RBN IP List Update 2-6-2011


RBN Removals:
195.88.209.0/24 replaced by 195.88.209.0/23
67.228.144.205 replaced by 67.228.144.0/24
67.228.144.253 replaced by 67.228.144.0/24


RBN Activity:

109.235.51.0/24	AS47869 NETROUTING-AS Netrouting Data Facilities

109.235.51.105
*.thereplicajewelry.com
www.thereplicajewelry.com	product piracy

109.235.51.108
aauggs.com	product piracy

109.235.51.122
auuggboots.com	product piracy
uggkey.com
www.uggkey.com

109.235.51.125
uk-dvdbuy.com	piracy

109.235.51.126
uggs-boots-outlet.com	product piracy
www.uggs-boots-outlet.com

109.235.51.133
uk-dvdset.com	piracy

109.235.51.134
uk-cheapdvd.com	piracy

109.235.51.135
uk-dvdsales.com	piracy

109.235.51.45
downcoathk.com
super-cheapshop.com	piracy

109.235.51.47
shopuggboot.com	product piracy

109.235.51.9
abercrombie2012.com	product piracy
christianvipshop.com

113.105.171.180
*.13ybx.com	Trojan.Generic
ad.13ybx.com

122.70.148.179	money mule recruiters
cores-group.cc
mx.cores-group.cc
mx.santorini-finance.co
ns2.couksns.cc
santorini-finance.co

122.70.148.182	money mule recruiters
mx.santorini-fin.cc
santorini-fin.cc

122.70.148.183	money mule recruiters
aus-finance.cc
aus-fininc.cc
bredgargroup-llc.co
cesis-groupllc.cc
cesis-groupllc.co
cesisgroup-llc.cc
coresgroup-inc.co
craft-groupnet.cc
duncroft-group-inc.cc
macrotech-uk.co
mx.aus-finance.cc
mx.aus-fininc.cc
mx.bredgar-groupllc.cc
mx.bredgargroup-llc.co
mx.cesis-groupllc.cc
mx.cesis-groupllc.co
mx.cesisgroup-llc.cc
mx.coresgroup-inc.co
mx.craft-groupnet.cc
mx.duncroft-group-inc.cc
mx.farline-fininc.cc
mx.marfygroup.cc
mx.online-solutionsllc.cc
mx.techadv-inc.cc
mx.uktech-groupllc.cc
mx.yes-groupllc.cc
mx.yesgroup-llc.co
ns2.ukccons.cc
online-solutionsllc.cc
techadv-inc.cc
uktech-groupllc.cc
yes-groupllc.cc
yesgroup-llc.co

122.70.148.184	money mule recruiters
fintec-uk.co
mx.fintec-uk.co
mx.oliver-sonsinc.cc

122.70.148.185	money mule recruiters
farline-fin.co
fintec-ltd.cc
journey-financial.cc
lcd-fin.co
macrotechinc.cc
mx.farline-fin.co
mx.fintec-ltd.cc
mx.journey-financial.cc
mx.lcd-fin.co
mx.macrotechinc.cc
mx.radium-group.cc
mx.solutionsltd.cc
mx.sunrisepr-groupltd.cc
mx.techouse-group.cc
mx.ukgroup-cesis.co
radium-group.cc
solutionsltd.cc
sunrisepr-groupltd.cc
techouse-group.cc
ukgroup-cesis.co

170.79.132.98
ns2.homewindowz.net	rogue

173.192.146.169	money mule recruiters
ns1.couksns.cc

173.192.146.170	money mule recruiters
ns1.ukccons.cc

173.193.64.84	NeoSploit
askmemusic.info
bizlike.info
bluegoogle.info	brand jacker
casinojasm.info
codejasmin.info
creditgoogle.info	brand jacker
datajasmin.info
designaskme.info
digitaljasmin.info
gameaskme.info
gamegoogle.info	brand jacker
homejasm.info	NeoSploit
hotaskme.info
houseaskme.info
jasminbuy.info
jasmincredit.info
jasminlist.info
jasminsite.info	NeoSploit
jasmlive.info
jasmwin.info
likecom.info
likefly.info
likehost.info
likemail.info
likepro.info
listlike.info
liveaskme.info
marketingjasm.info
mediagoogle.info	brand jacker
mobilejasm.info
musicjasm.info
networkjasmin.info	NeoSploit
onegoogle.info	brand jacker
propertygoogle.info	brand jacker
propertyjasm.info
shopaskme.info
siteaskme.info
topjasm.info

173.208.132.42
ns3.kalipso19.cc	money mule recruiters
ns3.kotapopusu.net
ns3.rjevski.com

173.208.132.44
ns3.kotapopusu.com
ns3.miroslavanabz.cc	money mule recruiters
ns3.solojumper.com

173.208.132.46
ns3.skotinko.net	money mule recruiters

174.1.63.18
ns2.stereoflavaz.net	name server for Zeus domains

178.162.152.73	money mule recruiters
duncroft-antteam.org
gogo-teamant.com
marfygroup.cc
mx.duncroft-antteam.org

178.162.152.75	money mule recruiters
ns1.austdec.cc
ns1.folowdns.cc

178.162.152.76	money mule recruiters
ns1.libunitau.cc
ns1.ringtons.cc

178.162.152.243
bluespeedhost.com
boorex.com	money mule recruiters
classified.freeadsbank.com
forum.urdugold.com
freeadsbank.com
humaraforum.com
ibondhosting.com
lovingnepal.com
ninja.pk
ns1.hosting-mall.com
ns1.humaraforum.com
ns1.ibondhosting.com
ns1.sherwanisystems.net
ns2.hosting-mall.com
ns2.humaraforum.com
ns2.ibondhosting.com
ns2.sherwanisystems.net
revengerz.net
roobex.net
sherwanisystems.net
tealibrothers.com
telecoms.ninja.pk
theability-center.com
urdugold.com
websterz.net
www.classified.freeadsbank.com
www.lovingnepal.com
www.revengerz.net

178.162.181.11	money mule recruiters
ns2.dnsukrect.com
ns2.ukansnami.com
ns2.ukdns.cc
ns2.uknamo.com
ns2.uknsspace.cc
ns2.zonensuk.cc
ns3.austdec.cc
ns3.auusdec.cc
ns3.couksns.cc
ns3.folowdns.cc
ns3.gbtrade.cc
ns3.libunitau.cc
ns3.pageredns.cc
ns3.ringtons.cc
ns3.ukccons.cc
ns3.ukearnings.cc

178.162.181.73
allday-rx.info	pharma

178.218.208.114
cardsharing-server.com	fraud
mail.porno-warez.ru	piracy
mail.waraz.ru
ne-xt.ru
ns1.porno-warez.ru
ns1.waraz.ru
porno-warez.ru
soft-soft.ru
waraz.ru	piracy
warezoo.ru
www.cardsharing-server.com
www.ne-xt.ru
www.soft-soft.ru

178.218.209.106
nicedrugs.ru	pharma

178.218.209.92
goldenmp3.ru	piracy

178.218.218.91
mp3car.ru	visiting this web site may harm your computer.
pccar.ru	pccar.ru appeared to function as an intermediary for the infection of 2 site(s)

178.239.50.69
tas-seaplane.com	trojan

178.63.14.10
xivee.com	redirects to fake anti-virus, HTTP Misleading Application Detection (drive by download)
*.bnetworks.us
*.funtarget.com
*.germek.net
*.gorasoft.us	bot
*.nsnix.com
*.traffalizer.com	registrant is known bad actor
*.traffclub.com	registrant is known bad actor
*.vli.li
bnetworks.us
funtarget.com
germek.net
gorasoft.us	bot
mx.bnetworks.us
mx.funtarget.com
mx.germek.net
mx.gorasoft.us	bot
mx.nsnix.com
mx.traffclub.com	registrant is known bad actor
mx.vli.li
ns1.bnetworks.us
ns1.funtarget.com
ns1.germek.net
ns1.gorasoft.us	bot
ns1.nsnix.com
ns1.traffalizer.com	registrant is known bad actor
ns1.traffclub.com	registrant is known bad actor
ns1.vli.li
nsnix.com
root.bnetworks.us
root.gorasoft.us	bot
root.nsnix.com
root.traffclub.com	registrant is known bad actor
root.vli.li
traffclub.com	registrant is known bad actor
vli.li

178.63.149.150	Trojan SpyEye config file

178.63.15.13	Trojan SpyEye

178.63.201.120	Sergei Golubev
*.tds2.ru
mail.nero-burn.ru
med-faq.ru	pharma
nero-burn.ru	piracy
ns1.nero-burn.ru
root.tds2.ru
tds2.ru

178.63.201.121	Sergei Golubev

178.63.201.122	Sergei Golubev
mail.donbass.com.ua
mail.parovoz.org
ns1.parovoz.org
parovoz.org

178.63.201.123	Sergei Golubev
178.63.201.124	Sergei Golubev
178.63.201.125	Sergei Golubev

178.63.201.126	Sergei Golubev
fotohoster.ru
ns1.fotohoster.ru
www.fotohoster.ru

178.63.201.127	Sergei Golubev

178.63.224.221
*.adm-unix.net.ru
*.caku.com.ua
221.224.63.178.adm-unix.net.ru
88.55.46.78.adm-unix.net.ru
adm-unix.net.ru
all-invite.org	Trojan downloader Chksyn.A
all-tracker.ru
allworknet.com
animatika.net
caku.com.ua
dverka.biz
forzaitaliagioiadelcolle.com
mail.all-invite.org	Trojan downloader Chksyn.A
mail.all-tracker.ru
mail.allworknet.com
mail.caku.com.ua
mail.domen-reg.ru
mail.dverka.biz
mail.forzaitaliagioiadelcolle.com
pop.forzaitaliagioiadelcolle.com
root.adm-unix.net.ru
xaker1.ru

188.40.198.185	Trojan SpyEye config file

188.40.87.88	Trojan SpyEye

188.40.87.91	Trojan SpyEye

193.106.28.8
virgilrene.info	visiting this web site may harm your computer.

193.107.16.110	IP address previously listed
zaebiz.eu	Zeus

193.186.9.94	IP address previously listed
amstelone3.biz	Zeus
iesnares.com
iesnaretrack.org
iesnaretrack1.biz
snaretrack.biz

193.238.1.31	money mule recruiters
mx.nimrodltd-uk.net
nimrodltd-uk.net

193.238.1.32	money mule recruiters
mx.moneyvisual-ukllc.com
mx.thronegroup-llc.co
thronegroup-llc.co

193.238.1.33	money mule recruiters
mx.money-visualuk.cc

193.238.1.34	money mule recruiters
moneyvisual-ukllc.com

195.140.178.83
0day.kiev.ua
forum.0day.kiev.ua	piracy
www.0day.kiev.ua

195.140.178.86
www.cyberfiles.info	piracy

195.182.57.91	money mule recruiters, IP address previously listed
techadvinc.cc

195.80.151.140	IP address previously listed
golopa3.ipq.co
kurta.ipq.co	visiting this web site may harm your computer.

195.88.208.0/23	Antaro Hosting Moscow, Russia AS12695 DINET-AS Digital Network JSC

195.88.208.7
fe2.buildipnet.com

195.88.208.8
329902034111.com	visiting this web site may harm your computer.
349832409002394.com
43284729394324324.com
87932748973284.com
eutaxjobs.net	scam
mail.eutaxjobs.net	scam
mail.pi-office.ch
mob-guru.com
ns1.eutaxjobs.net

195.88.208.9
goverment.com.tw	registrant is hilarykneber@yahoo.com (not Taiwanese government)
mail.goverment.com.tw

195.88.208.10
cmstest1.com
vb.cmstest1.com

195.88.208.59
*.fobax.in
fobax.in
mx01.fobax.in
ns1.fobax.in
root.fobax.in
mx02.fobax.in0	spam
ns2.fobax.in0

195.88.208.61
mx03.fobax.in	spam

195.88.208.63
mx05.fobax.in3	spam

195.88.208.64
*.fahraf.in
fahraf.in
mx01.fahraf.in	spam
ns1.fahraf.in
root.fahraf.in

195.88.208.65
mx02.fahraf.in	spam
ns2.fahraf.in

195.88.208.121	
root.srdrawa.info
srdrawa.info	Canadian pharmacy spammer

195.88.208.241
intimka.net
pills-4-you.com	pharma

195.88.208.242
*.do5ad.com	malvertiser
ns1.do5ad.com

195.88.208.243
mail.do5ad.com
mx1.do5ad.com	robot spam (i.e. "2r5@do5ad.com")
mx2.do5ad.com	robot spam (i.e. "2r5@do5ad.com")
ns2.do5ad.com
root.do5ad.com

195.88.208.244
mx3.do5ad.com	robot spam (i.e. "2r5@do5ad.com")

195.88.208.245
ns1.strawbery-video.ru
banking-livesupport.com	fraud, falsified registrant information

195.88.208.246
*.katalog-znakomstv.ru
18-teenlife.com	redirects to fake anti-virus
katalog-znakomstv.ru	piracy
russian-sex-portal.com

195.88.209.8
ns2.eutaxjobs.net	name server for scam site

195.88.209.14
niggaspace.ws	racial slur, site operated by spyspace.ws malware distributors (note: http://www.malware-control.com/statics-pages/208697dc677c4bc9d397b967efa245a3.php)

195.88.209.15
lexusmain.cc	brand jacker

195.88.209.16
*.pohuy.ws	receives traffic from Trojan.FakeAV!gen32
afyxxk.pohuy.ws
awbgm.pohuy.ws
debeklceqm.pohuy.ws
gizcjji.pohuy.ws
issintm.pohuy.ws
kgbqpopvgp.pohuy.ws
mlzvj.pohuy.ws
rrmda.pohuy.ws
traff.pohuy.ws
xwtptttyk.pohuy.ws

195.88.209.83
forelc.cc
ms-updater.net	fake Microsoft update site, trojan downloader (0% detection) calls Troj/FakeAV-CMJ Trojan
reritwoj.cc

195.88.209.195
win-log.ru	tracker

195.88.209.205
antaro-hosting.ru
mail.antaro-hosting.ru
www.antaro-hosting.ru

195.88.209.208
regrota8.net

195.88.209.211
altf9.ru
ns.altf9.ru	name server for malware domains

195.88.209.212
2233.ru
fotonailart.info
ipadsall.info
langeasy.info
zubri.net

195.88.209.213
erekinominotiro.info	pharma web spam
ipadesbest.info
kapenergy.info
venturation.info

195.88.209.214
ayieif.info
bsjigf.info
ninorinovinokoo.info	recipient of W32.Changeup traffic
topstarphone.ru
www.topstarphone.ru	spam

195.88.209.216
ns2.trafmonster.ru	phishing, scam

195.88.209.219
mail.altf9.ru	mail server for malware domains

195.88.209.230
themyhistory.com
tigiporon.cc	TR/Obfuscated.FW.99
www.themyhistory.com

195.88.209.235
barracuda-antivirus.com	fake anti-virus
mail.barracuda-antivirus.com

195.88.209.245
av-checker.com	fake anti-virus

195.88.209.250
ns2.antaro-hosting.ru

195.88.209.252
ns2.altf9.ru	name server for malware domains

195.88.209.253
trafmonster.biz	phishing, scam
www.trafmonster.biz

195.88.209.254
opazhopa.net

201.140.57.249
browndrives.com	Zeus
sdlls.ru	Zeus drop zone
sigmarkds.com
vstd.kz

202.103.221.20
*.cn.wwvv.us
*.wwvv.us
baidu.cn.wwvv.us
cn.wwvv.us
bbs2.mapeak.com	Win32/Dogrobot

204.12.242.210	money mule recruiters
www.ckwison.info

204.45.134.154	money mule recruiters
server.copyserver.com
www.52qingshu.com

204.45.134.156	money mule recruiters
ns2.copyserver.com

206.217.201.32
krutikservers.com	dedicated malware hosting firm
adobecompany.co.uk	rogue

207.58.177.96	IP address previously listed
androthis.cz.cc		Malicious software includes 23 trojan(s).
hujurus.cz.cc	Malicious software includes 7 trojan(s), 6 exploit(s).

208.110.80.34
208.110.80.34.krutikservers.com
kalipso19.cc
rjevski.com

208.110.80.35
208.110.80.35.krutikservers.com
ns1.mamacholi.net
ns10.slkasilvoberk.com
slkasilvoberk.com

208.110.80.36
208.110.80.36.krutikservers.com
ns1.solojumper.com

208.110.80.37
208.110.80.37.krutikservers.com

208.110.80.38
208.110.80.38.krutikservers.com

208.110.80.39

208.110.80.50
krutikservers.com	dedicated malware hosting firm
*.ultraresults.net
adsl-line.biz
mail.ultraresults.net
ultraresults.net

208.110.80.58
amason.net
dunsmuir.amason.net

208.89.210.118
*.espmexusa.ru
*.tunisianowar.ru
espmexusa.ru
schastlivieiveselierebyta0002.com
tunisianowar.ru
www.espmexusa.ru	Zeus
www.tunisianowar.ru

209.159.156.162	money mule recruiters
ns1.surplususa.cc

209.159.156.163	money mule recruiters
ns1.usabonds.cc

209.159.156.164	money mule recruiters
ns1.usafunds.cc

211.189.69.112
lovecodi.com	visiting this web site may harm your computer. Malicious software includes 59 scripting exploit(s), 2 trojan(s).

212.124.109.216	trojan data collector

212.124.112.27	IP address previously listed
deko-life.ru	1 domain(s) appear to be functioning as intermediaries for distributing malware to visitors of this site

212.124.113.0/24	AS47328 TRI-AS True Records Inc.

212.124.113.69
brinnite.com	malvertiser registration address 1116 Penn Street, "Saint Louis", MO

212.124.113.70	malvertising activity

212.124.113.79
trendinfluencemedia.com	malvertisers: text and flash content stolen from trendinfluence.com to spoof web sites
mail.trendinfluencemedia.com

212.124.113.80	malvertising activity
mail.stuffadagency.com
stuffadagency.com

212.124.113.108
webexservice.com	rogue: not webex.com

212.124.113.112
visitracker.net	tracker

212.124.123.206
poremontu.ru	Malicious software includes 7 trojan(s), 7 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.

212.124.127.10	Phoenix exploit kit, fake anti-virus
212.124.127.7	Phoenix exploit kit, trojan TDSS
212.124.127.8	Phoenix exploit kit, fake anti-virus
212.124.127.9	Phoenix exploit kit, trojan

216.180.239.112
*.modulosnovs.com
modulosnovs.com	trojan Banker

216.24.193.181
fastgoal.ru	Zeus
oneboy.ru

217.23.6.215	IP address previously listed
mail.watch-movies-online-for-free.net	piracy

219.147.255.39
extratopupgrade.ru	Zeus
realemotions.ru

22.33.44.55
clear-files.com	Trojan Renos
ns1.50names.com
ns2.50names.com
shijingfang.com

4.8.2.0
data-fix.net	Trojan Renos
data-mortgage.com	Trojan Renos

46.17.96.0/21	hostkey network AS48211 MTLM-NET Mir Telematiki Ltd

46.17.96.2
satdudez.org	piracy
satpimps.com	piracy

46.17.96.229
thewarezscene.org	piracy
www.thewarezscene.org	piracy

46.17.96.231
pornhousebb.com
pornreloaded.org
wrzboard.org	piracy
www.porn-fanatic.org
www.wrzboard.org	piracy

46.17.96.250
movies-online-free.org	piracy
www.movies-online-free.org

46.17.100.7
coachhandbags-onsale.com	product piracy
uggsonsale-uggsonsale.com

46.17.100.26
ugg-boots-outletsstores.com	product piracy
ugg-boots-outletstore.com

46.17.100.27
uggoutlet-store-online.com	product piracy
uggsoutlet-store-online.com

46.17.100.28
cheap-ugg-bootsuk.com	product piracy
cheapugg-bootsuk.com

46.17.100.29
uggs-outletonline.com	product piracy
uggs-outletsonline.com

46.17.100.30
uggs-bootssaleuk.com	product piracy

46.17.100.40
ns3.pakcyberarmy.net

46.17.100.67
leecher.to	piracy, Windows 7 cracks
www.leecher.to

46.17.100.99	piracy
*.lien-torrent.com
emule1.com
lien-torrent.com
web.zomine.com
www.emule1.com
www.lien-torrent.com
zomine.com

46.17.101.1
projectwrz.com	piracy

46.17.101.2	SpyEye command and control server

46.17.101.3
rapidbyte.org	piracy
www.rapidbyte.org

46.17.101.7
aslan-host.info
brain-gains.info
family-safe.info
sale-itemz.info
snowdayz.info	spam

46.4.194.162	Trojan SpyEye config file

46.4.194.185	Trojan SpyEye config file
mail.sploitserver.eu
sploitserver.eu

46.4.196.131	Trojan SpyEye

58.221.246.164
gj.13ybx.com	Trojan.Generic

62.109.23.18	Phoenix exploit kit
microsoftiii.ru	Zeus

62.109.23.49	RBN lease

62.122.73.140	money mule recruiters, IP address previously listed
dowson-networkssvc.cc
drysdale-group-inc.cc
mx.dowson-networkssvc.cc
mx.ratliff-groupinc.com
oliver-sonsinc.cc

62.122.73.141	money mule recruiters, IP address previously listed
mx.deltagroup-inc.com
mx.staffords-groupsvc.net
mx.worldtransfer-inc.net
primewareinfo.com
windowspolicysrv3.com

62.122.73.142	money mule recruiters, IP address previously listed
atg-grouptech.net
mx.atg-grouptech.net
mx.mckeanstergroup-inc.cc

63.223.127.199
sakhg34fhelpweb.co.cc	redirects to fake anti-virus
*.3.xe-xenical.com	pharma
*.68.3.xe-xenical.com
*.mail.xe-xenical.com	pharma
*.xe-xenical.com
203.68.3.xe-xenical.com
3.xe-xenical.com
68.3.xe-xenical.com
admin.mail.xe-xenical.com	pharma
mail.xe-xenical.com	pharma
xe-xenical.com

64.191.57.97	OnkelHost.ru
64.191.57.98	OnkelHost.ru
64.191.57.99	OnkelHost.ru
64.191.57.100	OnkelHost.ru

64.191.57.101	OnkelHost.ru
mail.onlinecasinosgames-onlinegambling.com
ns.onlinecasinosgames-onlinegambling.com
t143.emailjiajia.com
www.onlinecasinosgames-onlinegambling.com	(registration with Hosthane Internet Hizmetleri)

64.191.57.102	OnkelHost.ru

64.191.57.103	OnkelHost.ru
wholefiles.in	trojan
wwwfulldata.in	trojan

64.191.57.104	OnkelHost.ru
64.191.57.105	OnkelHost.ru
64.191.57.106	OnkelHost.ru
64.191.57.107	OnkelHost.ru
64.191.57.108	OnkelHost.ru
64.191.57.109	OnkelHost.ru
64.191.57.110	OnkelHost.ru

64.20.54.202	money mule recruiters
mx.acoon-groupllc.cc

64.20.54.204	money mule recruiters
file-groupllc.cc
mx.diligence-groupinc.cc
mx.file-groupllc.cc

64.20.54.205	money mule recruiters
mx.amina-groupinc.cc

64.20.54.206	money mule recruiters
acoon-groupllc.cc

64.21.33.205
adwave.us	registrant address 1116 Penn Street, "Saint Louis", MO
calaghancorp.com

64.85.164.220	RBN lease
gixen.com
www.gixen.com

64.85.169.145
ibis.internetbs.com
internetbs.com	known bad actor
mail.internetbs.com
ns1.internetbs.com
stdwizard.org

64.85.169.70	RBN lease

64.85.169.71	RBN lease
knuth.gixen.com
ns2.kotapopusu.cc
ns2.mamacholi.net
ns2.miroslavanabz.cc

64.85.169.72	RBN lease

64.85.169.73	RBN lease
ns2.runlesrun.cc
ns2.staryjsledopyt.cc
tesla.gixen.com

64.85.169.74	RBN lease
ns2.staryjsledopyt.net

64.85.169.75	RBN lease

64.85.169.76	RBN lease

64.85.169.77	RBN lease

64.85.169.78	RBN lease

66.199.236.114	money mule recruiters, IP address previously listed
ns2.austdec.cc
ns2.folowdns.cc
ns2.gbtrade.cc

66.199.236.115	money mule recruiters, IP address previously listed
ns2.libunitau.cc
ns2.ringtons.cc
ns2.ukearnings.cc

66.199.236.116	money mule recruiters, IP address previously listed
ns2.auusdec.cc
ns2.pageredns.cc
ns3.ukdns.cc
ns3.uknamo.com

66.29.36.40
*.actualkeylogger.com	keylogger
*.actualspy.com	keylogger
*.creampiewriter.com
actualkeylogger.com	keylogger
actualspy.com	keylogger
creampiewriter.com
www.actualkeylogger.com	keylogger
www.actualspy.com	keylogger

67.228.144.0/24	(67.228.144.0-67.228.144.127, 67.228.144.128-67.228.144.143, 67.228.144.192-67.228.144.223, and 67.228.144.224-67.228.144.255 Innovation IT Solutions Corp.: Andrey Nesterenko) AS36351 SOFTLAYER Technologies Inc.

67.228.144.35
twittersitemap.com	brand jacker
twsitemap.com
twusers.com

67.228.144.43	likely child abuse
*.adultslessons.net
*.american-milfs.net
*.back-door-mature.net
*.boysfeedmoms.net
*.cumonvirgins.net
*.drunkmilfs.net
*.fuckedfirsttime.com
*.hotgranniesfuck.com
*.lustwidows.com
*.maturepornscenes.com
*.moms-dreams.net
*.moms-in-office.net
*.momsandswingers.net
*.momsfilms.net
*.momsfuckgirls.net
*.ridingmoms.net
*.true-mature.net
*.wickedmoms.net
*.willingmoms.net
adultslessons.net
american-milfs.net
back-door-mature.net
boys-fill-moms.com
boysfeedmoms.net
cumonvirgins.net
fuckedfirsttime.com
hostmaster.adultslessons.net
hostmaster.american-milfs.net
hostmaster.back-door-mature.net
hostmaster.boys-fill-moms.com
hostmaster.boysfeedmoms.net
hostmaster.cumonvirgins.net
hostmaster.drunkmilfs.net
hostmaster.fillmoms.net
hostmaster.fuckedfirsttime.com
hostmaster.hidden-mature-videos.net
hostmaster.hotgranniesfuck.com
hostmaster.lustwidows.com
hostmaster.maturepornscenes.com
hostmaster.mom-and-stud.com
hostmaster.moms-dreams.net
hostmaster.moms-in-office.net
hostmaster.momsandswingers.net
hostmaster.momsfilms.net
hostmaster.officemomssecrets.com
hostmaster.oldwithgirl.net
hostmaster.ridingmoms.net
hostmaster.seducing-moms.com
hostmaster.true-mature.net
hostmaster.wickedmoms.net
hostmaster.willingmoms.net
hotgranniesfuck.com
lustwidows.com
mail.american-milfs.net
mail.back-door-mature.net
mail.boysfuckmoms.net
mail.cumonvirgins.net
mail.drunkmilfs.net
mail.fillmoms.net
mail.momsfilms.net
mail.momsfuckgirls.net
mail.ridingmoms.net
mail.seducing-moms.com
mail.true-mature.net
mail.willingmoms.net
maturepornscenes.com
moms-dreams.net
momsandswingers.net
momsfilms.net
momsfuckgirls.net
officemomssecrets.com
ridingmoms.net
wickedmoms.net
willingmoms.net

69.10.44.187	money mule recruiters
ns1.gbtrade.cc

69.10.44.188	money mule recruiters
ns1.ukdns.cc
ns1.ukearnings.cc
ns1.uknamo.com

69.10.44.189	money mule recruiters
ns1.ukansnami.com
ns1.uksource.cc
ns1.zonensuk.cc

69.162.119.218
yourwatchesstore.com	product piracy
*.economicturnaround.net
economicturnaround.net
etruereligionjeans-store.com
mail.predictinggrowth.com
mail.recoupinglosses.com

69.197.128.114	trojan data receptor
krutikservers.com	dedicated malware hosting firm
05584b4eff1eaa28.com
2cbefb47060e6bc9.com
37bf278f43c6b010.com
3c386b38174d842c.com
4033da9724eed79f.com
4db3fbcf385b84a7.com
5831c81cfa6ca6a7.com
633f197ada10ea81.com
764061ff508d4a4c.com
7c9954a76eeca202.com
7fd61bb596fa4277.com
826ccb84c37c7dc1.com
880265094dc14384.com
8f36492f1cbd9183.com
9daa449337f8adeb.com
9f7a30252e13d39d.com
a11cddb7a03a076f.com
a709d8c6a44be227.com
aa0131c1c816119d.com
abda114debec233b.com
b16f0f08c55e9cc5.com
b7bb5832b25c7869.com
c5667d150fe0b41b.com
cef1cef16e9471c9.com
cefd9f37178eb5e4.com
dd79e9f502426e84.com
e395368c52b40e2a.com
ef0a5ecbf42d83ed.com
f532f7f478af8e7a.com
f598f03740695a8d.com
fc03ec727f8861ef.com
fd06366c338dc774.com
fe59294ea5f6f07c.com

69.197.128.178
krutikservers.com	dedicated malware hosting firm
castingforw.com
doyoulikeits.com
fastlovernow.com
geshengs.com
kleviysayti.com
supnights.com

69.197.128.186
krutikservers.com	dedicated malware hosting firm

69.197.177.165
updates-palace.com

69.197.177.166
updates-software.com	rogue

69.197.177.170
krutikservers.com	dedicated malware hosting firm

69.197.181.50
traffic-analytics.net	Malicious software includes 6853 scripting exploit(s).	Andrey Polev
traffic-hub.net
krutikservers.com	dedicated malware hosting firm

69.50.192.97	money mule recruiters, IP address previously listed
ns3.surplususa.cc
ns3.vphosts.com

69.50.220.119	money mule recruiters
freeinfoblast.com
ns.anmhosting.com
ns3.usabonds.cc

69.50.220.120	money mule recruiters
monteith.net
ns2.anmhosting.com

69.50.220.125	money mule recruiters
ns.monteith.net
ns3.usafunds.cc

69.65.10.18
buyvideo.info	NeoSploit
casinojasm.info	NeoSploit
jasmwin.info	NeoSploit
loanvideo.info	NeoSploit
marketingjasm.info	NeoSploit
marketvideo.info	NeoSploit
musicjasm.info	NeoSploit
pixelvideo.info	NeoSploit
topjasm.info	NeoSploit

72.41.115.170
elsoplongt.com	W32/Bamital follow on download site

74.117.180.216
*.accuratefiles.com
accuratefiles.com	W32/Bamital follow on download site
www.accuratefiles.com

74.86.44.48
ns1.counselingcareer.net	name server for malware domain

76.10.214.62
2go4corp.com
ns1.highlori.com
ns1.praddo.com
ns1.robotcop.net
ns1.stereoflavaz.net	name server for Zeus domains
ns1.webmailcenters.net
ns1.zip-fair.com

76.73.47.18	fake anti-virus
antivirussystem2011net.com
certifiedsecurepaymentsservice.com
mail.antivirussystem2011net.com
ns1.antivirussystem2011net.com
ns2.antivirussystem2011net.com
www.antivirussystem2011net.com

76.73.47.19	money mule recruiters
90nnn.com

76.73.47.20	fake anti-virus
antivirussystem2011ltd.com
mail.antivirussystem2011ltd.com
ns1.antivirussystem2011ltd.com
ns2.antivirussystem2011ltd.com

76.73.47.21	fake anti-virus
10nnn.com
70nnn.com
antivirussystem2011corp.com
mail.antivirussystem2011corp.com
ns1.antivirussystem2011corp.com
ns2.antivirussystem2011corp.com
www.antivirussystem2011corp.com

76.73.47.26	money mule recruiters
ns2.surplususa.cc

76.73.47.27	money mule recruiters
ns2.usabonds.cc

76.73.47.28	money mule recruiters, IP address previously listed
ns2.usafunds.cc

77.232.82.24
humanrightsbusiness.org	compromised
*.shepherdsex.com
shepherdsex.com
tusch.dk	Trojan SpyEye drop zone

77.232.85.174	IP address previously listed
update.checkconfig.info	Trojan Otran
*.checkconfig.info	Trojan Otran
*.langnghe.net
*.physikers.net
*.quicknews.info
5php.net
checkconfig.info	Trojan Otran
checkoutlook.info	W32.Imaut, visiting this web site may harm your computer. Malicious software includes 70 trojan(s), 34 worm(s). Successful infection resulted in an average of 56 new process(es) on the target machine.
comicosy.com
ecoseworld.com
langnghe.net	W32.Imaut, HTTP Fake Antivirus Install Request 4, visiting this web site may harm your computer. Malicious software includes 284 trojan(s), 33 worm(s). Successful infection resulted in an average of 39 new process(es) on the target machine.
quicknews.info
www.langnghe.net
www.quicknews.info

78.26.187.108	W32/Bamital follow on download IP, IP address previously listed

78.46.22.251	Trojan SpyEye
*.1001dieta.ax3.net
*.116profile.1001dieta.ax3.net
*.116profile.dietapro.ax3.net
*.116profile.mirdiet.ax3.net
*.116profilemessages.1001dieta.ax3.net
*.116profilemessages.dietapro.ax3.net
*.178.38.116profile.1001dieta.ax3.net
*.178.38.116profile.dietapro.ax3.net
*.178.38.116profile.mirdiet.ax3.net
*.38.116profile.1001dieta.ax3.net
*.38.116profile.dietapro.ax3.net
*.38.116profile.mirdiet.ax3.net
*.38.116profilemessages.1001dieta.ax3.net
*.38.116profilemessages.dietapro.ax3.net
*.6461796c6967687477696e64796a616e6540686f746d616message.dietapro.ax3.net
*.6461796c6967687477696e64796a616e6540686f746d616message.mirdiet.ax3.net
*.and.come.view-pictures.1001dieta.ax3.net
*.and.come.view-pictures.mirdiet.ax3.net
*.ax3.net
*.bos.1001dieta.ax3.net
*.bos.mirdiet.ax3.net
*.com2fhttp3awww.mirdiet.ax3.net
*.come.view-pictures.1001dieta.ax3.net
*.come.view-pictures.mirdiet.ax3.net
*.dietapro.ax3.net
*.domains.1001dieta.ax3.net
*.domains.dietapro.ax3.net
*.domains.mirdiet.ax3.net
*.ebay.1001dieta.ax3.net
*.ebay.dietapro.ax3.net
*.ebaymotors.ebay.1001dieta.ax3.net	brand jacker
*.ebaymotors.ebay.dietapro.ax3.net	brand jacker
*.euro.1001dieta.ax3.net
*.euro.dietapro.ax3.net
*.euro.mirdiet.ax3.net
*.inktest.dietapro.ax3.net
*.inktest.mirdiet.ax3.net
*.japan.mirdiet.ax3.net
*.lax.mirdiet.ax3.net
*.lax1.1001dieta.ax3.net
*.lax1.dietapro.ax3.net
*.lax1.mirdiet.ax3.net
*.mirdiet.ax3.net
*.phobos.mirdiet.ax3.net
*.pravda2.ax3.net
*.sadogorod.com
*.sgwww.dietapro.ax3.net
*.view-pictures.1001dieta.ax3.net
*.view-pictures.mirdiet.ax3.net
*.wip3.dietapro.ax3.net
*.www.1001dieta.ax3.net
*.www.dietapro.ax3.net
1001dieta.ax3.net
116profile.1001dieta.ax3.net
116profile.dietapro.ax3.net
116profile.mirdiet.ax3.net
116profilemessages.1001dieta.ax3.net
116profilemessages.dietapro.ax3.net
17-250-248-77.dietapro.ax3.net
178.38.116profile.1001dieta.ax3.net
178.38.116profile.dietapro.ax3.net
178.38.116profile.mirdiet.ax3.net
216.178.38.116profile.1001dieta.ax3.net
216.178.38.116profile.mirdiet.ax3.net
264770464.6461796c6967687477696e64796a616e6540686f746d616message.dietapro.ax3.net
264770464.6461796c6967687477696e64796a616e6540686f746d616message.mirdiet.ax3.net
38.116profile.1001dieta.ax3.net
38.116profile.dietapro.ax3.net
38.116profile.mirdiet.ax3.net
38.116profilemessages.1001dieta.ax3.net
38.116profilemessages.dietapro.ax3.net
3dns-3.1001dieta.ax3.net
3dns-3.mirdiet.ax3.net
6461796c6967687477696e64796a616e6540686f746d616message.dietapro.ax3.net
6461796c6967687477696e64796a616e6540686f746d616message.mirdiet.ax3.net
6apart.1001dieta.ax3.net
6apart.dietapro.ax3.net
a17-112-144-50.mirdiet.ax3.net
a17-112-152-32.dietapro.ax3.net
a17-250-248-150.mirdiet.ax3.net
a5.1001dieta.ax3.net
a5.dietapro.ax3.net
a5.mirdiet.ax3.net
a638.phobos.mirdiet.ax3.net
accs-dietapro.ax3.net
activities.mirdiet.ax3.net
adcl.japan.mirdiet.ax3.net
admin.mirdiet.ax3.net
adobe-dns-2.dietapro.ax3.net	brand jacker
adobe-dns-2.mirdiet.ax3.net	brand jacker
adobe-dns-3.mirdiet.ax3.net	brand jacker
adobe-dns.mirdiet.ax3.net
afsstore-new.euro.1001dieta.ax3.net
afsstore-new.euro.dietapro.ax3.net
afsstore-new.euro.mirdiet.ax3.net
afsstore.euro.dietapro.ax3.net
am-red.1001dieta.ax3.net
am-red.dietapro.ax3.net
am-red.mirdiet.ax3.net
and.come.view-pictures.1001dieta.ax3.net
and.come.view-pictures.mirdiet.ax3.net
api.dietapro.ax3.net
appledirectory.dietapro.ax3.net	brand jacker
appledirectory.mirdiet.ax3.net	brand jacker
ardownload.mirdiet.ax3.net
arribada.ebay.dietapro.ax3.net	brand jacker
articles.dietapro.ax3.net
asia.dietapro.ax3.net
asw2.dietapro.ax3.net
au.1001dieta.ax3.net
au.mirdiet.ax3.net
avto-1001dieta.ax3.net
avto-mirdiet.ax3.net
ax3.net
ax3.sioru.com
background-mirdiet.ax3.net
bc-india-1-2.1001dieta.ax3.net
bc-india-1-2.mirdiet.ax3.net
bc-japan-1-2.dietapro.ax3.net
bc-japan-1-2.mirdiet.ax3.net
beatfiltering.com2fhttp3awww.mirdiet.ax3.net
beta.www.1001dieta.ax3.net
bh407.1001dieta.ax3.net
bh407.dietapro.ax3.net
bh407.mirdiet.ax3.net
bigip-dmz.dietapro.ax3.net
bigip-dmz.mirdiet.ax3.net
bizwww.dietapro.ax3.net
blog.dietapro.ax3.net
blog.mirdiet.ax3.net
bos-mail2.domains.1001dieta.ax3.net
bos-mail2.domains.mirdiet.ax3.net
bos-ns1.bos.1001dieta.ax3.net
bos-ns1.bos.mirdiet.ax3.net
bos.1001dieta.ax3.net
bos.mirdiet.ax3.net
bos1-mail.domains.dietapro.ax3.net
bos2-mail.domains.dietapro.ax3.net
broadcast.dietapro.ax3.net
broadcast.mirdiet.ax3.net
broker.dietapro.ax3.net
broker.mirdiet.ax3.net
broker.wip3.dietapro.ax3.net
browseusers.mirdiet.ax3.net
bulletin.dietapro.ax3.net
bz2.mirdiet.ax3.net
c13-b2b-blog-lb.dietapro.ax3.net
c13-b2b-prod-fa-web-lb.dietapro.ax3.net
c13-b2b-prod-fa-web-lb.mirdiet.ax3.net
c13-b2b-publish-lb.dietapro.ax3.net
c13-b2b-publish-lb.mirdiet.ax3.net
chistajakozha.ax3.net
com2fhttp3awww.mirdiet.ax3.net
come.view-pictures.1001dieta.ax3.net
come.view-pictures.mirdiet.ax3.net
cq.rv.ua
dietapro.ax3.net
domains.1001dieta.ax3.net
domains.dietapro.ax3.net
domains.mirdiet.ax3.net
ebay.1001dieta.ax3.net	brand jacker
ebay.dietapro.ax3.net	brand jacker
ebaymotors.ebay.1001dieta.ax3.net	brand jacker
ebaymotors.ebay.dietapro.ax3.net	brand jacker
euro.1001dieta.ax3.net
euro.dietapro.ax3.net
euro.mirdiet.ax3.net
formator.ax3.net
freemen.dp.ua
gkkk.ru
greenpower.pp.ua
inktest.dietapro.ax3.net
inktest.mirdiet.ax3.net
japan.mirdiet.ax3.net
kap.biz.ua
kissmoto.ax3.net
lax.mirdiet.ax3.net
lax1.1001dieta.ax3.net
lax1.dietapro.ax3.net
lax1.mirdiet.ax3.net
lumi05.ax3.net
mirdiet.ax3.net
mozyrroo.by
ns1.ax3.net
phobos.mirdiet.ax3.net
pravda2.ax3.net	brand jacker
preobrazenie.ax3.net
prikoli.ax3.net
rabotni.ax3.net
sgwww.dietapro.ax3.net
smartika.net
sozlik.com
tutaev.ax3.net
v-telefon.ru
view-pictures.1001dieta.ax3.net
view-pictures.mirdiet.ax3.net
wip3.dietapro.ax3.net
www.1001dieta.ax3.net
www.dietapro.ax3.net
www.kap.biz.ua
www.pravda2.ax3.net	brand jacker
zimmblog.ax3.net

78.46.76.170
moviedot.net	Trojan Renos
tagware.net	Trojan Renos
webmoviedot.com

82.146.47.58	Zeus

82.80.231.163
300.granthost.org
databy.com
gomelauto.com
igromobile.net
mail.300.granthost.org
mail.igromobile.net
mail.ns1.300.granthost.org
mail.tehniki.net
ns1.300.granthost.org
prodaga.net
tehniki.net
webdataby.com	appeared to function as intermediaries for the infection of 9 other site(s)

83.222.127.12
4w8loss.com	Trojan TDSS
extremedesignuk.com	Trojan TDSS
puckettphoto.com	Trojan TDSS

83.222.127.174
mulostserver.com	Malicious software includes 6 scripting exploit(s), 6 trojan(s), 6 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.
ns1.w.hostgaming.com.br
	
83.222.127.70
phcconsulting.info	Zeus

88.198.36.61	Trojan SpyEye.H

88.198.39.206	IP address previously listed
analservice.eu	Trojan SpyEye
mail.analservice.eu

88.198.40.111	Trojan SpyEye config file
rawmode.org

90.123.15.18
ns2.counselingcareer.net	name server for malware domain

91.193.192.11	IP address previously listed
aunrad.cz.cc
oiufukkwu.co.cc	visiting this web site may harm your computer. Malicious software includes 168 exploit(s), 159 trojan(s).

91.193.192.21	IP address previously listed
sda2a.ipq.co	trojan

91.193.192.90	W32/Bamital follow on download IP, IP address previously listed
7boxx.cz.cc
7cef.cz.cc
7dns.cz.cc
7ffuu.cz.cc
7forev.cz.cc
7gvo.cz.cc
7kolo.cz.cc
7louis.cz.cc
7murrs.cz.cc
7ops.cz.cc
7phx.cz.cc
7rlu.cz.cc
7sti.cz.cc
7tokio.cz.cc
7toxx.cz.cc
7toy.cz.cc
7uax.cz.cc
7watt.cz.cc
7zhen.cz.cc
8itseox.cz.cc
8kirjax.cz.cc
8krudxp.cz.cc

91.213.126.90	IP address previously listed
*.123.30d5546ce2d9ab37.d99q.cn
*.3chailave.cn
*.at.8b97bb04d22733c8.d99q.cn
*.dolcegabbana.djbormand.cn
*.freepages.at.8b97bb04d22733c8.d99q.cn
*.gowlave.cn
*.xmidnight.cn
free0game.cn
freepages.at.8b97bb04d22733c8.d99q.cn
hostmaster.3s8v.cn
hostmaster.gowlave.cn
hostmaster.kipyatok.cn
hostmaster.klitar.cn
hostmaster.miralive.cn
hostmaster.socksps.ru
smsphonesymb02.cn
telemedia.m77s.cn
www.123.30d5546ce2d9ab37.d99q.cn
www.dolcegabbana.djbormand.cn
www.freepages.at.8b97bb04d22733c8.d99q.cn
www.gowlave.cn
www.xmidnight.cn

91.215.158.57	abused IP address
new-softdriver.tk	fake anti-virus
*.8tk.tk
*.at-tibyan.tk
*.com.tk
*.davidsfondslommel.tk
*.eislam.tk
*.ga.naik.kelas.sampe.pindah.8tk.tk
*.gen.tk
*.gesundeschule.tk
*.huvuden.i.q3tc.tk
*.hzn1.tk
*.i.q3tc.tk
*.kokcito.tk
*.mi51.tk
*.miskin.tk
*.naik.kelas.sampe.pindah.8tk.tk
*.oper.tk
*.pindah.8tk.tk
*.q3tc.tk
*.sampe.pindah.8tk.tk
*.serafino.tk
*.sexkanjer.tk
*.sisqo.tk
*.tk
*.tk.tk
*.webberop.tk
*.wow-wotlkbeta.tk
-a-r-e-z.tk
-bancopopular.tk
-nz.tk
00101001.tk
1.tk
1417.tk
1423.tk
17live.tk
17tahun.tk
3.tk
3039.tk
4.tk
5.tk
6.tk
7.tk
8.tk
8tk.tk
a.tk
adult-central.tk
alamniyat.tk
alcoholicsunited.tk
amyleeobsession.tk
ano-mail.tk
arabgirlsgonewild.tk
arcass.tk
arpy.tk
asal.tk
asud-nz.tk
at-tibyan.tk
b.tk
bagaca.tk
batama.tk
beatdodgeball.tk
bi.tk
biancadark.tk
bildox.tk
bill.tk
bintangmawar.tk
bnc.tk
boei.tk
boogiedownent.tk
buddychat.tk
bvb09.tk
camx.tk
carbonia.tk
carl-blum-haus.tk
citypostexpress.tk
com.tk
conteir.tk
crims.tk
cruzadamorada.tk
cybercrime.tk
cyberjk.tk
d.tk
dalnet.gen.tk
davidsfondslommel.tk
diri.karena.miskin.tk
distortionskate.tk
dor.tk
dvd2v.tk
e.tk
egyptianhak.tk
eislam.tk
enza.tk
estrenosdivx.tk
f.tk
fotoherman.tk
g.tk
ga.naik.kelas.sampe.pindah.8tk.tk
gen.tk
gesundeschule.tk
gratismovies.tk
grupo-bancopopular.tk
h.tk
happynartopa.tk
hovering.over-me.tk
huvuden.i.q3tc.tk
hzn1.tk
i.q3tc.tk
icecubez.tk
iklite.tk
indonesia.tk
isai.tk
isthisuser.tk
italier.tk
jonathan-ferguson.tk
jual.diri.karena.miskin.tk
jusstudenten.tk
k-thx.tk
kacjjr.tk
karena.miskin.tk
kashan.tk
kazaalite.tk
kecil.sering.ga.naik.kelas.sampe.pindah.8tk.tk
kelas.sampe.pindah.8tk.tk
klickar.huvuden.i.q3tc.tk
knot.tk
kokcito.tk
lagi.pakai.bnc.tk
lennynjeru.tk
lucky-cat.tk
luis-hack.tk
mail.ts4free.tk
manganzoides.tk
mi51.tk
miskin.tk
mr.sisqo.tk
muwahideen.tk
mx.undernet.tk
naik.kelas.sampe.pindah.8tk.tk
noreversedns.tk
ns1.webberop.tk
ns2.serafino.tk
o.tk
oceanus.tk
oper.tk
over-me.tk
ozgunticaret.tk
ozoo.tk
ozooo.tk
pakai.bnc.tk
philla.tk
pinayscandal.com.tk
pindah.8tk.tk
please.stop.hovering.over-me.tk
ppgy.net
proi.tk
q-ik.tk
q.tk
q3tc.tk
r.tk
rawranx.tk
rokkia.tk
s.tk
s3x.tk
sabac.tk
sampe.pindah.8tk.tk
serafino.tk
sering.ga.naik.kelas.sampe.pindah.8tk.tk
sex24.tk
sexkanjer.tk
sextalk.tk
show.tk
sisqo.tk
sk8boarding-is-not-a-crime.tk
spaz.tk
speelman.tk
stop.hovering.over-me.tk
sutabi.tk
t.tk
tabarnak.tk
tele.tk
thangchoduc.tk
tifanyteen.tk
timwolla.tk
tk.tk
toji.tk
toptip.tk
trevorkay.tk
ts4free.tk
u.tk
undernet.tk
uwininstaller.tk
v.tk
videochat.tk
w.tk
waktu.kecil.sering.ga.naik.kelas.sampe.pindah.8tk.tk
webberop.tk
wow-wotlkbeta.tk
www.alcoholicsunited.tk
www.at-tibyan.tk
www.bagaca.tk
www.bintangmawar.tk
www.bvb09.tk
www.citypostexpress.tk
www.davidsfondslommel.tk
www.eislam.tk
www.gesundeschule.tk
www.hzn1.tk
www.luis-hack.tk
www.mi51.tk
www.oper.tk
www.rokkia.tk
www.s.tk
www.sabac.tk
www.sexkanjer.tk
www.wow-wotlkbeta.tk
x.tk
x16x.tk
xinhgai.tk
y.tk
z86wy.tk
zkmm.tk
zlang.tk

91.217.162.171	IP address previously listed
ua674534636.co.cc	visiting this web site may harm your computer.

91.218.230.225
fuckvideos.ru	over the past 90 days, 75 page(s) resulted in malicious software being downloaded and installed without user consent.

91.218.230.83
sasha-mashu.ru	visiting this web site may harm your computer. Malicious software includes 14 trojan(s), 13 exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.

91.218.231.111	IP address previously listed
suicud.net	bot

91.218.231.113
xengine.ru	over the past 90 days, 226 page(s) resulted in malicious software being downloaded and installed without user consent.

92.61.146.120
*.18story.ru
*.adultmir.ru
*.bcn.bz
*.bestydniki.ru	redirects to rogue
*.boi-baba.ru
*.budblije.ru
*.cekclove.ru
*.ded-i-devka.ru
*.devil-video.ru
*.doxxx.ru
*.erovkontakte.ru
*.eurovision.in	redirects to exploits
*.femdom-video.ru
*.footbaby.ru
*.gaygroup.ru
*.gold-movie.ru
*.gorlominet.ru
*.grouptrah.ru
*.hochu-tebya.ru
*.infozip.ru
*.lcool.ru
*.love.barcelona.org.ru
*.mambasex.ru
*.moylove.ru
*.nasadi.ru
*.nicegays.ru
*.nigga-gop-stop.ru	redirects to rogue
*.odnanochniki.ru
*.odnonochnici.ru
*.odnonochniki.ru
*.ojaebu.ru
*.pis-pis.ru
*.porevodoma.ru
*.pornodoska.ru
*.pornoebuns.ru
*.privatesexy.ru
*.referatall.ru
*.seksoklassniki.ru
*.sexsdamoy.ru
*.sexyplanet.ru
*.spain.org.ru
*.super-siski.ru
*.sweetblonde.ru
*.trans-bdsm.ru
*.trans-love.ru
*.vip-loads.ru
*.vkontakte-kontakte.ru
*.wecam.ru
*.xxxnights.ru
*.xxxodnoklassniki.ru
02ch.ru
18story.ru
adult-videos.ru
ahonkova.com
anonsleepover.com
bcn.bz
bestydniki.ru
boi-baba.ru
butterflytechnology.com.au
cekclove.ru
ded-i-devka.ru
devil-video.ru
dom2-sex.ru
doxxx.ru
erovkontakte.ru
erre-way.ru
espanol.org.ru
eurovision.in	redirects to exploits
femdom-video.ru
filmbaza.ru
filmesonline.ru
footbaby.ru
forsup.com
gaygroup.ru
girl1.eu
gorlominet.ru
grouptrah.ru
hochu-tebya.ru
htmlwww.odnanochniki.ru
i.love.barcelona.org.ru
igry2.ru
infozip.ru
istoriya-o.ru
jimm-download.ru
kabaeva.org.ru
kino-haus.ru
kinovektor.ru
lcool.ru
love.barcelona.org.ru
mail.gold-movie.ru
mail.just-kino.ru
mail.vip-loads.ru
mambasex.ru
moylove.ru
nasadi.ru
nicegays.ru
nigga-gop-stop.ru	redirects to rogue
odnanochniki.ru
odnoklanik.ru
odnoklassniki5.ru
odnolubowniki.ru
odnonochnici.ru
odnonochniki.ru
pis-pis.ru
polynesia.com.ru
polynesia.tk
porevodoma.ru
pornodoska.ru
pornoebuns.ru
pornwebcam.ru
privatesexy.ru
pytkanaulice.ru
seksoklassniki.ru
sex-traffic.ru
sexcash2.com
sexcashvip.ru
sexsdamoy.ru
sexyplanet.ru
shakira.su
spain.org.ru
spain.sc
super-siski.ru
sweet-fresh-tails.ru
sweetblonde.ru
trans-bdsm.ru
trans-love.ru
travel.spain.org.ru
twensafun.com
unionfilm.ru
via-gra.eu
vip-loads.ru
vipxxx.ru
vkontakte-kontakte.ru
vrazwode.ru
vzroslye-znakomstva.ru
wecam.ru
www.18story.ru
www.adultmir.ru
www.bcn.bz
www.bestydniki.ru
www.boi-baba.ru
www.cekclove.ru
www.ded-i-devka.ru
www.devil-video.ru
www.erovkontakte.ru
www.femdom-video.ru
www.footbaby.ru
www.gaygroup.ru
www.gorlominet.ru
www.grouptrah.ru
www.hochu-tebya.ru
www.infozip.ru
www.lcool.ru
www.mambasex.ru
www.megasisi.ru
www.moylove.ru
www.nasadi.ru
www.nicegays.ru
www.nigga-gop-stop.ru	redirects to rogue
www.odnanochniki.ru
www.odnolubowniki.ru
www.odnonochnici.ru
www.pics4pics.ru
www.pis-pis.ru
www.polynesia.com.ru
www.porevodoma.ru
www.pornodoska.ru
www.pornoebuns.ru
www.privatesexy.ru
www.pytkanaulice.ru
www.seksoklassniki.ru
www.sexsdamoy.ru
www.sexyplanet.ru
www.spain.org.ru
www.super-siski.ru
www.sweetblonde.ru
www.telkixxx.ru
www.trans-bdsm.ru
www.trans-love.ru
www.vkontakte-kontakte.ru
www.wecam.ru
www.xxxnights.ru
www.xxxodnoklasniki.ru
www.xxxodnoklassniki.ru
wwwcinema.ru
xklubnika.ru
xxxnights.ru
xxxodnoklasniki.ru
xxxodnoklassniki.ru
zorgkwaliteit.info
zorgkwaliteit.net

93.114.40.229	IP address previously listed
klikers.info	trojan
erobiksa.info
eroboyx.info
erochick.info
erodildo.info
erofreex.info
erogirlx.info
erokoffe.info
erokoks.info
eromanx.info
eromero.info
erospons.info
erotikax.info
erotrava.info
kliiker.info
kliikers.info
klikers.info
klikerss.info

93.114.40.231	money mule recruiters, IP address previously listed
astech-groupltd.co
fintec-ukltd.ws
money-visualuk.cc
mx.astech-groupltd.co
mx.fintec-ukltd.ws
mx.royalthelmas-group-llc.cc
mx.tinassanservice-groupllc.cc
tinassanservice-groupllc.cc
www.astech-groupltd.co

93.114.40.232	money mule recruiters, IP address previously listed
royalthelmas-group-llc.cc

93.114.40.239	IP address previously listed
5dcf361c821fd9f0482504a16ff03351.net
eef795a4eddaf1e7bd79212acc9dde16.net

94.228.214.179
cheap-bestshop.com	piracy

94.23.105.248
*.nicedrugs.ru	pharma
checkprotectionsecurity.com	fake anti-virus	
pcinspectionutility.com	fake anti-virus	
porntubecool.com
systemattentionutility.com	fake anti-virus	
systemsupervisioncenter.com
www.nicedrugs.ru
antibreakingsystem.com	fake anti-virus		
componentsprotector.com	fake anti-virus	

94.23.105.249
*.be-tested.ru
*.nicescope.ru
cikvrmvrz.co.cc
gertisvrv.co.cc
juqerqys.co.cc
qilvrlix.co.cc
sosvrdyt.co.cc
www.be-tested.ru
www.nicescope.ru
zigernos.co.cc
zitonvrm.co.cc
zozerperx.co.cc

98.141.220.106
*.campoet.info
*.estaminer.info
*.findingalliance.info
*.latend.info
*.levestar.info
*.ordinaryspectrum.info
*.parcher.info
*.rubbian.info
*.selectingamp.info
*.septato.info
*.thrived.info
campoet.info
estaminer.info
findingalliance.info
hostmaster.campoet.info
hostmaster.estaminer.info
hostmaster.findingalliance.info
hostmaster.fullerpotential.info
hostmaster.latend.info
hostmaster.levestar.info
hostmaster.ordinaryspectrum.info
hostmaster.parcher.info
hostmaster.prelander.info
hostmaster.rubbian.info
hostmaster.selectingamp.info
hostmaster.septato.info
hostmaster.thrived.info
latend.info
levestar.info
mx1.campoet.info
mx1.estaminer.info
mx1.findingalliance.info
mx1.fullerpotential.info
mx1.latend.info
mx1.levestar.info
mx1.ordinaryspectrum.info
mx1.parcher.info
mx1.prelander.info
mx1.rubbian.info
mx1.selectingamp.info
mx1.septato.info
mx1.thrived.info
ordinaryspectrum.info
parcher.info
rubbian.info
selectingamp.info
septato.info
thrived.info

98.141.220.114	money mule recruiters
gleichfalls-groupinc.co
imsystems-groupsvc.net
mx.gleichfalls-groupinc.co
mx.imsystems-groupsvc.net
mx.physisgroup-llc.co
mx.stile-groupllc.net
ns1.kotapopusu.net
ns1.miroslavanabz.cc
physisgroup-llc.co
reign-grouporg.cc
stile-groupllc.net

98.141.220.115	money mule recruiters
acoongroup-llc.co
arphis-goldgroup.cc
imsystems-group.cc
mx.acoongroup-llc.co
mx.arphis-goldgroup.cc
mx.imsystems-group.cc
mx.lbmgroupco.cc
mx.stile-groupllc.cc
ns1.kotapopusu.cc
stile-groupllc.cc

98.141.220.116	money mule recruiters
aimicgroup-llc.co
amina-groupinc.cc
arphisgoldgroup-inc.co
gleichfalls-group.cc
lbm-groupinc.com
lbmgroupco.cc
mx.aimicgroup-llc.co
mx.arphisgoldgroup-inc.co
mx.gleichfalls-group.cc
mx.lbm-groupinc.com
mx.reign-grouporg.cc
mx.stilegroup-llc.co
mx.usgroup-amina.co
ns1.kotapopusu.com
stilegroup-llc.co
usgroup-amina.co

98.141.220.117	money mule recruiters
i-compass-group.co
im-sysgroup.co
mx.i-compass-group.co
mx.im-sysgroup.co
ns1.staryjsledopyt.cc

98.141.220.118	money mule recruiters, IP address previously listed
aimic-groupllc.cc
atlant-usainc.net
diligence-groupinc.cc
mallow-group.cc
mx.aimic-groupllc.cc
mx.atlant-usainc.net
mx.mallow-group.cc

98.143.159.3
getyourmp3.net	piracy
ns2.getyourmp3.net
the-best-phone.com
www.getyourmp3.net