.201.212 -> 206-161-201-212.pccwglobal.net) + '.viagrageneric.org', // IP not allocated, ns *.heyhey.info(IP not allocated) + '.viagraorder.org', // IP not allocated, ns *.heyhey.info(IP not allocated) + // C-2: Lonely domains (buddies not found yet) '.0721-4404.com', @@ -4459,8 +4755,6 @@ $blocklist['C'] = array( '.1gb.cc', // by Hakan us (hakanus at mail.com) '.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com) '.0annie.info', - '.3-hosting.net', - '.50webs.com', // by LiquidNet Ltd. (support at propersupport.com), redirect to mpage.jp '.6i6.de', '.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com) '.adult-master-club.com', // by Alehander (mazyrkevich at cosmostv.by) @@ -4478,7 +4772,6 @@ $blocklist['C'] = array( '.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl '.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru '.bestshopfinder.info', - '.bloggerblast.com', // by B. Kadrie (domains at starwhitehosting.com) '.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank '.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com '.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru) @@ -4506,19 +4799,12 @@ $blocklist['C'] = array( '.ffxiforums.net', // by Zhang xiaolong (mail at 33986.com), hidden VBScript '*.filthserver.com', // sales at onlinemarketingservices.biz '.find-stuff.org', // by Alice Freedman (admin at ip-labs.ru), / 404 Not Found - '.findcraft.info', // by Mihelich (mkiyle at gmail.com) '.firstdrugstorezone.info', // by Goose (boris208 at yandex.ru) - '.forum24.se', - '.forumcommunity.net', - '.forumhosting.org', '.free-finding.com', // by Ny hom (nyhom at yahoo.com) '.free-rx.net', // by Neo-x (neo-xxl at yandex.ru), redirect to activefreehost.com '.free-sex-movie-net.info', // by vitas61 at yahoo.com '.freeblog.ru', // by Kondrashov Evgeniy Aleksandrovich (evkon at rol.ru), login form only, ns *.nthost.ru - '.freehost5.com', // 75.126.32.184 - '.freehostpro.com', // 64.22.112.226 - '.freehostia.com', - '.freehostingz.com', // by Marx Lomas (marvellousmarx at hotmail.com), no dns reply + '.freehost5.com', // 75.126.32.184(kosmohost.net), words only '.freeliveringtones.com', // by Silan (lippe1988 at gmail.com) '.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru) '.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com) @@ -4532,6 +4818,7 @@ $blocklist['C'] = array( '.google-pharmacy.com', // by alex (mdisign1997 at yahoo.com), hiding with urlx.org etc '.greatbestwestern.org',// by gao.wungao at gmail.com '.greatsexdate.com', // by Andreas Crablo (crablo at hotmail.com) + '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null '.guild-wars-online.com', // by Fuzhou Tianmeng Touzi Zixun Co.,Ltd (welkin at skyunion.com) '.happyhost.org', // by Paul Zamnov (paul at zamnov.be) '.hloris.com', // by Wilshi Jamil (ixisus at front.ru) @@ -4561,9 +4848,11 @@ $blocklist['C'] = array( '.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com) '.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong '.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm) + '.medicineonlinestore.com', // Alexander Korovin (domains at molddata.md) '.medpharmaworldguide.com', // by Nick Ivchenkov (signmark at gmail.com), / not found '.megvideochatlive.info', // Bad seo '.milfxxxpass.com', // by Morozov Pavlik (rulets at gmail.com) + '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com) '.myfgj.info', // by Filus (softscript at gmail.com) '.mujiki.com', // by Mila Contora (ebumsn at ngs.ru) '.mxsupportmailer.com', @@ -4614,13 +4903,14 @@ $blocklist['C'] = array( '.sslcp.com', // by shufang zhou (info at 6come.com), dns *.hichina.com '.sticy.info', // by Richard D. Mccall (richardmccall at yahoo.com) '.superrwm.info', // by Dark Dux (duxdark at yahoo.com) + '.superverizonringtones.com', // by joshua at list.ru '.thehostcity.com', // Domains by Proxy - '.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com) + '.thetinyurl.com', // by Beth J. Carter (Beth.J.Carter at thetinyurl.com), / is blank '.thetrendy.info', // by Harold (Harold.J.Craft at pookmail.com), / is blank '.theusapills.com', // by Dr. Zarman (contactus at theusapills.com) '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com) '.topmeds10.com', - '*.tv-reklama.info', // by Kozlov Maxim (m_koz at mail.ru) + '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net) '.twabout.com', // by qiu wenbing (qiuwenbing at 126.com), content from l2mpt.net '.uaro.info', // by Neru Pioner (neru at smtp.ru) '.unctad.net', // by gfdogfd at lovespb.com @@ -4641,20 +4931,15 @@ $blocklist['C'] = array( '.wowgoldweb.com', // by lei chen (dreamice at yeah.net), rmt & pl '.wwwna.info', // / 404 Not Found '.xpacificpoker.com', // by Hubert Hoffman (support at xpacificpoker.com) - '.xphost.org', // by alex alex (alrusnac at hotmail.com) '.xamorexxx.net', '.xn--gmqt9gewhdnlyq9c.net', // 122.249.16.133(x016133.ppp.asahi-net.or.jp) by daizinazikanwo yahoo.co.jp '.xsessox.com', + '.xxxmpegs.biz', // 217.11.233.65, redirect to *.malwarealarm.com, / null '.yoi4.net', // by Ryouhei Nakamura (888 at sympathys.com), tell me why so many blogs with popular issues and _diverted design from blog.livedoor.jp_ around here. '.zlocorp.com', // by tonibcrus at hotpop.com, spammed well with "http ://zlocorp.com/" '.zyguo.info', // ns globoxhost.net '.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com) - '.guesttext.info', // 81.0.195.134 by Grace.D.Kibby pookmail.com, / seems null - '.moremu.com', // 205.134.190.12(amateurlog.com) by Magaly Plumley (domains ay moremu.com) - '.tingstock.info', // 209.160.73.65(delta.xocmep.info) "nice day, commander ;)" by Andrey Konkin (konkinnews55 at yahoo.com) - '.truststorepills.com', // 89.188.113.64(allworldteam.com) by Alexey (admin at myweblogs.net) - // C-3: Not classifiable (information wanted) // // Something incoming to pukiwiki related sites @@ -4714,6 +4999,7 @@ $blocklist['E'] = array( '.havads-japan.com', // by Masatoshi '.info-business123.com', // by Fujio '.instant-marketing-club.com', // by Fujio + '.internetmarketinggorinjyu.com', // by Masatoshi '.marketing-force-japan.com', // by Fujio '.masatoshikobayashi.com', // by Fujio '.profitsinstigator.com', // by Masatoshi Kobayashi (akada@e-brainers.com) @@ -4736,7 +5022,9 @@ $blocklist['E'] = array( // 202.228.204.140(server.ultimate-marketing-weapon.com) by Masatoshi Kobayashi (akada at e-brainers.com) // 202.228.204.140 by Masatoshi Kobayashi (domain at e-brainers.com) - '.brainers.ws', // 202.228.204.140 by info at key-systems.net, ns *.ultimate-marketing-weapon.com + // 202.228.204.140 by Naoki Kobayashi (info at bet.co.jp) + '.1sap.com', // by Naoki, ns *.ultimate-marketing-weapon.com + '.brainers.ws', // by info at key-systems.net, ns *.ultimate-marketing-weapon.com '.brainerscode.com', // by akada '.brainerslive.com', // by domain '.brainersreview.com', // by domain @@ -4750,6 +5038,7 @@ $blocklist['E'] = array( '.sppd.co.jp', // 210.136.106.122 by Studio Map Ltd., ns *.sppd.ne.jp, spam ), '.e2996.com', // 202.181.105.241(sv261.lolipop.jp) + 'ezinearticles.com', // 216.235.79.13 by C Knight (opensrs at sparknet.net) '.fx4rich.com', // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com) 'info at kobeweb.jp' => array( '.soholife.jp', // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)