# HIGH VOLUME SPAM SOURCES
#
# These are prolific spam sources that do not quite sink to the level of the
# rogues list, but that you want to filter out as quickly as possible.

# Blue Stream Media
#
# Last reported spam: 4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=BlueStream%20Media
#
# Status: Active Spammer
#
TESTNAME='Blue Stream Media'
TESTDOMAINS=${SBDIR}/black/bluestreammedia-domains.txt
TESTCIDR=${SBDIR}/black/bluestreammedia-ips.cidr
TESTPATTERNS=${SBDIR}/black/bluestreammedia-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=HEADER
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Goyetche, Tim (Bulkers.net/Bulkbarn.com)
#
# Last reported spam: 4/11/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Tim%20Goyetche%20/%20Bulkers.net%20/%20Bulkbarn.com
#
# Status: Unknown
#
TESTNAME='Tim Goyetche'
TESTDOMAINS=${SBDIR}/retired/goyetche-domains.txt
TESTCIDR=${SBDIR}/retired/goyetche-ips.cidr
TESTPATTERNS=${SBDIR}/retired/goyetche-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060411
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Mailtrain
#
# Last reported spam: 4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=lmihosting.com
#
# Status: Active Spammer
#
TESTNAME='Mailtrain'
TESTDOMAINS=${SBDIR}/black/mailtrain-domains.txt
TESTCIDR=${SBDIR}/black/mailtrain-ips.cidr
TESTPATTERNS=${SBDIR}/black/mailtrain-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Pavka/Artofit
#
# Last reported spam: 4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Pavka%20/%20Artofit
#
# Status: Active Spammer
#
TESTNAME='Pavka'
TESTDOMAINS=${SBDIR}/black/pavka-domains.txt
TESTCIDR=${SBDIR}/black/pavka-ips.cidr
TESTPATTERNS=${SBDIR}/black/pavka-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Peters, Jeffrey (JTel/CPU Solutions)
#
# Last reported spam: 4/15/06
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Jeffrey%20Peters%20-%20JTel%20/%20CPU%20Solutions
#
# Status: Active Spammer
#
TESTNAME='Jeffrey Peters'
TESTDOMAINS=${SBDIR}/black/jeffreypeters-domains.txt
TESTCIDR=${SBDIR}/black/jeffreypeters-ips.cidr
TESTPATTERNS=${SBDIR}/black/jeffreypeters-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20060415
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Taiwan Media, Ltd.
#
# Last reported spam:  12/20/05
# Data files last updated: 4/15/2006
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Taiwan%20Media%20Ltd
#
# Status: Unknown
#
TESTNAME='Taiwan Media'
TESTDOMAINS=${SBDIR}/black/taiwan-media-domains.txt
TESTCIDR=${SBDIR}/black/taiwan-media-ips.cidr
TESTPATTERNS=${SBDIR}/black/taiwan-media-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20060415
TESTTYPE=BODY
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Vendare Group
#
#  (Acclaimedia/Acemarketer/Agora Marketing Services/Bandwidth Options/
#   ExPost/Midphase Inc.)
#
# Last reported spam:  11/16/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#  ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Vendaregroup
#
#  8/07/05:
#    Long-time spammer, same postal address as ROKSO spammers
#    AdProSolutions/Hi-Speed Media.  For a long time, I was
#    convinced they were the same slimeballs, but apparently
#    they're a different group of spammers.
#
#  9/22/05:
#    Added Imperium Strategies and its affiliates to the Vendare
#    group.  Vendare's name servers are hosting *all* of their
#    domains -- the connection is obvious and so solid that
#    I don't believe there's any reasonable chance that
#    Imperium Strategies is an independent company.
#
#  12/01/2005:
#    Looks like Imperium Strategies, Aurora Direct, Harrison Direct,
#    and others might be independent after all.  Breaking them out.
#    (My personal suspicion is that Vendare is trying to gain
#    "plausible deniability" about its outright spamming operations
#    in preparation for an IPO/going public.  But I don't know for
#    sure.)
#
# Status: Active Spammer
#
TESTNAME='Vendare Group'
TESTDOMAINS=${SBDIR}/black/vendare-domains.txt
TESTCIDR=${SBDIR}/black/vendare-ips.cidr
TESTPATTERNS=${SBDIR}/black/vendare-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051116
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc


# Waggoner, Bill
#
# Last reported spam: 12/20/05
# Data files last updated: 4/15/06
#
# Other Relevant Info:
#
#   ROKSO: http://www.spamhaus.org/rokso/listing.lasso?-op=cn&spammer=Bill%20Waggoner
#
# Status: Active Spammer
#
TESTNAME='Bill Waggoner'
TESTDOMAINS=${SBDIR}/black/waggoner-domains.txt
TESTCIDR=${SBDIR}/black/waggoner-ips.cidr
TESTPATTERNS=${SBDIR}/black/waggoner-patterns.rc
TESTSCORE=${SPAMLEVEL}
TESTLAST=20051220
TESTUPDATED=20060415
TESTTYPE=ALL
INCLUDERC=${SBDIR}/functions/identify-spammer.rc