modsecurity-waf/nginx-waf/malware-blacklist.txt

931 lines
17 KiB
Plaintext

# http://www.atomicorp.com/
# Atomicorp (Gotroot.com) ModSecurity rules
# Application Security Rules for modsec 2.x
#
# Created by Atomicorp (http://www.atomicorp.com)
# Copyright 2013-2021 by Atomic Corpate Industries Inc. , all rights reserved.
# Copyright 2005-2013 by Prometheus Global, all rights reserved.
# Redistribution is strictly prohibited in any form, including whole or in part.
#
# Distribution of this work or derivative of this work in any form is
# prohibited unless prior written permission is obtained from the
# copyright holder.
#
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS
# AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
# LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
# THE POSSIBILITY OF SUCH DAMAGE.
#
#---ASL-CONFIG-FILE---
#
# Do not edit this file!
# This file is generated and changes will be overwritten.
#
# If you need to make changes to the rules, please follow the procedure here:
# http://www.atomicorp.com/wiki/index.php/Mod_security
104.27.148.147/
108.179.234.91/
109.234.35.90/
116.125.126.111/
118.130.191.213/
119.75.205.178/
125.161.39.94/
1268vip.com/
173.15.111.29/
173.236.65.24/
177.11.48.237/
180.210.205.209/
185.44.105.7/
190.196.132.14/
195.154.165.135/
195.154.73.79/
195.225.34.101/
198.101.206.138/
200.49.148.95/
200.98.146.61/
200.98.164.3/
201.245.129.42/
202.150.216.211/
208.115.220.82/
210.1.60.156:2082/
212.7.217.117/
213.246.61.125:2082/
213.5.177.196/
217.218.225.2:2082/
37.46.133.10/
46.4.121.189/
62.210.92.9/
65.61.103.76/
66.196.254.130/
6thavenueelectronics.net/
77.65.23.211/
78.46.100.45/
78.46.49.57:21502/
.80systemerroralertcode22.com/
82.196.10.226/
86.55.140.203/
89.248.172.139/
919vn.com/
94.199.51.7/
99.153.29.240/
aarc.dz/
ableoccassion.com/
absolutelycute.net/
academicotogas.com.br/
.actions.ro/
.actualitatea-romaneasca.ro/
adbirdie.com/
ad.dipad.biz/
.adk2x.com/
admpi.com.br/
adobesecurupdate.com/
.advantagewg.com/
aefgh.org/
aegv.pt/
aeronager.com/
.aimeezingdaycare.com/
.airmax90.party/
.albumpalavra.com.br/
alert-sa.com/
.alhikmahsby.com/
allfilesdownload.us/
almadanews.com.br/
almamatez.com/
ampm2u.pw/
.analprolap.se/
andopol.pl/
androidepisode.com/
angelhelper.co.kr/
.angelsagency.com/
.anilorak.com/
antichat.ru/
antoniopastor.com.ar/
anything2u2.org/
anythingforwp.com/
aodaikhoanguyen.com/
aplikacii.com/
apollo5go.com/
apple.gifts-centers.com/
applehelp.net/
aquariusandaquarius.com/
.arabrelevance.com/
arestoscosmeticos.com.br/
asianon.co/
asianons.net/
.attack.com/
auction.pennytrail.com/
.audytor.conlex.pl/
austeal.com/
avanti-pizza.ch/
avarsky.ru/
.avsbackup.com/
awesome4wp.com/
awfwow.net/
babycaleb.axspace.com/
badglorry.in/
badwolff.pw/
.barba2.com.ar/
barra.uol.com.br/
.batoma.com.au/
.bcvziy.com/
bestbooksfiles.com/
bestnulledscripts.com/
bethelphotoworks.com/
betube.co.uk/
bimlolgroup.in/
.binkleyapples.com/
biofoodey.org/
.blackgreenfoods.com/
blackmorgana.com/
blacknite.eu/
blacktitan.org/
.blackwellbusiness.com/
.blankchair.com/
bleury.fr/
blizfone.cf/
blogger.comxvas.tk/
blogg.tommi.nu/
bokoinchina.com/
.bridgenote.com/
bringletorn.biz/
bubblebanks.com/
bukirda.com/
bvbbo.nl/
by-scr43z1.com/
c99txt.net/
.cafebacon.com/
.calagaz.net/
callmenauw.net/
canadaimmigration-visa.com/
canvila.org/
carandfly.net/
carandflys.info/
carnk.com/
carruess.org/
carterinfect.alwaysdata.net/
.carunalnik.org/
casefollowup.com/
.cathyerdmann.com/
cbsfree.com/
ccteam.ru/
.cderlearn.com/
.cdlvilavelha.com.br/
.cgilvicenza.it/
chairguy.pw/
chansteel.in/
.chantier-allemand.com/
checkournewsoft.com/
.cheer.hk/
chinese-foods.info/
chinesemaster.biz/
chinesemasters.pw/
.ciderspace.ch/
.cigdemsporkulubu.com/
.cirend.com.ar/
cirter.com/
clarkcopperheadgaskets.com/
cleanmsgs.com/
clevervc.com/
com-00-northamerica.com/
com-e84.net/
comerciodeitapolis.com.br/
compraourocard.web563.kinghost.net/
computersystemalert.com/
.confeitariabombocado.com.br/
conopizzavenezuela.com/
constructioncalcs.com/
contactpchelp.com/
content-into-cash.com/
cooperdup.mx/
copa-armada.clubnaval.mil.ec/
couponsonakeychain.com/
cpanel.host-ed.net/
cprnash.com/
.creativebooster.ro/
crediyasa.com/
crime-style.org/
csi-tavira.com/
cti-tech.cn/
cuttscan.org/
d1.flnet.org/
dailynulled.com/
damocom.net/
danbarton.in/
daramusic.org/
daramusics.com/
dayddb.com/
dayoo.co/
deadmary.biz/
default7.com/
.deportesenfotos.com/
deutz-marine.com/
.dgodns.net/
diagranti.com/
diamloisirs.infoconnect.re/
didus.org/
.diendanceo.vn/
.dionmorrow.com/
distinctfestive.com/
divisits.com/
dmmjav.com/
doa.go.th/
domaincop247.com/
domesistance.com/
domitian.net/
dondom.co/
donutjs.com/
download.goobzo.com/
dragoncrew.org/
dreamknow.net/
drummercoo.info/
d-s.co.kr/
dudelman.biz/
dudelmans.info/
dundaroil.basgec.org/
duringsha.com/
dynamicxor.com/
easibilitary.com/
editprod.waterfilter.in.ua/
eezdownloads.com/
efax.pfdregistry.net/
efraincolombo.com.ar/
eidk.hopto.org/
eikonsmedia.com/
ekitap.in/
elearning.sace.it/
electradev.info/
electronicfrontierfoundation.org/
.elian.asia.lk/
.eliteteamsite.com/
.el-manhal.com/
.elmillero.us/
emilyg.info/
enamorarlas.com/
.encostadolago.com.br/
envymagazine.ca/
.envytations.net/
ergofilling.com/
.ergunpneus.be/
esd.nzs.com.br/
eshop.earmy.cz/
.esmacu.org/
esportal.in/
esportals.biz/
etymologi.in/
eurolips.in/
.euroquipe.ie/
eurosystems.it/
evolution-store.net/
fabulousall.net/
.faret.cn/
fatrats.in/
fbguns.pw/
.fefnjefb.in/
fewo-appartement-siegen.de/
fighter-writer.org/
filesmonster.porn/
.fileversion.net/
fimfoo.net/
findoki.net/
.fing.usach.cl/
firstpagesearch.com.au/
.fisheries.go.th/
.fisiopremium.com.br/
fixpc99.com/
flashpotdesigns.com/
florenses.xyz/
.fmdevelopersnetwork.com/
fmdons.com/
fmfn.in/
fmfoo.in/
foltimaks.biz/
.fonarick.com/
foodeyo.biz/
foodrumer.com/
foodrumers.co/
foolazylady.pw/
foosample.info/
foosamples.com/
.fordfixer.net/
forestaunicorni.altervista.org/
fotogirl.ca/
fraudsteel.com/
free3dprint.cf/
freeapart.in/
freeaparts.org/
freeforwp.com/
.free-iphone6s.com/
.freelotto.com/
freemiumscripts.com/
froggerbobber.com/
frogprogs.biz/
.fservers.net/
fsquaredmedia.com/
ftp.90plan.ovh.net/
ftp.freehostia.com/
ftp.service-web-host.pagebr.com/
ftp.uhserver.com/
ftp.volleyclubmaconnais.fr/
ftp.vveijsden.nl/
full-comandos.com/
funpixhawaii.com/
futurecomtechnologies.com/
g-analytics.biz/
gay-file.com/
gazetashqiptareonline.com/
.geekgadget.net/
geekube.com/
gencan.in/
genejtrack.com/
generalop.in/
generalops.biz/
.gessorosarinho.com.br/
getnulledscripts.com/
.getonnow.net/
gezidotojyk.org/
.gezondtea.com/
.gfx-loop.com/
ggjghhfhfh.com/
.ghanachambertakoradi.org/
giveourlife.org/
glendalehills.am/
glentools.in/
.glory-korea.com/
gngoo.com/
goldcashin.net/
.goodigood.com/
goodoo.biz/
.gorenergo.com/
graphizma.com/
.grasp-press.co.uk/
greataudiosdownloads.com/
greatvideosdownloads.com/
groundrealty.co.in/
.groupe-rouquette.com/
guitarland.in/
guitarlands.biz/
guruincsite.com/
.gymelitys.ca/
.gynecologicalendocrinology.org/
.gyomainyaralo.hu/
h4cker.tr/
hadyagifts.com/
hamstelbeer.biz/
hantersid.biz/
hanterwall.pw/
.harrisoncarlos.net/
hashcrack.com/
hashcracking.info/
hbo4free.info/
.hcchb.gov.tw/
.heliconsystems.com/
heliomros.com/
.hidayah.edu.my/
higrees.in/
holegirl.eclub.lv/
hollahup.me/
.holleyberry.com/
.honbu.fi/
honeybun.in/
horskypramen.cz/
hortwava.com/
hotlogupdate.com/
http:/404-errors.info/
huntergil.biz/
.i4rent.de/
.ickray.com/
.ifriqiyah-site.com/
iglesembalagens.com.br/
ignews.co/
igooglecache.com/
images.imagenetcom.com/
inctwo.com/
.inesmariaalcalde.com/
infopromo.biz/
inmessagealert.com/
insta.reduct.ru/
interstech.info/
iosalert-error.com/
iosclean.com/
ios.crashreport.info/
ios-errors.com/
iossecurityalert.com/
iscanth.org/
.islandvillasbali.com/
.istanbuldenizotobusu.com/
izplace.com/
.jaintv.com/
.jasa.adv.br/
javrip.net/
.jeetatl.com/
.jejucasa.com/
jewelrydna.com/
.jjctv.com/
.jkladesign.com/
joioiskioeriyyskwkdwjsdfewis.land.ru/
joncon.in/
.josianeguss.com/
.jpetrusbar.com/
jquery-code.su/
jquuery.com/
jsacademys.net/
juicycouture.com.au/
julianus.net/
.k7-gd.com/
kadjisquare.com/
kajtus.webd.pl/
.kantorrico.pl/
kelmanstar.biz/
kereny.ro/
kesi.granc.hu/
k-fish-ka.ru/
kilmarnockbaptist.org/
.kirimcara.com/
kittsburg.com/
kmbc-thai.com/
.kolaka.gr/
kolmen.org/
kolmens.com/
konstantine.ru/
.kontjokenthel.com/
koouse.pw/
kortech.cn/
krasnayadama.info/
kreotceonite.com/
.kriko-car.hu/
.ksma.or.kr/
.kunjungiindonesia.com/
.kyra.ae/
ladiesdehaan.be/
.lanmanserver.com/
largelicacy.com/
laskeygen.net/
laspeores.com.ar/
layfoster.net/
.ldsa.ca/
lennartobdam.nl/
lightingcentre.co.uk/
likebugs.in/
.limitlessnewworlds.com/
lincomers.com/
lincorporato.com/
listen2u.info/
littjohnwilhap.ru/
.logitec.se/
longlifeweld.com.my/
.lopburicoop.com/
.lostbrundageit.com/
losticloud.6te.net/
macattention.in/
mac-health-support.com/
mac-online-support.com/
macrinus.net/
mac-security.com/
madleets.com/
maika-pujales.es/
maisconquiste.com/
maisurpreenda.com/
maraca.hut2.ru/
.maragusa.com.br/
marcelotaiette.sites.uol.com.br/
martinkroesen.nl/
marzs.ru/
masterprotect.ir/
mathlow.co/
mawnew.com/
mawnews.in/
.mayallgogogo.com/
mbrowserstats.com/
mdplaza.co.id/
mediasearchdirect.com/
.megalolik.com/
.meliston.com/
menko.co/
menotepoer.com/
.menyudnya.com/
mermodynamic.com/
mfileshare.com/
microsoft-securety.com/
micrrosoft.net/
mightywordpress.com/
milahoney.org/
milkaxe.biz/
miniboxmaysa.com/
.miuzu.com/
mobileappsmpire.com/
.mobilunion.de/
.mobmusik.com/
mo-fa.etowns.org/
moneycot.org/
moongreen.info/
morenewmedianow.com/
mostelpay.com/
.motorgrup.ro/
mountil.com/
movemorey.in/
mp3raagam.net/
msdnscripts.com/
.mslcomputers.com.au/
mtvboard.biz/
mtvboards.com/
mtvfree.com/
mtvnye.com/
mukasore.xyz/
mundo.busca.uol.com.br/
.mundo-nipo.com/
.muniquilicura.cl/
.muslimrulers.com/
.mutiarabangsa.sch.id/
.mvctecnologia.com.br/
mydigitalfinderone.com/
.myhanbando.com/
mymodule.waterfilter.in.ua/
nanogrades.net/
.ncprd.org.ng/
.nep.go.th/
newfastmediasearcher.com/
newtester2012.atspace.co.uk/
nezlobudnya.com/
nikonographer.ru/
ninoceram.ir/
nkpage.info/
nkpages.net/
.nodong119.co.kr/
nonsensefood.org/
novotempolivraria.com.br/
nuday.net/
nudays.biz/
nulledirectory.com/
nulledlistings.com/
nullednet.com/
nulledstylez.com/
nulledwp.com/
nullit.net/
nutragate.com/
.oglcommunity.de/
one2shoppee.com/
onesource.com.my/
onlinebooksfiles.com/
online-mac-issues.com/
onlinestore.az/
orgfoo.com/
orroa.org/
.ortodontiacorretiva.com.br/
.otherhumanerrors.com/
outletginess.net/
oya2.net/
oz.publikum.sk/
.ozsportsbikes.com/
pader-g.org/
painreliefsite.com/
.pakning.net/
.panhandleflyers.com/
paperplanet.co/
paperplanets.info/
paperplanez.info/
.parallell.ru/
.pasukanjihad.com/
pbdewilgen.nl/
pcassists.info/
pc-errors-notice-1a.com/
pcsafe.us/
.pcts.or.kr/
.pdinahar.com/
.perkinsbraden.com/
phtmllaudanskis.chat.ru/
pic2take.pw/
pic2takes.biz/
pointacademy.kr/
pointern.com/
pokerchips.t35.com/
pollackandball.com/
.pomegranateatthemarket.net/
portaldasmaquinas.net/
portaldoheavymetal.org/
private.directinvesting.com/
privatepaste.com/
privatepracticesecrets.com/
privc0de.com/
prodajpricu.com/
progman.in/
progmans.co/
.programasm.com/
programasm.com/
prolinkirc.org/
promediasearch.com/
.prototypeevolution.com/
psykopatico.altervista.org/
.pueblotricolor.com/
pwn.nixon-security.se/
qbfdq.com/
qualityhost.in/
quatlam.com/
questart.com.pl/
quoteboll.biz/
r57.gen.tr/
.radioretro.com.br/
ramakit.biz/
.ratu-bigsale.com/
raymybe.in/
realanalytics.pro/
.realdanube.sk/
realstatistics.info/
realstatistics.pro/
recognizereality.com/
remotecomputertechhelp.info/
.rerickey.com/
revistaelshaddai.com/
.rgsnewcastle.co.uk/
.riffserver.com/
.riftenterprises.com/
.rinconluismiguel.com.ar/
ringostar.in/
rishtofish.pw/
ritsoperrol.ru/
roadsiderescue.com.au/
.rollemont.com/
.rudyprojectchina.com/
.ryko89.com/
safari-net-help.com/
.sakulejo.com.br/
.salonladym.ro/
sameyouto.com/
saveclip.net/
scamadviser.com/
sceniceyou.pw/
.scoalamirceaeliadepitesti.ro/
.scratchstudio.org/
scriptb.com/
security.belayadama.info/
securityupdatealert.com/
securitywarns.com/
seektoexplore.com/
seikatsuichiba.com/
seo-moz.com/
seo-position-report.net/
.seoulpainclinic.com/
.seranteshotel.com.br/
.serextprevencion.com/
services.paypai.com/
sh3ll.org/
shaunandpaige.com/
.showgirls.com.br/
sikum.com/
.silverbell.org/
silverbell.org/
singletwo.net/
siteanalytics.pro/
sitenko.biz/
.sklep.klichowicz.pl/
slaveralled.com/
sleepyvillage.ca/
slimflicker.in/
slmseguros.es/
smung.spo.moph.go.th/
snap-u.com/
.soccerageclub.com/
.sokut.ir/
.sonhoencantadonet.com/
.space-cs.com/
spearanoia.org/
.spgrepair.ca/
sponsistorm.com/
sportcen.com/
sportscen.org/
.spygrup.org/
stablehost.us/
.star-games.be/
starmediasearcher.com/
stedentrip-europa-aanbieding.nl/
stedentrips-aanbieding.nl/
steinteppiche.ch/
.stencel.co.uk/
stonerock.in/
stonerocks.net/
stranges.info/
stranieistor.com/
studentwine.co.uk/
.studiolegalemanzi.com/
suppornet.ca/
support-firewall.info/
support-pc-now.com/
supports.link/
.suroot.com/
surpreendase.net/
system-connect.com/
system-logs.info/
systemsecurities.info/
systemsecurityalert.com/
tablemaster.in/
tablemasters.org/
tailines.com/
talool.net/
taxiairportpop.com/
.technologyventures.info/
techsupport247.org/
.tecnilibro.com/
.tecnopes.com.ar/
.tecnopoly.it/
.temporel-voyance.com/
termrock.com/
termrock.in/
test0.com/
test246.com/
test557.com/
test5.xyz/
testadordesit.com/
tester2012.h19.ru/
.theatre-lumiere.com/
the-unforgiven.org/
thevintagebar.co.uk/
thexorandor.in/
throughluk.net/
.thurz-x.net/
tioandino.com/
tipesh.biz/
.tkfisher.org.tw/
.tlcdf.com/
.todo-comercial.com.ar/
.tonyveiculos.com.br/
.too-oop.com/
.topinstructoriauto.ro/
topnulledownload.com/
totustuus.or.kr/
trafficanalytics.online/
.trafficsyphon.com/
traffictrade.life/
trailmorey.com/
.transmetro.gov.co/
.transposagenbio.com/
travelsans.pw/
traveltrainer.info/
trimtoroot.com/
tshirtsforsale.co.za/
.tsogcherbalcare.com/
tunegrotto.com/
turnfest.im/
.turuzzonatale.it/
twomath.biz/
.ubat-ff.com/
.ubertom.com/
.uccl-sa.com/
uganonym.com/
.uniaogaucha.org/
uniglader.biz/
universonutri.com.br/
.upandrunnin.net/
.update4ever.xyz/
urlmediafiles.com/
validation.co.kr/
.vebiromania.ro/
.vesti-ua.net/
video-vk.ru/
villagesun.in/
vipsbr.50webs.com/
virusprotectionteam.com/
virusscanalert.com/
virus-scanner.info/
.visaginas.org/
vivalites.biz/
.vmsupply.com/
vmsupply.com/
voca.or.kr/
void.ru/
voudevisa.1gb.ru/
.w0135cyber.net/
wagrain-jugendferien.at/
wardie.dhhsptsa.net/
.weberei-brey.de/
web-esi.com/
webhalf.info/
web-plasa.com/
.webproof123.hdfree.com.br/
websiteacademy.biz/
websitesdesignaffordable.com/
.websnatchers.ro/
webstatistics.pro/
.welawfl.com/
wendami.me/
wikiqedia.biz/
wikiqedias.com/
wilcarobbe.com/
will2012.atspace.co.uk/
windowsdesk.net/
.winjeprijs.com/
wonderfails.net/
wordpresscore.com/
wordprssapi.com/
worldbooksdownloads.com/
worldcut.biz/
worldcute.biz/
worldofhosting.com/
wp-blogstats.com/
wp-nulled.com/
.wushu.org.ge/
wutangclan.ru/
.wuyoubaomu.net/
x01.mirc.com.gr/
.xbox360-kinect.nu/
xenonstyles.net/
xgps150.dualav.com/
xiaoguizi.gotgeeks.com/
xn--pn3b8j57geyi6c.kr/
xreyuk.co.uk/
.yetaotao.com/
y.healing-our-deepest-wounds.com/
yoctotemplates.com/
.youfuze.com/
yourfreemediadownloads.com/
yournetmediastore.com/
yourpromptdownloader.com/
yoursoftwareplace.com/
zarafan.org/
.zeroredirect2.com/
zimlooks.com/
zolokit.biz/
zoneoflive.com/
raw.githubusercontent.com/xmrstudio/
setforconfigplease.com/
getmyfreetraffic.com/
clevertrafficincome.com/
hellofromhony.org/
notifymepush.info/
pushmeandtouchme.info/
recaptcha-in.pw/
destroyforme.com/
.hognoob.se/
fid.hognoob.se/
requestbit.com/
93.158.203.156/
requestbit.com/
requestegg.com/
requestmob.com/
99request.com/
101request.com/
request101.com/
drrequest.com/
rerequest.com/
tryrequest.com/
requesttip.com/
requesthd.com/
hdrequest.com/
requestbee.com/
itenvoirtech.com/
javayousave.com/
mageuserland.com/
pollocart.com/
productjstech.com/
succescripts.com/
upgradenstore.com/
straproduct.com/
userlandit.com/
openyourass.club/
collectfasttracks.com/
destinyfernandi.com/
digestcolect.com/
stivenfernando.com/
trackstatisticsss.com/
traffictrade.life/
yourservice.live/
adsnet.work/
cdn-filestore.com/
nativeredir.tk/
localhostnametable.com/
shellx.org/
kostunivo.com/
chishir.com/
mangoclone.com/
onixcellent.com/
digitalcollege.org/
freescanonline.com/
deftsecurity.com/
thedoccloud.com/
virtualdataserver.com/
incomeupdate.com/
zupertech.com/
databasegalore.com/
panhardware.com/
avsvmcloud.com/
kubecloud.com/
seobundlekit.com/
solartrackingsystem.net/
virtualwebdata.com/
supernetforme.com/
superwebbysearch.com/
.dontkinhooot.tw/
wibuheker.com/
23.106.253.151/
185.213.209.151/
canarytokens.com/
log4shell.huntress.com/
jswl.jdaili.xyz/
209.141.33.141/
cheatmod.org/