RBN IP List Update 12-30-2010 RBN IP List Removals: 143.248.247.248 botnet CC dead 187.17.98.11 200 hosts RBN IP List Additions: 109.196.130.58 comeandgivethat.net Zeus Sheng Wei niceday242steal.net Zeus Victor I Brikatnin 125.89.197.2 (IP address previously listed) www.13131.info trojan Koutodoor 143.248.175.159 pharma *.greattabletshealthrx.net *.manipreka.com *.nessixfewu.com *.pillsfitnessdrugstorechain.com *.presciptionpharmacygraduates.com *.rafpk.ru *.vamej.ru *.vecabnaip.com *.vgafruflo.com *.vjestolquow.com *.yusbekka.com admin.manipreka.com admin.nessixfewu.com admin.pillsfitnessdrugstorechain.com admin.presciptionhealthconcernsmedications.com admin.presciptionpharmacygraduates.com admin.rafpk.ru admin.vamej.ru admin.vjestolquow.com admin.yusbekka.com femalerxtabletsfitness.com greattabletshealthrx.net hbw19882.kaist.ac.kr mail.manipreka.com mail.nessixfewu.com mail.pillsfitnessdrugstorechain.com mail.presciptionpharmacygraduates.com mail.rafpk.ru mail.thetabletsmedspills.net mail.vamej.ru mail.vecabnaip.com mail.vjestolquow.com nerrywdilse.com nessixfewu.com ns1.manipreka.com ns1.nessixfewu.com ns1.vecabnaip.com ns1.vgafruflo.com ns1.vjestolquow.com ns2.manipreka.com ns2.nessixfewu.com ns2.vecabnaip.com ns2.vjestolquow.com ollozeff.com presciptionpharmacygraduates.com vamej.ru vjestolquow.com www.xqkjv.ru yusbekka.com 173.203.198.198 blindtaste.com djscatterbrain.info cruinh.net galvestonhomesales.com grigorim.com Ukrainian malvertiser related hexmonkey.com Ukrainian malvertiser related mail.cruinh.net ns1.grigorim.com Ukrainian malvertiser related telemarketingoutsource.com teleservicesoutsource.com weaselbeestudios.com www.blindtaste.com 174.120.253.203 nudeteensarea.com 174.120.57.167 174.120.57.168 174.120.57.169 russianbridessource.com Ukrainian malvertiser ns1.russianbridessource.com 174.120.57.170 ukrainetx.com Ukrainian malvertiser mail.ukrainetx.com Ukrainian malvertiser 174.120.57.171 russianbridetravel.com Ukrainian malvertiser 178.162.160.102 Mariposa 188.165.155.1 Mariposa domains aljosaborkovic.com banjalucke-ljepotice.ru cisco.prichaonica.net ns1.prichaonica.com pornicari.com www.pornicari.com 188.229.90.0/23 AS49469 SA-NOVA-TELECOM-GRUP-SRL Sa Nova Telecom Grup SRL 188.229.90.67 asecurity-center.com fake anti-virus 188.229.90.134 luckystraki.org bad registrant 188.229.90.138 securedalertcheck.com Zeus 188.229.90.148 surprise-342mnf.co.cc TLD abused 188.229.90.157 infinato333.org bad registrant 188.229.90.158 candiayadservices.com Zeus 188.241.114.175 greenke.co.tv visiting this web site may harm your computer. Malicious software includes 235 exploit(s), 79 virus, 74 trojan(s). Successful infection resulted in an average of 4 new process(es) on the target machine. 188.241.115.167 infraud.su criminal help services 193.0.251.4 pj.lt suspicious content was found on this site was on 2010-12-20 193.189.86.76 macrosoft.lt rzona.lt alfa.serv.lt 194.0.245.0/24 Delfa network AS42533 DELFANET-AS Delfa Network AS 194.0.245.66 0d7d0617fbd1214d.net W32/Virut 194.0.245.77 derts3563d.net SpyEye C&C server 194.0.245.78 Zeus 194.0.245.79 dresscodetv.asia visiting this web site may harm your computer. Malicious software includes 59 virus. 201.7.103.58 pharma domains *.ahpezkut.com *.alhilfaika.com *.atquackephix.com *.beststoremedswellbeing.com *.bestviagrarx.com *.clajiotsoa.com *.cviadoaz.com *.ezloxjib.com *.foxwyqwac.com *.futningi.com *.fyenpimbec.net *.glagsyclax.com *.globalmedicalstore.com *.healthenlargementpill.com *.hlaedoahma.com *.hlevombyx.com *.hovhanjal.com *.jubyvovvea.net *.kidqurax.com *.luagavcol.com *.lusfidbeu.com *.nizeigzef.com *.pharmacydrugmarketguide.com *.pharmacystonetablets.com *.qubcicvowy.net *.qukmifnuo.com *.qwiquhvyrumy.com *.qwiquxipijy.com *.qwyzkiegwy.com *.ripcapsules.com *.skajhewsypy.com *.sohfevevyl.com *.tabletownhealthrx.com *.thedrugstorestore.com *.tuftiqwime.com *.uflurort.com *.viahwanmu.com *.xyhjapquf.net *.yupdytytix.com *.zdarganpa.net *.zmigtyby.com admin.bestviagrarx.com admin.capsulesrxguide.com admin.clajiotsoa.com admin.gughixqukk.com admin.jubyvovvea.net admin.nizeigzef.com admin.pharmacydrugmarketguide.com admin.qugoqudal.com admin.qwiquxipijy.com admin.thedrugstorestore.com admin.zdarganpa.net admin.zwaductun.com alhilfaika.com aquteriox.com bestdrugtorepills.com bestviagrarx.com bvfiz.uflurort.com clajiotsoa.com cviadoaz.com dwocefhial.com ebsajgij.com ezloxjib.com fufyhzeyjhi.com fwuqko.wisuilufmo.com fyenpimbec.net fyxaohziju.com globalmedicalstore.com goxtixunas.net healthenlargementpill.com hovhanjal.com jewbezkagr.com kidqurax.com ksaebsyrvu.com lsnlue.redsouk.com lusfidbeu.com lyplumudwub.com mail.aexhagijho.com mail.ahpezkut.com mail.alhilfaika.com mail.bestdrugtorepills.com mail.beststoremedswellbeing.com mail.bestviagrarx.com mail.clajiotsoa.com mail.cviadoaz.com mail.djiatisfu.com mail.ezloxjib.com mail.foxwyqwac.com mail.foxwyqwac.net mail.fyenpimbec.com mail.fyenpimbec.net mail.glagsyclax.com mail.greatpillreview.com mail.healthenlargementpill.com mail.hlevombyx.com mail.hovhanjal.com mail.jubyvovvea.net mail.kidqurax.com mail.lusfidbeu.com mail.merfeget.com mail.nizeigzef.com mail.pharmacystonetablets.com mail.qubcicvowy.net mail.qwiquhvyrumy.com mail.qwiquxipijy.com mail.qwyzkiegwy.com mail.ripcapsules.com mail.skajhewsypy.com mail.sohfevevyl.com mail.tuamecwojl.com mail.tuftiqwime.com mail.viahwanmu.com mail.vnoedcyl.net mail.xyhjapquf.net mail.yezuynbez.com mail.yourtorerx.com mail.zdarganpa.net mail.zvymmogwu.net mail.zwaductun.com merfeget.com nizeigzef.com ns1.aexhagijho.com ns1.alhilfaika.com ns1.atquackephix.com ns1.beststoremedswellbeing.com ns1.bestviagrarx.com ns1.bihdeawy.com ns1.capsulesrxguide.com ns1.clajiotsoa.com ns1.cviadoaz.com ns1.ekhahpaxen.net ns1.ezloxjib.com ns1.fisysdubb.com ns1.foxwyqwac.net ns1.fufyhzeyjhi.com ns1.fyenpimbec.com ns1.glagsyclax.com ns1.goxtixunas.net ns1.gughixqukk.com ns1.healthfoodmedsguide.com ns1.hlevombyx.com ns1.jubyvovvea.net ns1.nizeigzef.com ns1.pharmacystonetablets.com ns1.qubcicvowy.net ns1.qwiquhvyrumy.com ns1.qwyzkiegwy.com ns1.teglurug.com ns1.thedrugstorestore.com ns1.tuamecwojl.com ns1.viahwanmu.com ns1.xyhjapquf.net ns1.zdarganpa.net ns1.zmigtyby.com ns1.zvymmogwu.net ns1.zwaductun.com ns2.aexhagijho.com ns2.ahpezkut.com ns2.alhilfaika.com ns2.atquackephix.com ns2.bestdrugtorepills.com ns2.beststoremedswellbeing.com ns2.bestviagrarx.com ns2.bihdeawy.com ns2.clajiotsoa.com ns2.cviadoaz.com ns2.ekhahpaxen.net ns2.ezloxjib.com ns2.foxwyqwac.com ns2.fyenpimbec.com ns2.fyenpimbec.net ns2.glagsyclax.com ns2.goxtixunas.net ns2.greatpillreview.com ns2.gughixqukk.com ns2.healthenlargementpill.com ns2.hlaedoahma.com ns2.hlevombyx.com ns2.jewbezkagr.com ns2.jubyvovvea.net ns2.nizeigzef.com ns2.pharmacystonetablets.com ns2.qubcicvowy.net ns2.qugoqudal.com ns2.qwiquhvyrumy.com ns2.qwyzkiegwy.com ns2.teglurug.com ns2.tuamecwojl.com ns2.viahwanmu.com ns2.vnoedcyl.net ns2.xyhjapquf.net ns2.yupdytytix.com ns2.zdarganpa.net ns2.zmigtyby.com ns2.zwaductun.com oiggemzerfy.net pharmacystonetablets.com prescriptionmarketpills.com qubcicvowy.net qwiquhvyrumy.com qwiquxipijy.com qwofyuhl.net qwuxiccy.com qwyzkiegwy.com redsouk.com rxstoreguide.com skajhewsypy.com tabletsdiscountrxmeds.com thyucylbyb.com tuamecwojl.com vahkynjemy.com viahwanmu.com www.bestviagrarx.com www.clajiotsoa.com www.pharmacydrugmarketguide.com www.thedrugstorestore.com wwwdrugmart.com yezuynbez.com yupnyojrufl.com zdarganpa.net 204.188.243.0/24 SharkTECH Internet Services AS46844 204.188.243.36 www.srpac.info IE exploit 204.188.243.119 *.4440.info Trojan-Downloader.Win32.Geral.uni lovebaby.4440.info 204.188.243.120 *.haoom.com Trojan-Downloader.Win32.Geral.uni adwords.haoom.com haoom.com 209.159.144.248 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.249 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.250 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.251 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.252 ultrafilmshield.in trojan, bestiality filmportalpro.in www1.stuffhere4u.com bestdigitalmediafiles.com trojan 209.159.144.253 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.254 209.159.144.248 - 209.159.144.255 Provisov.Net 209.159.144.255 209.159.144.248 - 209.159.144.255 Provisov.Net 216.157.98.115 mt-payday.com Ukrainian malvertiser mail01.sportsnewsemails.com 216.65.127.6 softbaked.com tracker, McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution. 46.4.25.76 opera-17.com piracy www.opera-17.com 46.4.25.82 cheaper.to visiting this web site may harm your computer. 46.4.25.120 *.pro-hack.ru pro-hack.ru www.pro-hack.ru 62.141.59.158 sexy-serbian-girls.info Mariposa domain 64.191.22.37 acceptablezyd.co.cc exploit kit conquerablemmn.co.cc exploit kit 64.34.127.239 ns2.bladetechhosting.biz ns2.borderwebworks.com ns2.js-webservices.net ns2.strategy7.net ns2.yp13.net www12.lendrnd.com Ukrainian malvertiser 67.55.67.10 *.sportsnewsemails.com mail01.sportsnewsemails.com Ukrainian malvertiser related ns1.sportsnewsemails.com postmaster.sportsnewsemails.com 69.174.240.45 www1.lendrnd.com Ukrainian malvertiser akimlasner@yahoo.com 69.174.246.185 (IP address previously listed) victor.hexmonkey.com www40.adbutler4.com Ukrainian malvertiser 69.25.32.11 porn spam, pharma *.aba.me *.aciddrop.net *.adspace.me.uk *.adults-only.me *.adultsearch.im *.adutfriendfinder.co.uk *.airports.im *.allgoldcard.com *.asianpornclips.net *.bigdicks.im *.bingothrill.com *.brandy.im *.celeb-talk.co.uk *.chatter.im *.corys4u.com *.craigavon.biz *.crown.me *.datingonline.im *.deep-throat.asia *.doulike.me *.elvispresley.im *.facesitters.co.uk *.free6.me *.freestuff.asia *.gavinholmes.net *.ggogle.me *.globalcommodity.asia *.goodwin.me *.grassroutes.net *.habsrumours.com *.imedia.im *.iwellbeing.asia *.merckscheringplough.com *.motos.im *.mycard.me *.norwegiancruise.org.uk *.offthewallartprints.com *.pee4.me *.rain.im *.rvaulybvoa.com *.saraya.biz *.seafishing.me *.securinvestments.com *.sfiprint.com *.skid.tv *.stardollz.co.uk *.stokegifford.biz *.sugardaddy.im *.summary.im *.switzerland.im *.tantalise.me *.tem.im *.thailand.im *.torque.me *.transatlanticcruise.org.uk *.transatlanticcruises.org.uk *.tri.im *.tvr.me *.u69.asia *.vintage.me *.web-dev.me *.www2.im 8rg.net 8sex.net adspace.me.uk adult-free-videos.com adutfriendfinder.co.uk allgoldcard.com asianpornclips.net bangbull.co.uk becka.me bigdicks.im bingothrill.com brandy.im celeb-talk.co.uk chatter.im choferes.mx corys4u.com craigavon.biz datingonline.im eas.mx easyevony.com electronicjob.net elvispresley.im facebookblondes.com felixstoweproperty.co.uk feltham.mobi flix.im freeporno.tv freestuff.asia fuckdolly.com gavinholmes.net globalcommodity.asia goianiabrazil.com goodwin.me habsrumours.com halifax-banking.com hdfcvank.com hostmaster.aba.me hostmaster.adspace.me.uk hostmaster.adultsearch.im hostmaster.adutfriendfinder.co.uk hostmaster.airports.im hostmaster.allgoldcard.com hostmaster.asianpornclips.net hostmaster.bigdicks.im hostmaster.brandy.im hostmaster.celeb-talk.co.uk hostmaster.chatter.im hostmaster.craigavon.biz hostmaster.crown.me hostmaster.datingonline.im hostmaster.deep-throat.asia hostmaster.doulike.me hostmaster.elvispresley.im hostmaster.facesitters.co.uk hostmaster.free6.me hostmaster.freeporno.tv hostmaster.freestuff.asia hostmaster.fuck-me-now.com hostmaster.gavinholmes.net hostmaster.ggogle.me hostmaster.globalcommodity.asia hostmaster.goodwin.me hostmaster.grassroutes.net hostmaster.habsrumours.com hostmaster.imedia.im hostmaster.iwellbeing.asia hostmaster.matrimonial.im hostmaster.matrimony.im hostmaster.merckscheringplough.com hostmaster.motos.im hostmaster.mujeres.im hostmaster.mycard.me hostmaster.norwegiancruise.org.uk hostmaster.offthewallartprints.com hostmaster.online2.me hostmaster.pee4.me hostmaster.publicflashing.asia hostmaster.rain.im hostmaster.saraya.biz hostmaster.seafishing.me hostmaster.securinvestments.com hostmaster.sfiprint.com hostmaster.skid.tv hostmaster.stardollz.co.uk hostmaster.stokegifford.biz hostmaster.sugardaddy.im hostmaster.summary.im hostmaster.swapvideos.net hostmaster.switzerland.im hostmaster.tantalise.me hostmaster.tem.im hostmaster.thailand.im hostmaster.torque.me hostmaster.traffic2coins.com hostmaster.transatlanticcruise.org.uk hostmaster.transatlanticcruises.org.uk hostmaster.tri.im hostmaster.truebabes.co.uk hostmaster.tvr.me hostmaster.u69.asia hostmaster.vintage.me hostmaster.web-dev.me hostmaster.www2.im imdiatines.com imedia.im iwellbeing.asia japanese-fuck.com klm.me ladyboy-escorts-london.com lamour.me love-to-cruise.com mail.grassroutes.net mbaff.com merckscheringplough.com missice.com mota.tv motos.im mycard.me norwegiancruise.org.uk ns1.securinvestments.com ns2.securinvestments.com offthewallartprints.com produban.info rain.im rvaulybvoa.com sagamountain.com saraya.biz seafishing.me securinvestments.com sex-kittens.co.uk sfiprint.com shellbayi.com spartakmoscow.com ssex.me stokegifford.biz sugardaddy.im summary.im switzerland.im sylhet.mobi szczecin.mobi tamberine.com tambre.me tantalise.me tek-dek-international.com tem.im thailand.im transatlanticcruise.org.uk transatlanticcruises.org.uk transexual-escorts-london.com tri.im triplexl.com uniguide.org vac.me vintage.me web-dev.me wonamsex.com www.bingothrill.com www.chatter.im 72.51.36.16 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.36.17 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.36.18 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.36.19 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.36.20 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.36.21 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 mail.nutritionalunderground.com nutritionalunderground.com affiliate marketer 72.51.36.22 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 mail.russianbridetravel.com www12.lendrnd.com Ukrainian malvertiser, exploit kit www2.closetrnd.com Ukrainian malvertiser 72.51.36.23 redirects to exploit kit, 72.51.36.16 - 72.51.36.23 DELTA-MARKETING-01 72.51.38.248 (IP address previously listed) www.kendium.com www.ledgingbrown.com www2.bomisnater.com www41.adbutler4.com www41.infornd.com Ukrainian malvertiser 72.51.38.249 (IP address previously listed) adbutler4.com www.adbutler4.com www.kendium.com www.ledgingbrown.com www2.bomisnater.com www41.adbutler4.com www41.infornd.com Ukrainian malvertiser 76.74.155.176 (IP address previously listed) www14.bomisnater.com www22.adshuffle8.com Ukrainian malvertiser www22.mtcashadvance.net www42.adbutler4.com www42.interactiventb.com 76.74.155.186 (IP address previously listed) www14.bomisnater.com www21.adbutler4.com www21.mt-payday.com www22.adshuffle8.com Ukrainian malvertiser www42.adbutler4.com www42.interactiventb.com www42.searchrnd.com Ukrainian malvertiser 77.91.227.248 Mariposa domains (IP address previously listed) ananikolic.su cashm0neybr0thers.com drasticnews.com jebena.ananikolic.su juice.losmibracala.org kreten.banjalucke-ljepotice.ru ns1.ananikolic.su ns1.cashm0neybr0thers.com ns2.ananikolic.su ns2.cashm0neybr0thers.com ns2.facebooks.us peer.pickeklosarske.ru sombrero.balkan-hosting.net www.drasticnews.com 80.93.216.68 illerveadaylar.com visiting this web site may harm your computer. Malicious software includes 118 exploit(s). 91.212.124.34 91.212.124.35 now.ge visiting this web site may harm your computer. Malicious software includes 201 exploit(s), 189 scripting exploit(s), 6 trojan(s). Successful infection resulted in an average of 30 new process(es) on the target machine. 91.212.124.36 91.212.124.37 91.212.124.38 baza-123.ru TR/Agent.631296.1 91.220.163.3 kurupt.cc false registrant data, McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution. 92.241.190.172 Mariposa domains (IP address previously listed) prcolina.prichaonica.com teske.pornicarke.com lego-kaufen.com www.lego-kaufen.com dzaba.cultarts.com sombrero.balkan-hosting.net heihachi.net ns2.bumpmyip.net kreten.banjalucke-ljepotice.ru property.banjalucke-ljepotice.ru peer.pickeklosarske.ru jebena.ananikolic.su 93.113.174.211 top30.ro visiting this web site may harm your computer. Malicious software includes 241 exploit(s), 1 scripting exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine. 94.23.144.111 wronggirls.net McAfee TrustedSource web reputation analysis found potential security risks with this site. Use with extreme caution. 94.176.191.224 lumeata.ro visiting this web site may harm your computer. Malicious software includes 2 exploit(s). 94.244.80.0/24 KIS 94.244.80.7 backstab.biz ATM skimmer sales, links to kurupt.cc d-9.cc 94.244.80.15 CryptMEN 94.244.80.25 CryptMEN 94.244.80.35 CryptMEN 94.244.80.37 CryptMEN 94.244.80.115 CryptMEN 94.244.80.128 CryptMEN 94.244.80.129 CryptMEN 95.215.1.248 sweyes.co.cc SpyEye C&C