<?php
-// $Id: spam.ini.php,v 1.184 2007/12/02 12:44:46 henoheno Exp $
+// $Id: spam.ini.php,v 1.192 2008/07/19 01:04:26 henoheno Exp $
// Spam-related setting
// NOTE FOR ADMINISTRATORS:
// smcurl.com
// "Idiots were using smcURL to shrink URLs and
// send them out via spam."
+ // symy.jp
+ // "One or more users are using our URL redirect
+ // service for spam/botnet.
+ // So we closed this service."
// tinyclick.com
// "...stop offering it's free services because
// too many people were taking advantage of it"
'*.ovp.pl',
'*.6-6-6.pl',
),
+ 'babelfish.altavista.com', ///babelfish/trurl_pagecontent
'amoo.org',
'web.archive.org', ///web/2
'Arzy.net' => array( // "(c) 2007 www.arzy.net", by urladmin at zvxr.com, DNS arzy.net
'athomebiz.com',
'aukcje1.pl',
'beam.to',
+ '*.bebo.com',
'beermapping.com',
'besturl.in',
'bhomiyo.com', ///en.xliterate/ 64.209.134.9(web137.discountasp.net) by piyush at arborindia.com
'biglnk.com',
'bingr.com',
+ 'bit.ly',
'bittyurl.com',
'*.bizz.cc',
'*.blo.pl',
'iat.net', // 74.208.58.130 by Tony Carter
'ibm.com', ///links (Correct it)
'*.iceglow.com',
+ 'internetadresi.com' => array (
+ 'rxbuycheap.com',
+ 'rxcheapwestern.com',
+ ),
'go.id-tv.info', // 77.232.68.138(77-232-68-138.static.servage.net) by Max Million (max at id-tv.info)
'Ideas para Nuevos Mercados SL' => array(
// NOTE: 'i4nm.com' by 'Ideas para Nuevos Mercados SL' (i4nm at i4nm.com)
'*.site.tc',
'*.societe.st',
),
+ 'qqa.jp',
'qrl.jp',
'qurl.net',
'qwer.org',
'rio.st',
'rlink.org',
'*.rmcinfo.fr',
+ 'roo.to', // Seems closed, says "bye-bye"
'rubyurl.com',
'*.runboard.com',
'runurl.com',
'SURL.DK' => array('surl.dk'), // main page is: s-url.dk
'surl.se',
'surl.ws',
- 'symy.jp',
'tdurl.com',
'tighturl.com',
'tiniuri.com',
'*.toolbot.com',
'*.torontonian.com',
'trimurl.com',
- 'ttu.cc',
+ //'ttu.cc', // Seems closed
'turl.jp',
'*.tz4.com',
'U.TO' => array( // ns *.1004web.com, 1004web.com is owned by Moon Jae Bark (utomaster at gmail.com) = u.to master
'*.ever.to',
'*.mini.to',
),
+ 'u-go.to',
'uchinoko.in',
'Ulimit.com' => array(
'*.be.tf',
'*.unixlover.com',
'*.zik.mu',
),
+ 'urltea.com',
'*.uni.cc',
'UNONIC.com' => array(
'*.at.tf', // AlpenNIC
$blocklist['B-1'] = array(
- // B-1: Web N.M spaces (N > 0, M > 0)
+ // B-1: Web N.M spaces (N > 0, M >= 0)
//
// Messages from forerunners:
// activefreehost.com
'*.ekiwi.de',
'*.eamped.com', // Admin by Joe Hayes (joe_h_31028 at yahoo.com)
'.easyfreeforum.com', // by XT Store Sas, Luca Lo Bascio (marketing at atomicshop.it)
+ '*.easyjournal.com',
'*.ebloggy.com',
'enunblog.com',
'*.epinoy.com',
'*.googlegroups.com', ///web/
'*.googlepages.com',
'groups-beta.google.com',
+ 'groups.google.*', ///group/ Seems widely distributed
+ //'groups.google.ca', 'groups.google.com', 'groups.google.co.uk',
+ //'groups.google.de', 'groups.google.es', 'groups.google.fr',
+ //'groups.google.it', ...
),
'guestbook.at',
'club.giovani.it',
'*.joolo.com',
'*.journalscape.com',
'*.justfree.com',
- '*.blog.kataweb.it',
+ 'kataweb.it' => array( // kata-redir.kataweb.it
+ '*.blog.kataweb.it',
+ '*.repubblica.it',
+ ),
'*.kaixo.com', // blogs.kaixo.com, blogak.kaixo.com
'*.kokoom.com',
'koolpages.com',
'*.kostenlose-foren.org',
'*.ksiegagosci.info',
+ 'LaCoctelera.com' => array(
+ 'lacoctelera.com', // by alberto at the-cocktail.com
+ 'espacioblog.com', // by dominios at ferca.com
+ ),
'Lide.cz' => array(
'*.lide.cz',
'*.sblog.cz',
'.aim.to',
'.djmp.jp',
'.nihongourl.nu',
+ '.url.sh', // Says SmarTrans
'.urljp.com',
'.www1.to',
'.www2.to',
'alwanforthearts.org',
'*.anchor.net.au',
'anewme.org',
+ 'arcrockett.com', ///golf/excel/
'arisedesign.net', //Portfolio/d981/
'internetyfamilia.asturiastelecentros.com',
+ 'ballblair.com', ///images/thumbs/
'Ball State University' => array('web.bsu.edu'),
'btofaq.net', ///v3/forum
'blepharospasm.org',
+ 'brettforrest.com', // 72.10.43.226 by brettforrest at hotmail.com, ns *.mediatemple.net
'nyweb.bowlnfun.dk',
'*.buzznet.com',
'Carroll College' => array(
'Case Western Reserve University' => array('case.edu'),
'ceval.de',
'chaco.gov.ar',
+ 'chasingrainbowsaustralia.com', ///geometry/
'codespeak.net',
'Colorado School of Mines' => array('ticc.mines.edu'),
'*.colourware.co.uk',
'forums.drumcore.com',
'dundeeunited.org',
'energyglass.com.ua',
+ 'equitas.com.au', ///images/mim3/, no index.html
'exclusivehotels.com',
'info.ems-rfid.com',
+ 'fairyfunkyard.com', ///images_files/files/
'farrowhosting.com', // by Paul Farrow (postmaster at farrowcomputing.com)
'fbwloc.com',
'.fhmcsa.org.au',
'ryanclark.org',
'*.reallifelog.com',
'rkphunt.com',
+ 'rso-csp.org', ///bulletins/
'.saasmar.ru', // Jacked. iframe to banep.info on root, etc
'sapphireblue.com',
'saskchamber.com',
'.xthost.info', // by Michael Renz (dhost at mykuhl.de)
'Yahoo.com' => array(
'blog.360.yahoo.com',
- '*.groups.yahoo.com'
+ '*.groups.yahoo.com', ///group/ * = es, finance, fr, games, lauch, ...
),
'yasushi.site.ne.jp', // One of mixedmedia.net'
'youthpeer.org',
'aakin at yandex.ru' => array(
// 89.149.206.225(*.internetserviceteam.com) by Baer
'.entirestar.com',
+ '.joppperl.info',
+ '.onlinedrugsdirect.com',
+ '.pilkazen.info',
'.superbuycheap.com',
+ '.supersmartdrugs.com',
+ '.thecheappillspharmacy.com',
'.topdircet.com',
),
'newblog9 at gmail.com' => array( // by jiuhatu kou
// 209.67.218.106(*.static.reverse.ltdomains.com) by partner at pornography-world.com, ns *.peraonline.info
'.new-greece-travel.com',
'.peraonline.info',
+
+ '.barkman.cn',
),
'aofa at vip.163.com' => array(
'.pharmacyonlinenet.com', // 216.195.51.59, hidden JavaScript
'.ringtonecooler.com', // 217.11.233.34
),
- 'dfym at dfym.cn' => array( // by chen jinian (dfym at dfym.cn)
- // 220.166.64.44
+ 'dfym at dfym.cn' => array(
+ // ANI, JavaScript, iframe
+
+ // 220.166.64.44 by chen jinian (dfym at dfym.cn)
'.okwit.com',
'.sakerver.com',
'.motewiki.net',
- '.8568985.com', // 61.139.126.10 ns *.myhostadmin.net
-
- // 61.139.126.47, ns *.myhostadmin.net
+ '.caremoon.net', // 221.10.254.63 by abc00623 at 163.com, Admin by dfym, ns *.myhostadmin.net
+
+ '.8568985.com', // 61.139.126.10 by liaojiaying88 at sina.com, Admin by dfym, ns *.myhostadmin.net
+
+ // 61.139.126.47, by guoyongdan at 126.com, Tech by dfym, ns *.myhostadmin.net
+ '.bbtv-chat.com',
+ '.ketubatle.com',
'.playonlanei.com',
'.rmtfcne.com',
+
),
'mkiyle at gmail.com' => array( // by Mihelich (mkiyle at gmail.com)
'.findcraft.info', // 209.8.28.11(209-8-28-11.pccwglobal.net)
'.tonoscelular.info',
'.tonosmotorola.info',
),
- '89.149.208.23' => array(
+ 'Anderson at extra.by' => array(
+ // Encoded JavaScript
+
+ // 84.16.235.84(ns2.rrbone-dns.net -> non-existent) ns *.5upp.info
+ '.4cat.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6dir.info',
+ '.8dir.info',
+ '.9dir.info',
+ '.2pro.info',
+ '.5pro.info', // by Anderson at extra.by, ns *.9upp.info
+ '.6pro.info',
+ '.7pro.info',
+ '.8pro.info',
+ '.9pro.info',
+ '.5sms.info',
+ '.6sms.info',
+ '.8sms.info',
+ '.9sms.info',
+ '.1upp.info',
+ '.2upp.info',
+ '.3upp.info',
+ '.4upp.info',
+ '.5upp.info',
+ '.6upp.info',
+ '.7upp.info',
+ '.8upp.info',
+ '.9upp.info', // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info
+ '.2vip.info', // by Anderson at extra.by
+ '.4vip.info',
+ '.5vip.info',
+ '.6vip.info',
+ '.7vip.info',
+ '.8vip.info', // ns *.9upp.info
+ '.9vip.info',
+
// 89.149.208.23(*.internetserviceteam.com) by evdesign at gmail.com, ns *.9upp.info
'.w3rar.info',
'.w3sex.info',
'.w3zip.info',
'.w3in.info',
'.w3out.info',
-
- // 89.149.208.23(*.internetserviceteam.com) by Anderson at extra.by, ns *.9upp.info, encoded JavaScript
- '.2vip.info',
- '.4cat.info',
- '.8vip.info',
- '.9upp.info',
),
'zorkin87 at mail.ru' => array(
// 66.232.112.242(hv78.steephost.com -> 72.232.191.50 -> *.steephost.com)
'.seoblack.net', // 216.195.33.112(non-exsistent)
'.seoblack.biz', // 216.195.33.113(non-exsistent)
),
+ 'john at hellomyns.info' => array(
+ '.cuhdw.cn', // 217.20.113.27, / nothing
+ '.byouz.cn', // 89.149.247.24, / nothing
+ '.idghc.cn',
+ '.inxrj.cn',
+ '.jqzdf.cn',
+ '.vsxej.cn',
+ '.wkgnr.cn',
+ ),
+ '.CN spam payload' => array(
+ '.i3sa.cn', // by varra6yu4lt8607 at yahoo.com
+ '.bjlzhh.cn', // 210.51.162.236(non-existent) by bjlzhh at 163.com
+ '.iactive.com.cn', // 60.28.204.205(non-existent) by buggd at 263.net
+ '.njss.com.cn', // 219.142.175.25(mail.codeprof.com) by admin at yywt.com
+ '.qimo.com.cn', // 219.235.228.55(non-existent) by baojieshuma at 163.com
+ '.wzhj.com.cn', // 218.244.136.78 by nemesisxue at yahoo.com.cn
+ '.ytbaixin.com.cn', // 210.22.13.42(sym.gdsz.cncnet.net) by ytwqg at 163.com
+ '.tj-008.cn', // 222.35.3.90(non-existent) by dinmo.net at gmail.com
+ '.xglzl.cn', // 60.215.129.74(non-existent) by 148044648 at 163.com
+ '.xixii.cn', // 218.206.72.210(non-existent) by chenzhen8168 at yahoo.com.cn
+ ),
+ 'Time2ns.info' => array(
+ // time2ns.info(84.16.226.58 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info(84.16.226.58)
+ '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
+ '.uxmrscgdi.cn', // 89.149.247.23(*.internetserviceteam.com) by Bmurphy at itsmyns.info
+ '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info, / not found
+ ),
+ 'Ilovemyns.info' => array(
+ // ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com), "Fedora Core Test Page" says this is private
+ '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info
+ ),
+ 'Freehostdns.info' => array(
+ // freehostdns.info(217.20.112.24 -> neviem.kto.sk), "Fedora Core Test Page" says this is private
+ '.qyxswynd.cn', // 89.149.247.26(*.internetserviceteam.com) by margarita at freehostdns.info
+ '.ugivorm.cn', // 217.20.127.219(*.internetserviceteam.com) by Chos at freehostdns.info
+ ),
+ 'Newns4me.info' => array(
+ // newns4me.info(217.20.127.231 -> pls.dont.eat.shit.la), "Fedora Core Test Page" says not public
+ '.lxwxjzpiy.cn', // 217.20.113.27(*.internetserviceteam.com) by Alexan at newns4me.info
+ ),
// C-2: Lonely domains (buddies not found yet)
'.0721-4404.com',
'.1gb.in', // by Sergius Mixman (lancelot.denis at gmail.com)
'.0annie.info',
'.6i6.de',
+ '.77toperrwuter1.info', // by Roman
'.99-idea.com', // 202.44.54.48(*.worldinternetworkcorporation.com) by mistercolor at gmail.com, encoded JavaScript
'.angioco.com', // 62.37.112.100, gamble
'.advancediet.com', // by Shonta Mojica (hostadmin at advancediet.com)
'.auto-car-cheap.org',
'.banep.info', // by Mihailov Dmitriy (marokogadro at yahoo.com), iframe to this site
'.baurish.info',
+ '.bernardtomic21.info', // by filboj at hotmail.com
'.bestop.name',
'.betmmo.com', // 63.223.98.182 by Huang Qiang (liuxing-wushi at hotmail.com), pl
'.bestrademark.info', // by victoria (niko16d at yahoo.com), redirect to majordomo.ru
'.bestshopfinder.info',
'.blogest.org', // 203.116.63.68 by Bobby.R.Kightlinger at pookmail.com, / seems blank
'.bookblogsite.org', // 217.11.233.58 by Eugene.E.Mather at mailinator.com
+ '.brisbanedecking.com', // 61.14.187.244(orion.websiteactive.com) by jgstubb at bigpond.net.au, / nothing
'.businessplace.biz', // by Grenchenko Ivan Petrovich (eurogogi at yandex.ru)
+ '.buyshaliflute.com', // 70.84.133.34(epsilon.websiteactive.com) by bigwave3000 at ozemail.com.au
'.capital2u.info', // by Delbert.A.Henry at dodgeit.com
'.casa-olympus.com', // "UcoZ WEB-SERVICES"
+ '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
'.catkittenmagazines.org', // 87.118.97.117
+ '.cdmsolutionsinc.com', // 206.123.100.160 by rpeterson at ricochet.com
'.chatwalker.com', // 124.32.230.65
'.cosamoza.com', // 216.195.51.62 by travelwins at yahoo.com
'.covertarena.co.uk', // by Wayne Huxtable
'.d999.info', // by Peter Vayner (peter.vayner at inbox.ru)
+ '.dance-ithaca.com', // 203.191.238.22(non-existent) by iichiba at hotmail.com, finance
'.dinmo.cn', // 218.30.96.149 by dinso at 163.com, seo etc. //'.wow-gold.dinmo.cn', // 125.65.76.59, pl
'.dinmoseo.com', // 210.51.168.102(winp2-web-g02.xinnetdns.com) by jianmin911 at 126.com, NS *.xinnetdns.com, seo
'.discoverproducts.info',// 216.195.58.37(non-existent) by snarku at gmail.com
'.dollar4u.info', // by Carla (Carla.J.Merritt at mytrashmail.com), / is blank
'.drug-shop.us', // by Alexandr (matrixpro at mail.ru)
'.drugs-usa.info', // by Edward SanFilippo (Edward.SanFilippo at gmail.com), redirect to activefreehost.com
+ '.dssoaps.com', // 67.15.104.24(pluto.websiteactive.com) by donnabl at iprimus.com.au, encoded JavaScript
'.easypharmsite.com', // 75.126.129.229(greatpool.biz => 72.232.198.234 => ) by andrew at pharmacy-inet.com
'.easyshopusa.com', // by riter (riter at nm.ru)
'.edjuego.com', // 85.92.70.253(non-existent), gamble
'.freehost5.com', // 75.126.32.184(kosmohost.net), words only
'.freeliveringtones.com', // by Silan (lippe1988 at gmail.com)
'.freemobilephonesworld.info', // by andresid (andresid1 at yandex.ru)
+ '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info(217.20.113.79)
'.game4enjoy.net', // by huang jinglong (fenlin231 at sina.com)
'.game4egold.com', // by Filus Saifullin (ebay at soft-script.com)
'.goldcoastonlinetutoring.com', // by Robert Tanenbaum (buildbt at lycos.com)
'.hostzerocost.com', // server failed, by Gokhan Yildirim (gokhany at gmail.com)
'.iinaa.net', // domain at ml.ninja.co.jp, ns *.shinobi.jp
'.incbuy.info', // by Diego T. Murphy (Diego.T.Murphy at incbuy.info)
+ '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz
'.infradoc.com',
'.investorvillage.com', // by natalija puchkova (internet at internet.lv)
'.ismarket.com', // Google-hiding. intercage.com related IP
'.italy-search.org', // by Alex Yablin (zaharov-alex at yandex.ru)
'.itsexosit.net',
'.itxxxit.net',
+ '.hostsy.us', // 217.11.233.21 by Julian.L.Harrington at dodgit.com, / empty, redirection
'.jimmys21.com', // by Klen Kudryavii (telvid at shaw.ca)
'.jimka-mmsa.com', // by Alex Covax (c0vax at mail.ru), seems not used yet
'.joynu.com', // by lei wang (93065 at qq.com), hidden JavaScript
+ '.jsyuanyang.com', // 58.211.0.23(non-existing)
'.karasikov.net', // 217.107.217.7(server3.jino.ru -> 217.107.217.17) by pashkanet at list.ru, encoded JavaScript
'.kingtools.de',
'.kymon.org', // by Albert Poire (isupport at yahoo.com), / Forbidden, 70.87.62.252
'.lightyearmedia.com', // 216.104.33.66(esc91.midphase.com) by techsupport at midphase.com, encoded JavaScript
'.link-keeper.net', // 210.172.108.236 (257.xrea.com)
'.ls.la', // by Milton McLellan (McLellanMilton at yahoo.com)
+ '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
'.mamaha.info', // by Alex Klimovsky (paganec at gmail.com), seems now constructiong
'.manseekingwomanx.com',// by Bill Peterson (coccooc at fastmail.fm)
'.mdjadozone.org', // 64.34.124.103(non-existent) by info at infoconceptlc.com, / blank
'.rigame.info', // by debra_jordan07 at yahoo.com
'.rmt-trade.com', // by wang chun (dlxykj at 126.com), rmt
'.roin.info', // by Evgenius (roinse at yandex.ru)
+ '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
+ '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
'.save-darina.org', // 85.14.36.36 by Plamen Petrov (plamen5rov at yahoo.com)
+ '.search99top.info', // 85.255.118.236 / not found, ns *.f01137d.com, redirect to abosearch.com
'.searchadv.com', // by Jaan Randolph (searchadv at gmail.com)
'.seek-www.com', // by Adam Smit (pingpong at mail.md)
'.sessocities.net', // 66.98.162.20(*.ev1servers.net: Non-existent domain) by info at secureserver3.com
'.zhuyiw.com', // by zhou yuntao (whzyt0122 at sohu.com)
- '.cashing-view.com', // 210.188.201.22(sv69.xserver.jp) by kikuchi at money-agent.jp
- '.jsyuanyang.com', // 58.211.0.23(non-existing)
- '.m-sr.net', // 210.175.62.125(non-existent) by luckynets2003 at yahoo.co.jp, ns *.ARK-NET.NE.JP
- '.rutewqsfrt10.cn', // 72.36.237.146(*.static.reverse.ltdomains.com) by ferrari by list.ru
- '.rpz3zmr75a.com', // 216.188.26.235(park-www.trellian.com, redirects to domainparkltd.com) by hostmaster at domainparkltd.com(216.188.26.235)
-
- // The same approach of 'acua at mail.ru'
- '.iblcqms.cn', // 89.149.247.25(*.internetserviceteam.com) by Gershun at time2ns.info(84.16.226.58 -> *.internetserviceteam.com), / not found
- '.aasghwf.cn', // 84.16.243.121(*.internetserviceteam.com) by Shooll at ilovemyns.info(89.149.247.26 -> *.internetserviceteam.com)
- '.fwjjjtmrlr.cn', // 217.20.127.232(really.cut3.info -> non-existent) by analog at gamehostingns.info
- '.klmnei.cn', // 84.16.243.123(*.internetserviceteam.com) by arsen at time2ns.info
- '.lumyjugmn.cn', // 89.149.243.225(*.internetserviceteam.com) by kashin at time2ns.info
- '.lxwxjzpiy.cn', // TODO:
- '.qyxswynd.cn', // TODO:
- '.ugivorm.cn', // TODO:
- '.uxmrscgdi.cn', // TODO:
-
- '.informator4you.com', // 84.16.235.141 by info at cash4wm.biz
-
// C-3: Not classifiable (information wanted)
//
// Something incoming to pukiwiki related sites