RBN IP List Update 1-2-2011: RBN IP List Removals: 188.165.155.1 covered by 188.165.155.0/24 85.131.154.34 covered by 85.131.154.0/24 87.242.116.123 covered by 87.242.116.0/24 RBN IP List Additions: 117.135.134.185 Geinimi domains frijd.com islpast.com piajesj.com udaore.com www.widifu.com 174.138.173.243 *.amateurknockers.com *.annasgalleries.com *.foxyand40.com *.madalynsgalleries.com *.roxysvideos.com *.tandagalleries.com *.tandagirlfriends.com *.tandavideos.com 2000blowjobs.com amateurbisexuals.com amateurexotics.com amateurknockers.com amateurshowoff.com annasgalleries.com darkdevotion.com desiresweb.com fetish-network.com foxyand40.com logansgalleries.com madalynsgalleries.com masturbation-network.com roxysvideos.com tandagalleries.com tandagirlfriends.com tandavideos.com www.amateurknockers.com www.annasgalleries.com www.foxyand40.com www.roxysvideos.com www.tandagalleries.com www.tandavideos.com 178.162.191.136 exploits www.tubehome.com tubehome.com 178.236.40.0/22 Towse-e-Saman Co. Ltd. AS51542 TSCO Tose-eh Saman Information Technology Company (44% of domains tested malware related) 178.236.40.5 dns2.mihannic.com name server for holocartoons.com, Iranian Revolutionary Guard (Army of the Guardians of the Islamic Revolution) dns2.mihannic.ir ns2.birjandcity.com ns2.google724.com brand jacker ns2.payapardazesh.net ns6.mihannic.com 178.236.40.12 windowsse7en.biz piracy tdc4.mihannic.com Iranian Revolutionary Guard (Army of the Guardians of the Islamic Revolution) 178.236.40.10 holocartoons.com holocaust denial cartoon site, Iranian Revolutionary Guard (Army of the Guardians of the Islamic Revolution) ns.holocartoons.com mail.holocartoons.com google724.com brand jacker mail.google-analysts.com brand jacker google-analysts.com brand jacker 178.236.40.20 2dvd.ir piracy, Malicious software is hosted on 2 domain(s), including ygla.ru/, 193.106.173.0/. 1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site, including 217.23.7.0 178.63.96.144 easytraff.ru easyurl.ru ilikemusik.ru u4anz.co.cc visiting this web site may harm your computer. Malicious software includes 558 exploit(s), 79 trojan(s), 1 scripting exploit(s). uni5.ru Malicious software includes 552 exploit(s), 6 trojan(s). trafbuy.ru Malicious software includes 364 exploit(s), 12 trojan(s), 1 scripting exploit(s). 188.165.155.0/24 Mariposa/Butterfly/Rimecud.A.1720/Palevo 188.165.155.1 pornicari.com 188.165.155.2 ns1.aljosaborkovic.com ns2.aljosaborkovic.com 188.165.155.11 ns1.banjalucke-ljepotice.ru 188.165.155.12 ns2.banjalucke-ljepotice.ru 188.165.155.21 ns1.whackingstuff.com 188.165.155.22 ns2.whackingstuff.com 188.165.155.161 juniormind.com ns1.juniormind.com ns1.voyagelookup.com voyagelookup.com www.juniormind.com 188.165.155.162 ns2.juniormind.com ns2.voyagelookup.com 188.93.19.162 zombie-mod.ru Malicious software includes 13 exploit(s). 193.200.173.202 ukrfoto.dp.ua Malicious software includes 101 exploit(s). Successful infection resulted in an average of 2 new process(es) on the target machine. www.ukrfoto.dp.ua 199.21.148.10 *.infinityads.com *.yesadvertising.com *.yesup.net adonion.com Malicious software includes 82 exploit(s), 13 scripting exploit(s), 11 trojan(s). clicksor.com Malicious software includes 73 scripting exploit(s), 67 exploit(s), 45 trojan(s). Successful infection resulted in an average of 5 new process(es) on the target machine. clicksor.net infinityads.com www.clicksor.com www.emailserving.com www.yesup.com www.yesup.net yesadvertising.com yesup.com yesup.net 200.56.243.137 ygla.ru visiting this web site may harm your computer. Malicious software includes 89 scripting exploit(s), 88 exploit(s). 202.102.86.220 wuhuanpharma.com 202.102.86.237 wuhuanpharma.com 208.87.243.4 areasoft.com.ua Malicious software includes 93 exploit(s), 1 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine. tab-lets.com pharma vse-vkontakte.ru warezkozak.net 209.151.165.106 websmeter.com visiting this web site may harm your computer. Malicious software includes 24 exploit(s), 21 trojan(s). 213.239.199.180 irannuclear.net Islamic Republic Of Iran Intelligence Ministry toopdownload.com piracy 217.23.7.0 Malicious software includes 98 exploit(s), 4 scripting exploit(s), 1 trojan(s). 217.23.7.4 whown.warez-host.com piracy 217.23.7.6 javworld.us flashgateway.com 217.23.7.9 ns2.warez-life.org 217.23.7.23 clients.warez-host.com cns1.warez-host.com cns2.warez-host.com inwarez.org mail.ns1.awzhost.com mail.warez-host.com ns1.warez-host.com ns1.wawa-mania.eu ns2.warez-host.com ns2.wawa-mania.eu pulse1.warez-host.com pulse2.warez-host.com r0.src1.doubleclick.com.ggsql.com ratserver.com warez-host.biz warez-host.com warez-host.info warez-spot.com wawa-mania.eu whown.warez-host.com www.warez-host.com www.wawa-mania.eu 220.179.151.75 wuhuanpharma.com 222.186.189.48 wuhuanpharma.com 222.186.191.118 wuhuanpharma.com 221.231.140.236 wuhuanpharma.com 46.4.35.19 loox2music.us piracy, Iranian Revolutionary Guard (Army of the Guardians of the Islamic Revolution) mail.loox2music.us ns1.loox2music.us ns2.loox2music.us looxbax.org 61.129.47.12 wuhuanpharma.com 61.152.94.159 wuhuanpharma.com 61.160.220.56 wuhuanpharma.com 69.64.43.16 *.lazygirls.info lazygirls.info Malicious software includes 4 scripting exploit(s), 1 exploit(s). Successful infection resulted in an average of 6 new process(es) on the target machine. www.lazygirls.info 69.90.152.7 pix.informatix.com.ru 85.131.154.0/24 85.131.154.38 bar.da.je.bmw.pa.da.razmislis.k.vu 85.131.154.39 cisco.pix.informatix.com.ru 85.131.154.62 i.am.forever.1337.aljosaborkovic.com ns2.aljosaborkovic.com 87.242.116.0/23 EV1218-RIPE, support@2x4.ru 88.198.207.34 node1.pyrox.eu softandroid.ru Malicious software includes 125 exploit(s). Successful infection resulted in an average of 4 new process(es) on the target machine. 94.63.241.150 CryptMEN 94.63.241.151 CryptMEN 94.63.241.152 CryptMEN