<?php
-// $Id: spam.ini.php,v 1.160 2007/08/20 14:37:42 henoheno Exp $
+// $Id: spam.ini.php,v 1.163 2007/08/25 13:36:28 henoheno Exp $
// Spam-related setting
// NOTE FOR ADMINISTRATORS:
// 'list': Normal list
$blocklist['list'] = array(
- 'A-1' => TRUE,
- //'A-2' => TRUE,
- 'B-1' => TRUE,
- 'B-2' => TRUE,
- 'C' => TRUE,
- //'D' => TRUE,
- 'E' => TRUE,
- 'Z' => TRUE,
+ 'A-1' => TRUE, // General redirection services
+ //'A-2' => TRUE, // Dynamic DNS, Dynamic IP services, ...
+ 'B-1' => TRUE, // Web spaces
+ 'B-2' => TRUE, // Jacked contents, something implanted
+ 'C' => TRUE, // Exclusive spam domains
+ //'D' => TRUE, // "Third party in good faith"s
+ 'E' => TRUE, // Affiliates, Hypes, Catalog retailers, Multi-level marketings, ...
+ 'Z' => TRUE, // Yours
);
'dwarf.name',
'*.eadf.com',
'*.easyurl.net',
+ 'easyurl.jp', // 124.38.169.39(*.ap124.ftth.ucom.ne.jp), e-mail:info at value-domain.com,
+ // says "by ascentnet.co.jp". http://www.ascentnet.co.jp/press/?type=1&press=45
+ // This service seems to be opened at 2007/08/23 with "beta" sign.
+ // easyurl.jp clearly point ascentnet.co.jp's 10 local rules:
+ // "Keep continuing to seek originality and contribute it to local,
+ // get/grow niche brands (in local), believe (local) people knows the answer,
+ // observe (local) rule, create nothing to infringe (local) rule, keep 70% of
+ // engeneers, and ..." http://www.ascentnet.co.jp/about/about_01.html
+ // I'm so much impressed of the situation around this imported one today.
'elfurl.com',
'eny.pl',
'eTechFocus LLC' => array( // by eTechFocus LLC (thomask at etechfocus.com)
'*.zonehere.com',
),
'hotshorturl.com',
+ 'hotwebcomics.com', ///search_redirect.php
'hurl.to',
'*.hux.de',
'*.i89.us',
// fraud."
//
'*.0000host.com', // 68.178.200.154, ns *.3-hosting.net
+ '*.007ihost.com', // 195.242.99.199(s199.softwarelibre.nl)
'*.00bp.com', // 74.86.20.224(layeredpanel.com -> 195.242.99.195) by admin at 1kay.com
'0Catch.com related' => array(
'*.0catch.com', // 209.63.57.4 by Sam Parkinson (sam at 0catch.com), also zerocatch.com
'*.20me.com',
),
'*.100foros.com',
+ '*.1234mb.com', // 74.86.20.227(layeredpanel.com -> 195.242.99.195 -> s195.softwarelibre.nl) by tycho at e-lab.nl
'*.12gbfree.com', // 75.126.176.194 by ashphama at yahoo.com
'20six Weblog Services' => array(
'.20six.nl', // by 20six weblog services (postmaster at 20six.nl)
'*.3-hosting.net',
'*.5gbfree.com', // 75.126.153.58 by rob at roblist.co.uk
'*.789mb.com', // 75.126.197.240(545mb.com -> 66.45.238.60, 66.45.238.61) by Nicholas Long (nicolas.g.long at gmail.com)
+ '*.8000web.com', // 75.126.189.45
'*.9999mb.com', // 75.126.214.232 by allan Jerman (prodigy-airsoft at cox.net)
'aeonity.com', // by Emocium Solutions (creativenospam at gmail.com)
'*.aimoo.com',
// Rough but works
'Apple.com' => array('idisk.mac.com'),
'*.askfaq.org',
- '*.atfreeforum.com',
+ '.atfreeforum.com', // 216.224.120.14(kelsey.mykelsey1.com -> 216.224.120.10)
'*.atwiki.com', // by Masakazu Ohno (s071011 at sys.wakayama-u.ac.jp)
'*.asphost4free.com',
'basenow.com',
'*.epinoy.com',
'*.ez-sites.ws',
'*.ezbbforum.com', // 72.52.134.135 by blogmaster2003 at gmail.com
+ '*.fathippohosting.com', // 208.101.3.192
'FC2.com' => array(
'Blogs' => '#^(?:.+\.)?blog[0-9]+\.fc2\.com$#', // Blogs, 'FOOBAR.blogN.fc2.com' and 'blogN.fc2.com/FOOBAR'
// Many traps available:
),
'gb-hoster.de',
'*.genblogger.com',
- 'geocities.com',
'GetBetterHosting.com' => array(
'*.30mb.com', // 207.210.82.74(cpanel.90megs.com) by 30MB Online (63681 at whois.gkg.net), introduced as one alternative of 90megs.com
'*.90megs.com', // 207.210.82.75 by Get Better Hosting (admin at getbetterhosting.com)
'forums.hspn.com',
'*.httpsuites.com',
'*.hut2.ru',
+ 'ibfree.org', // 208.101.45.88
'IC.cz' => array(
'*.ezin.cz', // internetcentrum at gmail.com, ns ignum.com, ignum.cz
'*.hu.cz', // internetcentrum at gmail.com
'*.vidiac.com',
'Voila.fr' => array('.site.voila.fr'),
'volny.cz',
+ 'voy.com',
'*.welover.org',
'Web1000.com' => array( // http://www.web1000.com/register_new2.php
'*.fasthost.tv',
'.freeblogs.xp.tl',
'*.xphost.org', // by alex alex (alrusnac at hotmail.com)
'*.ya.com', // 'geo.ya.com', 'blogs.ya.com', 'humano.ya.com', 'audio.ya.com'...
+ 'Yahoo.com' => array(
+ 'geocities.com',
+ ),
'YANDEX, LLC.' => array( // noc at yandex.net
'*.narod.ru',
'ya.ru',
// by Kuzma V Safonov (admin at irtes.ru)
// by Petrov Vladimir (vvm_kz at rambler.ru)
// by LAURI FUNK (vvm_kz at rambler.ru)
+
+ // 64.92.162.210(*.static.reverse.ltdomains.com)
'.abrek.info', // by Petrov
- '.accommodationwiltshire.com', // by Petrov
'.allsexonline.info', // by Varsylenko
- '.bequeous.info', // by Davi
'.d1rnow.info', // by Petrov
- '.doxer.info', // by Petrov
- '.freeforworld.info', // by Varsylenko
- '.gitsite.info', // by Petrov
- '.goodworksite.info', // by Varsylenko
- '.michost.info', // by LAURI
+ '.doxer.info', // Petrov
+ '.freeforworld.info', // Varsylenko
+ '.goodworksite.info', // Varsylenko
'.onall.info', // by Varsylenko
- '.organiq.info', // by Petrov
- '.parther.info', // by LAURI
'.powersiteonline.info', // by Varsylenko
'.rentmysite.info', // by Varsylenko
- '.levines.info', // by Petrov
- '.modacha.info', // by LAURI
- '.mp3vault.info', // by Petrov
- '.sernost.info', // by Petrov
'.sexdrink.info', // by Petrov
- '.sexvideosite.info', // by Petrov
'.siteszone.info', // by Varsylenko
'.sfup.info', // by Petrov
- '.sopius.info', // by Kuzma
- '.sovidopad.info', // by Kuzma
'.superfreedownload.info', // by Varsylenko
'.superneeded.info', // by Varsylenko
'.srup.info', // by Petrov
+
+ // 66.235.185.143(*.svabuse.info)
+ '.accommodationwiltshire.com', // by Petrov
+ '.levines.info', // by Petrov
+ '.sernost.info', // by Petrov
+ '.sexvideosite.info', // by Petrov
'.vvsag.info', // by Petrov
- '.yerap.info', // by Kuzma
+
+ // 81.0.195.134
+ '.michost.info', // by LAURI
+ '.parther.info', // by LAURI
+
+ // 88.214.202.100
+ '.gitsite.info', // by Petrov
+ '.organiq.info', // by Petrov
'.yoursitedh.info', // by Petrov
+
+ // 217.11.233.58 by Petrov
+ '.mp3vault.info',
+
+ // DNS time out or failed
+ '.bequeous.info', // by Davi
+ '.sopius.info', // by Kuzma
+ '.sovidopad.info', // by Kuzma
+ '.yerap.info', // by Kuzma
),
'zhu1313 at mail.ru' => array( // by Andrey Zhurikov
'.flywebs.com',
// 50webs.com // 64.72.112.10
// dns2.50webs.com // 64.72.112.11
- '*.freehostia.com', // 64.72.112.12, many related hosts surrounded
+ '*.freehostia.com', // 64.72.112.12, many related hosts surrounded, http://freehostia.com/about_us.html says "... partnership with the UK-based LiquidNet Ltd., and ..."
// dns2.freehostia.com // 64.72.112.13
// serv3.freehostia.com // 64.72.112.14
// hex12.freehostia.com // 64.72.112.19, 64.72.112.20
'.search4freez.info',
'.yasech.info',
),
- 'ice--man at mail.ru' => array( // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
+ 'ice--man at mail.ru' => array(
+ // 74.50.97.198 by andrey, the same approach and timing of clickx at bk.ru
'.bestcreola.com',
'.crekatierra.com',
'.creolafire.com',
'.thekeyse.com',
'.viewgreat.com',
'.yourcreola.com',
+
+ // 69.46.23.48
+ '.crekadirecto.com',
+ '.getflashsite.com',
+ '.sucreka.com',
),
'nijeoi at hotmai.com' => array(
// 66.232.126.74 by Nicol Makerson, the same approach and timing _and IP_ of clickx at bk.ru
'.hepyt.com',
'.howoj.com',
'.jywaz.com',
+ '.ka4search.info', // Found at faweji.cn/ and jytame.cn/, / forbidden
'.kyheq.com',
'.kyzad.com',
'.qicad.com',
'.xiuky.cn', // 84.16.251.222(*snip*)
'.xrqcd.cn', // 89.149.196.19(www.kosmetik-eshop.de -> 80.244.243.181 -> ip1.rumsoft-webhosting.de)
+ // by la at dns4dedka.info
+ '.aeyzf.cn', // 84.16.251.218(*snip*)
+ '.blvqo.cn', // 84.16.249.241(*snip*), Expiration Date: 2008-08-16
+ '.bgslu.cn', // 89.149.228.163(*snip*)
+ '.dxouw.cn', // 84.16.255.253(*snip*)
+ '.ecsbe.cn', // 84.16.251.218(*snip*)
+ '.eothy.cn', // 84.16.249.241(*snip*)
+ '.epocy.cn', // 84.16.251.220(*.internetserviceteam.com)
+ '.ewvjw.cn', // 89.149.196.72(*snip*)
+ '.faacz.cn', // 84.16.251.222(*snip*)
+ '.filun.cn', // 89.149.196.72(*snip*)
+ '.fzdpk.cn', // 84.16.249.239(*snip*)
+ '.hatyg.cn', // 84.16.251.223(*snip*)
+ '.hmtqn.cn', // 84.16.249.240(*snip*)
+ '.ibfte.cn', // 89.149.196.19(*snip*)
+ '.jcaym.cn', // 84.16.249.240(*snip*)
+ '.iqzaw.cn', // 84.16.255.254(*snip*)
+ '.jclsf.cn', // 84.16.249.240(*snip*)
+ '.jefdh.cn', // 84.16.249.240(*snip*)
+ '.kchjh.cn', // 84.16.251.219(*snip*)
+ '.krumo.cn', // 84.16.226.217(*snip*)
+ '.lbava.cn', // 217.20.112.102(*snip*)
+ '.mqrtw.cn', // 84.16.226.29(*snip*)
+ '.njpgv.cn', // 84.16.251.219(*snip*)
+ '.npovm.cn', // 84.16.226.28(*snip*)
+ '.nyobt.cn', // 89.149.196.19(*snip*)
+ '.ovxxt.cn', // 84.16.251.223(*snip*)
+ '.owhwz.cn', // 89.149.228.163(*snip*)
+ '.ozjyi.cn', // 84.16.249.241(*snip*)
+ '.pfnzj.cn', // 84.16.226.217(*snip*)
+ '.pixvf.cn', // 84.16.255.254(*snip*)
+ '.qydph.cn', // 89.149.228.163(*snip*)
+ '.rxens.cn', // 89.149.196.72(*snip*)
+ '.sojbp.cn', // 84.16.249.239(*snip*)
+ '.srths.cn', // 84.16.251.222(*snip*)
+ '.tdytc.cn', // 84.16.255.254(*snip*)
+ '.unquz.cn', // 84.16.251.223(*snip*)
+ '.uwcns.cn', // 89.149.196.19(*snip*)
+ '.vcbdm.cn', // 84.16.251.220(*snip*)
+ '.wnmat.cn', // 84.16.255.253(*snip*)
+ '.wttmr.cn', // 84.16.226.29(*snip*)
+ '.xpwib.cn', // 84.16.251.220(*snip*)
+ '.yrogt.cn', // 84.16.249.239(*snip*)
+
// by le at dns4dedka.info
- '.goslw.cn', // 84.16.251.220(*.internetserviceteam.com)
+ '.goslw.cn', // 84.16.251.220(*snip*)
+ '.hqbmh.cn', // 84.16.251.223(*snip*)
'.iewik.cn', // 84.16.255.254(*snip*)
'.jnkeh.cn', // 89.149.228.163(*snip*)
+ '.pifyp.cn', // 89.149.228.163(*snip*)
+ '.nohyl.cn', // 89.149.196.72(*snip*)
+ '.nvzvx.cn', // 84.16.255.254(*snip*)
+ '.uchoe.cn', // 84.16.249.239(*snip*)
+ '.ujoyf.cn', // 84.16.251.218(*snip*)
+ '.ulfqh.cn', // 89.149.196.19(*snip*)
'.vxugv.cn', // 84.16.251.223(*snip*)
+
+ '.dbgti.cn', // 84.16.249.240(*snip*)
+ '.oelmv.cn', // 84.16.226.28(*snip*)
+ '.qniww.cn', // 84.16.251.218(*snip*)
+ '.vtvyq.cn', // 84.16.251.219(*snip*)
+ '.zqonm.cn', // 84.16.249.241(*snip*)
'.allmyns.info', // 84.16.226.29 by acua at mail.ru, / forbidden
// by webmaster at allmyns.info
'.autotowncar.cn', // 69.73.146.184
'.badgirlhome.cn', // 69.73.146.186
),
+ 'Wmp.co.jp' => array(
+ // 219.94.134.208, ns *.dns.ne.jp, adult
+ '.celebe.net', // by nic-staff at sakura.ad.jp(using sakura.ne.jp), said: by "wmp.co.jp"
+ '.kousyunyu.com', // Admin/Billing/Tech Email: * at wmp.co.jp
+ // online-support.jp // 202.222.19.81(sv70.lolipop.jp), / blank
+ ),
+ 'Macherie.tv' => array(
+ '.macherie.tv', // 124.32.230.31, pr to himehime.com
+ '.himehime.com', // 124.32.230.94(recruit.macherie.tv)
+ '.livechatladyjob.com', // 124.32.230.94 by Hajime Kawagoe (sawada at innetwork.jp), recruiting site for macherie.tv
+ ),
+ 'admin at fr4f3ds.info' => array( // 217.11.233.54, / forbidden
+ '.yemine.info',
+ '.fr4f3ds.info',
+ ),
+ '66.232.112.175' => array(
+ '.catybe.cn', // by abuse-here at inbox.ru
+ '.faweji.cn', // by entretov-86 at ftunez.org
+ '.jytame.cn', // by abuse-here at inbox.ru
+ '.wygete.cn', // by abuse-here at inbox.ru
+ ),
// C-2: Lonely domains (buddies not found yet)
'.0721-4404.com',
'.masserch.info', // 69.46.18.2(hv113.steephost.com -> 72.232.191.50 -> 72.232.191.50.steephost.com) "Free Web Hosting" by sqr at bk.ru, spam
'.viagrabuycheap.info', // 75.126.129.222(greatpool.biz -> 72.232.198.234 -> brasilrok.com.br -> ...), ns *.advernsserver.com
+ '.chatwalker.com', // 124.32.230.65
+ '.angel-live.com', // 61.211.231.181, ns *.netassist.ne.jp, pr to himehime.com
+ '.angelkiss.jp', // 59.106.45.50, pr to himehime.com and chatwalker.com
+
+ '.mncxvsm.info', // 217.11.233.105, / blank
+
// C-3: Not classifiable (information wanted)
//
// Something incoming to pukiwiki related sites
$blocklist['D'] = array(
// D: Sample setting of
- // "third party in good faith"s
+ // "Third party in good faith"s
//
// Hosts shown inside of the implanted contents,
// not used via spam, but maybe useful to detect these contents
$blocklist['E'] = array(
// E: Sample setting of
- // Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers, Ads
+ // Promoters
+ // (Affiliates, Hypes, Catalog retailers, Multi-level marketings, Resellers,
+ // Ads, Business promotions)
+ //
+ // They often promotes near you. They may promote each other by articles, links, tools
'15-Mail.com related' => array(
'.15-mail.com', // 202.218.109.45(*.netassist.jp) by yukiyo yamamoto (sunkusu5268 at m4.ktplan.ne.jp)
'.e2996.com', // 202.181.105.241(sv261.lolipop.jp)
'ezinearticles.com', // 216.235.79.13 by C Knight (opensrs at sparknet.net)
'.fx4rich.com', // 219.94.128.161(www921.sakura.ne.jp) by Yuji Nakano (info at will76.com)
+ 'Hokuken.com' => array( // Bisuness promotion, affiliate about QHM
+ '.hokuken.com', // 210.188.216.191(sv399.lolipop.jp) by Takahiro Kameda (registrant email admin at muumuu-domain.com)
+ '.1st-easy-hp.com', // 210.188.201.45(sv84.xserver.jp) by takahiro kameda (customer at hokuken.com)
+ '.open-qhm.net', // 125.53.25.8(s297.xrea.com), was 202.222.31.223(sv183.lolipop.jp) "Open QHM by hokuken"
+
+ // Redirects and affiliates:
+ // (They all use "paperboy and co." related services, muumuu-domain.com and lolipop.jp)
+ // yousense.info/fwd/mama1 redirects to www.infocart.jp/af.php?af=520517&url=www.1st-easy-hp.com/index.php?iInfoCart&item=XXXX redirects to www.1st-easy-hp.com/index.php?iInfoCart
+ // info.mizo3.com/fwd/qhm redirects to (*snip*)af=moukaru88y(*snip*)
+ // sanpei.vc/fwd/startkit redirects to (*snip*)af=katosanpe(*snip*)
+ // ysa-techno.com/fwd/homepagesakusei redirects to (*snip*)af=yukko777(*snip*)
+ // qhm.kikikan.com points several links to (*snip*)af=kikikan(*snip*)
+ // www.writeonjp.com/puki points several links to (*snip*)af=notes(*snip*)
+ // ...
+
+ // Other suggestions:
+ // info.mizo3.com says: "Owners who bought QHM from MY site..."
+
+ // Blog posting at the same time
+ // 2007/06/13 hidenonikki.seesaa.net/archives/20070613-1.html
+ // 2007/06/13 e123.info/archives/76
+ // 2007/06/14 bobbin1950.seesaa.net/archives/20070614-1.html
+ // 2007/06/25 ichibankantan.seesaa.net/article/52650651.html
+ // 2007/06/26 www.neko01.com/pc/blog/2007/06/open_quick_homepage_maker_1.php
+ ),
'info at kobeweb.jp' => array(
'.soholife.jp', // 211.125.65.203 by Takashige Tabuchi (info at kobeweb.jp)
'.kobeweb.jp', // 59.106.13.51(www421.sakura.ne.jp)
'.sloters.tv', // 211.125.65.203 by Takashige Tabuchi (t-2 at white.interq.or.jp)
),
'.info-affiliate.net', // 219.94.148.8(sv41.chicappa.jp)
+ 'Infocart.jp' => array( // by wai at infocart.jp
+ //inetnum: 60.32.154.168 - 60.32.154.175
+ //descr: INFOMAG (Shimooka,Yasuyoshi)
+ '.infocart.jp', // 60.32.154.171, by Hawaiikigyo, affiliate
+
+ //inetnum: 60.32.154.176 - 60.32.154.183
+ // descr: HAWAII KIGYO.COM (Shimooka,Yasuyoshi)
+ '.infomag.jp', // 60.32.154.179, by Infocart, business promotion
+ ),
'.infostore.jp', // 216.255.235.45, ns *.estore.co.jp
'JunSuzuki.com' => array( // e-brainers.com related
'.junsuzuki.com', // 218.216.67.43(s92.xrea.com) by Jun Suzuki (jun_suzuki at compus.net)