RBN IP List Update 4-3-2011


RBN IP List Removals:
122.224.6.164 replaced by 122.224.6.0/24
122.224.6.32 replaced by 122.224.6.0/24
122.224.6.36 replaced by 122.224.6.0/24
122.224.6.48 replaced by 122.224.6.0/24
195.39.196.43 replaced by 195.39.196.0/23
211.95.72.86 replaced by 211.95.72.0/24
211.95.72.87 replaced by 211.95.72.0/24
211.95.72.88 replaced by 211.95.72.0/24
211.95.72.93 replaced by 211.95.72.0/24
211.95.73.189 replaced by 211.95.73.0/24
211.95.79.114 replaced by 211.95.79.0/24
211.95.79.115 replaced by 211.95.79.0/24
211.95.79.229 replaced by 211.95.79.0/24
211.95.79.241 replaced by 211.95.79.0/24
211.95.79.242 replaced by 211.95.79.0/24
211.95.79.246 replaced by 211.95.79.0/24
211.95.79.57 replaced by 211.95.79.0/24
211.95.79.58 replaced by 211.95.79.0/24
211.95.79.6 replaced by 211.95.79.0/24
216.45.59.12 replaced by 216.45.59.0/24
216.45.59.18 replaced by 216.45.59.0/24
216.45.59.211 replaced by 216.45.59.0/24
216.45.59.214 replaced by 216.45.59.0/24
216.45.59.32 replaced by 216.45.59.0/24
216.45.59.33 replaced by 216.45.59.0/24
216.45.59.34 replaced by 216.45.59.0/24
216.45.59.35 replaced by 216.45.59.0/24
216.45.59.36 replaced by 216.45.59.0/24
216.45.59.37 replaced by 216.45.59.0/24
216.45.59.38 replaced by 216.45.59.0/24
216.45.59.39 replaced by 216.45.59.0/24
218.240.39.141 replaced by 218.240.39.0/24
218.240.39.146 replaced by 218.240.39.0/24
218.240.39.244 replaced by 218.240.39.0/24
218.75.110.152 replaced by 218.75.110.0/24
58.221.35.208 replaced by 58.221.35.0/24



RBN IP List Additions:

109.120.128.0/18	AS30968 INFOBOX-AS Infobox.ru Autonomous System

109.120.144.247	RFI exploits

109.236.80.0/20	AS49981 WorldStream AS

109.236.81.28
eva-marine.info	SQL injection

109.73.109.193	fake anti-virus

109.73.109.243	fake anti-virus
bandidora.cz.cc
granirana.cz.cc
htnbqitr.co.cc
nuadazan.cz.cc
uwybzuwe.co.cc

109.94.208.0/20	AS47860 Albino-ua-as LLC Albino 69% of sites tested infected other sites.

109.94.220.31
blogtofresh.com	appeared to function as an intermediary for the infection of 1 site(s) including exhibtionistamateurs.com

109.94.220.48
softmemory.ru
tiny-collection.ru	visiting this web site may harm your computer.
collectiontiny.ru	visiting this web site may harm your computer.
smakteyl.ru	Malicious software includes 1 trojan(s).
bandawww.ru	visiting this web site may harm your computer.

109.94.220.50
mialepromo.ru	U.S. Postal service brand jacker, dropper

109.94.220.51
mialepromo.ru	U.S. Postal service brand jacker, dropper

109.94.220.59
5647.in	visiting this web site may harm your computer. Malicious software includes 34 trojan(s), 8 exploit(s).
7660.in	visiting this web site may harm your computer. Malicious software includes 25 trojan(s), 6 exploit(s).
3457.in	visiting this web site may harm your computer. Malicious software includes 50 trojan(s), 10 exploit(s).

110.75.2.118
www.taobao.com	Backdoor.Win32.Hupigon.lxrw

113.11.200.28
clr.cn	754 page(s) resulted in malicious software being downloaded and installed without user consent.

113.105.171.180	IP address previously listed
*.hap01.com	known bad actor

114.207.244.144	IP address previously listed
comodofw.co.cc	visiting this web site may harm your computer.

116.213.115.10
poi.mapbar.com	"Hacked by Dis9 Team"

117.25.129.241
772268.com	visiting this web site may harm your computer. Malicious software includes 141357 trojan(s), 12056 worm(s), 842 virus.

117.25.130.55
772268.com	visiting this web site may harm your computer. Malicious software includes 141357 trojan(s), 12056 worm(s), 842 virus.

119.70.119.0/24	AS17858 KRNIC-ASBLOCK-AP KRNIC Korea Network Information Center

119.70.119.30
download.mincesur.com	RSA attacker domain
good.mincesur.com	RSA attacker domain
hjkl.wekby.com
man.mincesur.com	RSA attacker domain
qwer.wekby.com
uiop.wekby.com

121.10.172.50
*.xxyuwen.org
31ad.com	Malicious software includes 105 exploit(s), 1 scripting exploit(s). 31ad.com appeared to function as an intermediary for the infection of 67 site(s)
feiyaokan.com
rrzzw.com
www.rrzzw.com
www.xxyuwen.org
xxyuwen.org

122.224.6.0/24	AS4134 CHINA-TELECOM China Telecom

122.224.6.159
*.91mt.com
vl3767.91mt.com	trojan downloader

123.183.217.32	IP address previously listed
*.reupload.info
dc.studyingcenter-org.com
hostswiss.com
hubs.ishtiben.com
reupload.info
t.reupload.info

125.208.8.0/24	AS24416 CNNIC-PRIMETELECOM-AP Beijing Primezone Technologies Inc. 44 Fu Cheng Road,Beijing,P.R.China

125.208.8.5
58158.net
cctvshoppe.net
comcun.cn
panduola.net
shewbuy.com
www.easyhu.com
wwwtaobao.net	known bad actor

125.208.8.226
mail.77169.com	mail server for RSA attacker domain

125.208.8.227
*.bj.hap02.com
21e-trade.com	brand jacker
anxinqf2.bj.hap02.com
bj3.hap01.com
bj3.hapt01.cn
bjbidc.com
cam88.net
cdn100.77169.com
duanxinqf3.bj.hap02.com
duanxinqf4.bj.hap02.com
hbdbn.com
idcns1.77169.net	RSA attacker domain
kycms.net
mail.gytybj.com
tgafwl.com
wenwoba.net
wumo.cn
www.9wupin.com
www.hbdbn.com
www.hnzyjr.com
www.tgafwl.com

125.208.8.231
ns.hxvps.com	name server for RSA attacker domain
ns2.77169.net	name server for RSA attacker domain
365xingi.com
99xingai.com
dns.77169.net	name server for RSA attacker domain
ns.zkbbs.net
ns3.zkbbs.net
taobao.168u168.cn
wanx.net

125.208.8.234
168u168.cn
idc.77169.cn	RSA attacker domain
www.bjhapt.com
idc.zkbbs.net

125.208.8.236
77169.com.cn	RSA attacker domain

173.0.1.125	BiFrost

173.192.170.88
drghwaweg45j4i6u3q32fg2h.com	Win32/Virut.AK traffic recipient

173.201.58.225
lhc.vg	visiting this web site may harm your computer. lhc.vg appeared to function as an intermediary for the infection of 17 site(s)

173.208.128.10
23pk.cc
2jt.info
go9go.org	Malicious software includes 102 trojan(s), 67 backdoor(s). Successful infection resulted in an average of 7 new process(es) on the target machine.
ly360.info
www.23pk.cc
www.gaylor-web.com

173.208.165.66
guangyuanxin.com	Malicious software includes 63 exploit(s), 61 trojan(s), 1 scripting exploit(s). Successful infection resulted in an average of 24 new process(es) on the target machine.
meng789.com

173.224.218.26
1.w414.com
2.w414.com
3.w414.com
4.w414.com
5.w414.com
w414.com	Malicious software includes 36 exploit(s), 32 trojan(s). Successful infection resulted in an average of 9 new process(es) on the target machine.

173.227.66.250	IP address previously listed
*.77169.cc	RSA attacker domain
01935.com
0755.us
098098.com
163zf.com
166-169-222.com
1and1servers.com
1ch.com
2nite.com
460.com
48it.com
4x4greece.com
5772.com
6261.com
6nbc.com
77169.cc	RSA attacker domain
82.com
8gay.com
9cy.com
aalayance.com
accessforlife.com
acescreensaver.com
ad-ren.com
addcolor.com
adulte.argenteen.com
adultpornography.net
advolcano.com
aerogaming.net
aib.in
ainiba.com
alleykats.com
allmembersareas.com
amnesia.com
amurox.com
andhraflix.com
ariesintl.com
aserver.net
asianschoolfuck.com
asiatische-wohnkultur.de
autosleon.com
b0m.net
b3.cc
banistmo.com
bannermat.com
bbbk.com
bbconstruction.com
bibbhouse.com
bioc1.biosym.com
biosym.com
biteshoes.com
bootinrayz.com
cao.pt
carlsbadca.org
catcha.co.id
choiceink.com
clearcreditnow.com
click42.com
consco.com
correodelsur.net
culo.net
czyyy.com
d5k.com
deepforestmusic.com
designcenteroftheamericas.com
dgro.com
diamondweddingrings.info
dl22.xxx-marks.com
dpf.com
dvdnt100.com
essextrading.com
faberlic.pl
fat--naked-woman.com
faul.com
flybook.biz
footmadness.com
free-satellite-network.com
free20.com
freetittypics.com
funmanianj.com
gay-teen.8gay.com
gaylordhospital.org
gaymovie.8gay.com
giaitriviet.com
giridoot.com
goglee.com
goldengolds.com
googlecom.vn	brand jacker
gov.org.in
gpg.com.pl
gr.am
gvc.ca
hgmovie.com
hippoporn.com
holeporn.com
hotblondespics.com
hotfratguys.com
hotsexparty.com
hutakrolewska.pl
iboxtv.com
icomtech.com
icyas.com
ikaput.com
img10.imagepile.net
img9.imagepile.net
intelliart.com
inventquest.com
iranworld.com
jeniferlopez.com	brand jacker
jewelart.com
jjmortgage.com
jovicash.com
joystar.com
just4porn.com
kauaian.com
kulana.org
lady4sex.com
laptomania.com
lo2.olsztyn.pl
m3mary.com
mail.faberlic.pl
mail.mcaretail.com
mail.pnb.ca
mailing.otu.fr
mayspace.com	typo squatter
mcaretail.com
mhhome.com
midwestdemocracy.org
muyee.com
mynaagencies.com
naxos.tv
nlf.com
otu.fr
pandamobile.com
pcsex.net
peopleporno.com
perth.bz
petpurpose.com
phoenixelectrical.com
picbux.com
pilltruth.com
pnb.ca
poker.uz
policescannerweb.com
pondmakers.com
porno-brasil.com
pornosessoanale.com
pornylinks.com
pregnantschool.com
proxy-publico.rccn.net
pspwelt.com
pussy-files.com
pws.com.pl
ranonline.co.id
rapi.com.pl
raxter.com
rccn.net
readinglinks.com
remote2.iboxtv.com
retirementage.com
ripple.mktv.com
schoollust.com
serve2u.com
setrade.com
sexymaturewoman.net
sfd.com
sisminbakum.com
spambob.com
squirting-review.com
stjamesonline.net
sunvalleyworldwide.com
sweetasiangirls.com
teenmusic.info
telstraclear.com
tgptastic.com
tics5.iboxtv.com
tiidalife.com.cn
tiki.co.id
todaslasnovedades.net
toobo.com
triplezflowers.com
tucsontennis.com
tulinh.com
twimm.net
uk.toobo.com
umdonline.com
uptu.com
utibank.co.in
venguon.com
video-tutorial.net
web.sisminbakum.com
web1.tgptastic.com
webhostlife.com
wedeliverhomes.com
wettightpussy.com
wildsummernights.com
withcharacter.com
womenssecret.pl
workbrowse.com
www.01935.com
www.77169.cc	RSA attacker domain
www.asiateenboys.net
www.clearcreditnow.com
www.compratodo.com
www.gpg.com.pl
www.jenniebswallpaper.com
www.kulana.org
www.pawsrus.com
www.peopleporno.com
www.telstraclear.com
www.tiki.co.id
www.venguon.com
www.xparties.com
www.yahoovedio.com	brand jacker
wwwfragrance.com
wyx.com
xn--xhqz3h72vy19a.com
xparties.com
xpixs.com
xuatkhau.com
xxx-exits.com
xxxtoon.net
xxxtube.com
yahoovedio.com	brand jacker

173.230.130.120
bigtimekicks.com	90 page(s) resulted in malicious software being downloaded and installed without user consent.

173.244.176.34	IP address previously listed
*.eb2a.com

173.255.201.127
expa82.co.cc	visiting this web site may harm your computer.
isocknuxfsuzmorw.net
upagent99.biz
*.oqdbvkrfvgvrquk.net
dxuxpusopmqpofs.net
iesnaretrack.biz
oqdbvkrfvgvrquk.net
oroyten.com

173.255.223.78
ns2.baskingshark.net

174.120.103.104	bestqi.info

174.120.103.105	bestqi.info

174.120.103.106	bestqi.info

174.120.103.107	bestqi.info
*.perfectuninstaller.com
perfectuninstaller.com	rogue
removalguaranteed.com	rogue
www.perfectuninstaller.com

174.120.103.108	bestqi.info
*.regeasycleaner.com
regeasycleaner.com	rogue
registryeasycleaner.com	rogue
www.regeasycleaner.com

174.120.103.109	bestqi.info

174.120.103.110	bestqi.info
perfectuninstaller.net

174.120.103.111	bestqi.info

174.122.134.96	bestqi.info

174.122.134.97	bestqi.info

174.122.134.98	bestqi.info

174.122.134.99	bestqi.info
duplicatefilecleaner.com	rogue

174.122.134.100	bestqi.info

174.122.134.101	bestqi.info
*.finaluninstaller.com
finaluninstaller.com	rogue

174.122.134.102	bestqi.info

174.122.134.103	bestqi.info

174.139.132.170
*.ck83.com
*.ns1.ck83.com
17ny.net
360kxyy.com
55208.com
5i5imm.com
68uf.com
china-gl.cn	visiting this web site may harm your computer.
ck83.com
ctdzcm.com
dushanyu.org
eyuankeji.com
fs-jiesheng.com
gjcxsy.com
gjrzs.com
hbwhkdf.com
henandao.com
hkbeston.com
hnddnm.com
hubeiww.com
jdyhfilm.com
jiaste.com
jmjiemei.com
lianchengsk.com
lxsdmodel.com
ns1.ck83.com
qhfs365.com
qjcxsy.com
root.ns1.ck83.com
tchysyco.com
ttjdco.com
whgljj.com
wuhanhysj.com
www.dushanyu.org
xiaoxiaosc.com
xznlawyer.com
zzjqtz.com
zzlvtengsheji.com

174.36.98.176
ns1.hostingrapido.com

174.36.98.177
ns3.hostingrapido.com

178.208.77.67	IP address previously listed
googglle.org	brand jacker
goooglle.org	brand jacker
kombek.org	Malicious software includes 917 exploit(s), 509 scripting exploit(s), 25 trojan(s).
mail.googglle.org
mail.goooglle.org
mail.kombek.org
mail.pixxel.msk.ru
ns1.pixxel.msk.ru
pixxel.msk.ru
v37588.vps.mchost.ru

178.211.56.104
java.kutlufamily.com	Win32.VBInject

178.211.56.105
java.kutlufamily.com	Win32.VBInject

178.79.157.231
ns1.baskingshark.net

194.28.44.226	IP address previously listed
shit.sjhf4gh.net	Win32.Palevo

195.230.129.4
ns2.ks.infocom.ua
ns2.ks.ukrpack.net
pallada.ks.ua	visiting this web site may harm your computer. Malicious software includes 5 scripting exploit(s).
slon.ks.infocom.ua
stardruk.com.ua

195.39.196.0/23	AS28907 MIROHOST Internet Invest Ltd

202.103.221.20	IP address previously listed
*.cn.wwvv.us
*.jk155.com
*.wwvv.us
baidu.cn.wwvv.us
cn.wwvv.us
down.jk155.com
panjie.9966.org	Malicious software includes 619 trojan(s), 416 backdoor(s), 34 exploit(s).

202.150.208.64	LINQINGPING
202.150.208.65	LINQINGPING
202.150.208.67	LINQINGPING
202.150.208.68	LINQINGPING
202.150.208.69	LINQINGPING
202.150.208.70	LINQINGPING
202.150.208.71	LINQINGPING
202.150.208.72	LINQINGPING
202.150.208.73	LINQINGPING
202.150.208.74	LINQINGPING
202.150.208.75	LINQINGPING
202.150.208.76	LINQINGPING

204.12.204.130
26v.info	visiting this web site may harm your computer. Malicious software includes 324 trojan(s). Successful infection resulted in an average of 4 new process(es) on the target machine.

204.12.204.132
3e4.info	Malicious software includes 322 trojan(s).

204.12.204.136
www.149586.com	67 page(s) resulted in malicious software being downloaded and installed without user consent. Malicious software includes 82 trojan(s). Successful infection resulted in an average of 4 new process(es) on the target machine.

204.12.228.237
bavanolaf.com	visiting this web site may harm your computer. Malicious software includes 40 exploit(s), 2 trojan(s).

204.12.244.195
agniaur.net
bcbo.ru
enigma.pp.ru
mail.agniaur.net
mail.bcbo.ru
mail.enigma.pp.ru
mail.mp3-sales.info	piracy
mail.vagonigr.ru
mail.vipbestsurf.com
mp3-sales.info	piracy
vipbestsurf.com
www.enigma.pp.ru
www.vipbestsurf.com

204.16.197.216	trojan downloader
80suncity.org
bbkk888.com
bob666.net
bob888.net
esanfu.com
evowe.com
gams456.com
ieo-electronics.com
kingdaproject.com
lego-fansclub.com
nweshoesshop.com

204.45.133.36
groupinc-upland.biz	money mule recruiters

204.45.133.38
callisto-ltdco.net	money mule recruiters
targetmarket-groupllc.net	money mule recruiters

204.45.51.122
*.97wyt.net
*.crwyt.net	Trojan Bervod
80kxz.info
80sqw.info
97kxz.info
97wyt.net
crwyt.net
dns.97wyt.net
dns2.97wyt.net
down.crwyt.net
kaixinjiqingzhan.info
uukxz.info

205.252.49.249
jizzhunter.net	Malicious software includes 826 exploit(s). jizzhunter.net appeared to function as an intermediary for the infection of 187 site(s)

207.126.115.240
q8me.com	Malicious software includes 8 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.
alwazan.net
alwazzanonline.com
anti2drugs.net
islam-chat.com
line9.org
q8babe.com
q8babes.com
q8baby.com
q8drs.com
thallab.com
web.q8me.com
www.islam-chat.com
www.q8baby.com
www.q8drs.com

207.58.177.96	IP address previously listed
awfwaf.cz.cc	visiting this web site may harm your computer. Malicious software includes 43 exploit(s), 13 trojan(s).

207.58.183.196	abused service, drive by exploits
*.addurl.ce.ms
*.alma-ckachat-soft.ce.ms
*.amjfbenduvci.ce.ms
*.angelfire.www.addurl.ce.ms
*.artgh.ce.ms
*.berg1.ce.ms
*.binghosting.ce.ms
*.blog.www.addurl.ce.ms
*.bo3.freedomain.ce.ms
*.ce.ms
*.cems.ce.ms
*.com.sgwww.freedomain.ce.ms
*.com2fhttp3awww.freedomain.ce.ms
*.come.view-pictures.www.addurl.ce.ms
*.download-server24.ce.ms
*.engines.ce.ms
*.euro.www.addurl.ce.ms
*.evt.ce.ms
*.fast-antivirus-scan.ce.ms
*.findingbusinesshelp.ce.ms
*.freedomain.ce.ms
*.getshoes.ce.ms
*.hwryu.ce.ms
*.images-ckachat-soft.ce.ms
*.in.www.freedomain.ce.ms
*.in.www.www.addurl.ce.ms
*.jdtyj.ce.ms
*.jerry.euro.www.addurl.ce.ms
*.loanstomorrow.ce.ms
*.makeshoes.ce.ms
*.otuuik.ce.ms
*.phobos.www.addurl.ce.ms
*.porno-ckachat-soft.ce.ms
*.s102-ckachat-soft.ce.ms
*.s102-www.addurl.ce.ms
*.sdfgv.ce.ms
*.sergth.ce.ms
*.sgwww.freedomain.ce.ms
*.technobiz.ce.ms
*.thenextwave.co.uk
*.vds.ce.ms
*.view-pictures.www.addurl.ce.ms
*.wap4sex.ce.ms
*.wip3.tripleclicks.ce.ms
*.wrttygt.ce.ms
*.www.addurl.ce.ms
*.www.freedomain.ce.ms
*.www.www.addurl.ce.ms
*.zob.ce.ms
3dns-3.tripleclicks.ce.ms
67z.zob.ce.ms
6apart.freedomain.ce.ms
8vgh.ce.ms
a17-250-248-101.www.addurl.ce.ms
a638.phobos.www.addurl.ce.ms
accs-ckachat-soft.ce.ms
acs.www.addurl.ce.ms
addurl.ce.ms
ade5.ce.ms
akdiy.evt.ce.ms
akm.www.addurl.ce.ms
am-red.www.addurl.ce.ms
amjfbenduvci.ce.ms
angelfire.www.addurl.ce.ms
ardownload.wip3.tripleclicks.ce.ms
arsoupsot.ce.ms
artgh.ce.ms
auth-ns1.www.addurl.ce.ms
avto-ckachat-soft.ce.ms
b.s102-ckachat-soft.ce.ms
b.s102-www.addurl.ce.ms
background-ckachat-soft.ce.ms
banners.www.addurl.ce.ms
beatfiltering.com2fhttp3awww.freedomain.ce.ms
beta.www.www.addurl.ce.ms
binghosting.ce.ms
bizwww.tripleclicks.ce.ms
blog.www.addurl.ce.ms
blogging-ckachat-soft.ce.ms
bo3.freedomain.ce.ms
breastpumpthai.ce.ms
browseusers.freedomain.ce.ms
build-ckachat-soft.ce.ms
burke.jerry.euro.www.addurl.ce.ms
buscador.www.addurl.ce.ms
catracalivre.www.addurl.ce.ms
ce.ms
cems.ce.ms
chat-ckachat-soft.ce.ms
co-in-f206.www.addurl.ce.ms
cocokog-ckachat-soft.ce.ms
com.sgwww.freedomain.ce.ms
com2fhttp3awww.freedomain.ce.ms
come.view-pictures.www.addurl.ce.ms
cosex-ckachat-soft.ce.ms
creatives.www.addurl.ce.ms
cv0.otuuik.ce.ms
download-server24.ce.ms
ecx.images-ckachat-soft.ce.ms
euro.www.addurl.ce.ms
freedomain.ce.ms
gator134.www.addurl.ce.ms
gh.sdfgv.ce.ms
groups.www.addurl.ce.ms
hostmaster.thenextwave.co.uk
hwryu.ce.ms
icoob.www.addurl.ce.ms
images-ckachat-soft.ce.ms
in.www.freedomain.ce.ms
in.www.www.addurl.ce.ms
jdtyj.ce.ms
jerry.euro.www.addurl.ce.ms
kbv8.ce.ms
khuugiangkhanh.www.addurl.ce.ms
kidsconner.ce.ms
kiemthe.www.addurl.ce.ms
knight-debrid.ce.ms
lamarea.ce.ms
login.www.addurl.ce.ms
ma0honl69f8dxxh7e7ju.ce.ms
mail.alma-ckachat-soft.ce.ms
mail.vds.ce.ms
misvideoxxx.ce.ms
mq9b.ce.ms
mub.www.addurl.ce.ms
mug.www.addurl.ce.ms
mvd.www.addurl.ce.ms
ncj2.ce.ms
nesvpxsakb.ce.ms
ns2.wap4sex.ce.ms
o4v.sergth.ce.ms
otuuik.ce.ms
owluctisq.ce.ms
phobos.www.addurl.ce.ms
porno-ckachat-soft.ce.ms
pxj0.ce.ms
qi9zg2sm.ce.ms
qjp.wrttygt.ce.ms
qmd9.ce.ms
ret1.ce.ms
rqvjwhfhz.ce.ms
s102-ckachat-soft.ce.ms
s102-www.addurl.ce.ms
sdfgv.ce.ms
sergth.ce.ms
sgwww.freedomain.ce.ms
supercool2011.ce.ms
support.vds.ce.ms
technobiz.ce.ms
tempeba.ce.ms
thenextwave.co.uk
toha3.ce.ms
umail.getshoes.ce.ms
v0z.jdtyj.ce.ms
view-pictures.www.addurl.ce.ms
wap4sex.ce.ms
wer3.ce.ms
wip3.tripleclicks.ce.ms
wq.artgh.ce.ms
wq.hwryu.ce.ms
wrttygt.ce.ms
www.ce.ms
www.cems.ce.ms
www.engines.ce.ms
www.freedomain.ce.ms
www.www.addurl.ce.ms
x5mg.ce.ms
xqolntkmi.ce.ms
xtovip.ce.ms
y-realestate.ce.ms
youtwit.ce.ms
yujx.amjfbenduvci.ce.ms
zepwfulwx.ce.ms
zob.ce.ms

208.115.245.26
*.spydig.com
4bh.net
a3j.com
dramforum.net
spydig.com	fake anti-virus
www.dramforum.net
www.spydig.com

208.115.245.27
spywarecease.com	fake anti-virus

208.53.135.19
outlawz.irc.su

208.53.135.44
hideonline.me	filter evasion
i.need.one.more.b33r.net

208.53.135.45
proxy2use.com	Sites linking to this site may harm your computer

208.53.135.46
www.hitnews.net
hitnews.net	hacked by eboz

208.53.135.47
talk.clever.or.keepsilence.org	

208.53.135.48
big.lamer.la	Trojan:Java/Boonana

208.53.135.49
ne.budi.lamer.la	Trojan:Java/Boonana

208.53.135.57
tele.kaze.mooo.com	Malicious software includes 38 trojan(s), 5 exploit(s).

208.53.135.66
ns2.capslock.ws	piracy

208.53.135.68
terrorists.armed.us	phishing

208.53.135.74
*.photocakeonline.com
hostmaster.photocakeonline.com
mx1.photocakeonline.com	phishing
repairproblems.com	rogue

208.53.135.75
*.uglystickonline.com
mta-75.mail.wintercreationsonline.info
hostmaster.uglystickonline.com
mx1.uglystickonline.com
uglystickonline.com	McAfee TrustedSource web reputation analysis found potential suspicious behavior on this site

208.53.135.76
meansbux.com	non-paying pay to click site

208.53.135.86
bergaya.naik.mobil.lamborghini.la	brand infringement

208.53.135.90
nira.nonexiste.net	2 page(s) resulted in malicious software being downloaded and installed without user consent.

208.53.135.91
apollo.nonexiste.net	2 page(s) resulted in malicious software being downloaded and installed without user consent.
avitomp4converts.com

208.53.135.92
*.wheretofindsite.com
maugrim.nonexiste.net
avitoflv.net	promoted by message board spam
hostmaster.wheretofindsite.com
inuyasha.nonexiste.net
mx1.wheretofindsite.com
wheretofindsite.com	McAfee TrustedSource web reputation analysis found potential suspicious behavior on this site

208.53.135.93
*.topeurosite.com
wolfgang.nonexiste.net
hostmaster.topeurosite.com
mx1.topeurosite.com
topeurosite.com	McAfee TrustedSource web reputation analysis found potential suspicious behavior on this site

208.53.135.94
*.fairnightonline.com
fairnightonline.com	McAfee TrustedSource web reputation analysis found potential suspicious behavior on this site 
hostmaster.fairnightonline.com
mx1.fairnightonline.com

208.53.135.100
ownagehacks.com
www.l00nies.net
l00nies.net
www.thedarkwarez.com
thedarkwarez.com	piracy
web101.fsteam.net

208.53.135.106
*.globalfindonline.com
avitompegconverter.net
globalfindonline.com	poisoned search results
hostmaster.globalfindonline.com
mx1.globalfindonline.com
ns1.tuxsp.net
ns2.fairnightonline.com
ns2.globaleyesite.com
ns2.globalfindonline.com
ns2.photocakeonline.com
ns2.topeurosite.com
ns2.uglystickonline.com
ns2.wheretofindsite.com
hosting1.tuxsp.pt

208.64.122.6	pharma, IP address previously listed
alwaysdrugs.com
luckypharma.com
ns2.33drugs.com
ns5.drugcustomer.com
www.taxfreemeds.com

208.64.122.8	IP address previously listed, Michael Tycoon
208.64.122.9	IP address previously listed, Michael Tycoon

208.64.122.10	pharma, IP address previously listed, Michael Tycoon
724generics.com
yourdrugsdiscount.com

208.64.122.11	IP address previously listed, Michael Tycoon

208.64.124.162	Trojan Palevo
01-mp3search.com
1919.to
1shemale.net
2amateurs.com
2amateurs.net
2girls.net
4-v.net
44x.org
4gay.com
4kinky.com
4six.com
4slut.com
5o2.com
5ra.net
69naked.net
91175.net
92h.net
9isolutions.com
a7i.net
aeiou.com
aerarran.com
aeta.co.uk
afv.net
albw.net
allboys.com
allmovies.com
amateurx.com
ascp.am
awl.org
balls.in
bamdad.org
bareass.net
bau-forum.net
beachcam.com
bes.net
bgf.net
bho.net
blondegirls.net
boob.net
boybox.net
breve-t.com
brutal-porn.net
cagw.com
camisetasmojadas.net
canalrob.net
capz.com
cff.net
cityfmonline.com
ciudadarce.net
clubfantasysac.com
com.mail8.pstmp.com
consuelo-moyano.com
coppia7378.org
cricas.net
cricketstreaming.net
denvercarshow.com
dexeng.com
dfh.net
dpu.net
e2.net
ebonyass.biz
egw.net
ehf.net
ehk.net
eky.net
emmabunton.net
ensonic.net
etr.net
ev.to
ezteen.net
fatyat.com
feegames.com
foroshgah.net
fotoog.net
free-hacks.net
freee.net
freetoview.net
fta-downunder.com
fub.net
games1000.net
getsex.net
gool.net
granite.mail4.pstmp.com
harbourbar.net
hentaigod.net
hku.net
holidayvaction.net
homesluts.com
horizonguinee.net
hosted-4cfnm.com
hot4girls.net
hotamateurs.net
hothunks.com
huf.net
huntercreekinc.com
hya.net
indecormuebles.com
infojobbs.net
interporn.com
ipn.net
ipodmini.org
iqsc.net
izleindir.net
jettissystems.com
jii.net
jovencitasvirgenes.net
jru.net
k-t.to
kby.com
kdp.net
kny.net
kobysurgical.com
koh-chang-thailand.com
lacuarta.net
lanuevaluna.net
latincars.com
letsvideochat.net
lilb.com
linkzshare.net
liveboys.net
ltb.net
mail.waterfordnj.com
mail4.pstmp.com
mailserver1.kobysurgical.com
manggiaoduc.net
mdw.net
metart.ws
mp3hunt.net
msk.net
mujersuelas.com
myaccessflorida.net
myanmarlovestories.net
myhottsite.net
mzsys.net
najdi.to
nationalone.com
newenglandfsc.com
njgo.com
ns2.whizhosting.com
nudesexygirls.com
oakwoodhomes.net
odf.net
olimpbet.net
oseries.com
p24u.net
panochitas.com
phy.net
pickjokes.com
pik.net
pikaboo.net
playntradegames.com
pornoitaly.net
pornstarlist.net
proporn.com
pureimagedesign.com
qtl.net
rdt.net
revistasemana.com
rlgirls.com
robinshouse.com
rudejams.com
sao8.com
segob.com
sex4guys.net
sexointenso.net
sexreactor.net
sexservice.net
sexthenet.net
singertech.com
singletax.com
spangahockey.nu
stiffmen.net
sublimepets.com
sxe6.com
tfd.net
thairat.com
thedailytelegraph.com
thevision-v.net
tuttojuve.net
tv360.net
tvonline.net
twinpeaks69.com
uhi.net
uot.net
upa.net
valentinerecords.com
vbnt.com
vcf.net
vech.com
vidlist.net
vintagesex.net
virusbattery.com
waterfordnj.com
wincc.net
worldstats.net
woweurope.com
wtv6.com
wvo.net
www.breve-t.com
www.classygal.com
www.internetrentacar.co.uk
www.psb-smpdki.org
www150.nationalone.com
www82.nationalone.com
www98.nationalone.com
wwwdiziizle.net
wwwpaddypower.com
wwwprosource.net
wwwusajob.com
xfreehosting.net
xlc.net
xlnn.com
xod.net
xsnn.com
yis.net
ytup.com
zafersan.net
zbt.net
zdd.net
zidn.com

208.64.124.40
sundrugstore.com	pharma
www.sundrugstore.com

208.88.10.20
travelwest.webbanners.net	180 Solutions malware
utahtravelcenter.com
webstat.olwm.com

209.159.156.162	IP address previously listed
ns1.surplususa.cc
ns1.usnam.cc
ns2.stelsgid.net
ns2.us1copy.at

209.159.156.163	IP address previously listed
ns1.usansnamd.cc

209.159.156.164	IP address previously listed
ns2.pidnsku.org
ns1.usafunds.cc

209.190.85.252
eb2a.com

209.190.85.253
ftp.eb2a.com	trojan data collector

209.62.55.196
azadunimsh.persiangig.com
eshghooolane.persiangig.com

209.62.55.197	trojan
*.ibh.ir
azadunimsh.persiangig.ir
hjtmh.persiangig.com
imanm.persiangig.com
infoelek.persiangig.com
maskido.persiangig.com
mazhaby.persiangig.com
musicomusic1.persiangig.com
negar266.persiangig.ir
p-freedom.persiangig.com
pcjava.persiangig.com	Malicious software includes 168 scripting exploit(s), 48 trojan(s), 15 exploit(s). Successful infection resulted in an average of 3 new process(es) on the target machine.
samy007.persiangig.com
seifikar1359.persiangig.com
shiva.persiangig.com
vayvay.persiangig.com
www.azadunimsh.persiangig.ir

211.115.80.59	Infostealer.Gampass

211.157.24.135
mapbar.com	Over the past 90 days, mapbar.com appeared to function as an intermediary for the infection of 1 site(s)

211.157.27.141
*.mapbar.com

211.95.73.0/24	AS17621 CNCGROUP-SH China Unicom Shanghai network

211.95.73.217
ns1.cutelandback.ru
ns1.eptyklugip.com
ns1.shevan.com
ns1.shutramiaci.com
ns1.ultimaterxonline.com	pharma
ns2.canadapharmacymall.com	pharma
ns2.famuledom.info
ns2.ferwuetwyv.com
ns2.fubypcigg.com
ns2.insefehdinl.com
ns2.jekjocbulig.com
ns2.nipsovquwcu.com
ns2.ofbyzhoda.com
ns2.ofnamhiqs.com
ns2.ondijertal.com
ns2.poiditty.com
ns2.qugbyxqe.com

211.95.79.0/24	AS17621 CNCGROUP-SH China Unicom Shanghai network

211.95.79.246
t.reupload.info
worldadult.biz	Win32.Palevo

212.1.102.2
in.lutsk.ua
lutsk.ukrpack.net
ns.lutsk.ukrpack.net
ns2.modern-expo.org.ua
plastmas.com.ua
relay.lutsk.ukrpack.net
volleyball.org.ua	8 page(s) resulted in malicious software being downloaded and installed without user consent. Malicious software includes 22 trojan(s).
www.volleyball.org.ua

212.1.112.26
dpa.kharkov.ua	Yes, this site has hosted malicious software over the past 90 days. It infected 11 domain(s)
www.dpa.kharkov.ua

212.95.63.0/24	AS28753 LEASEWEB-DE Leaseweb Germany GmbH

212.95.63.17
nokialife.info	71 page(s) resulted in malicious software being downloaded and installed without user consent. 

212.95.63.25
ns2.search-datas.com	poisoned search results
windos32.su

212.95.63.27
ns2.hugexdownloads.com	piracy

212.95.63.29
ns2.xtubez.org	piracy

212.95.63.41	pharma
mail.medstoreplus.com
mail.pillsbuy.net
medstoreplus.com
ns1.kz-host.com
pillsbuy.net

212.95.63.45	fake anti-virus
mail.safechecker1.net
safechecker1.net
vip-films.org
vip-mp3.org
webchecker2.net

212.95.63.48	pharma
mail.phentermine-drugstore7.com
ns2.aciphex-drugstore.com
phentermine-drugstore7.com

212.95.63.70	pharma
buy--effexor.com
buy-soma.net
buyacomplia.info
canadian-drugstore-online.com
canadian-healthcare.net
infns.com
mail.buy--effexor.com
mail.buyacomplia.info
mail.canadian-drugstore-online.com
mail.canadian-healthcare.net
mail.infns.com

212.95.63.201
sineglam.com	visiting this web site may harm your computer. Malicious software includes 71 exploit(s), 40 scripting exploit(s).

212.95.63.202
mail.trafin.in
trafin.in	visiting this web site may harm your computer.  Malicious software includes 746 scripting exploit(s), 27 exploit(s).
trafusa.in

213.83.117.171
ftp.billgates.itsaol.com	brand jacker
ftp.billgates.ns01.us	brand jacker
ftp.blizzcon.sexidude.com
ftp.blizzcon.sexxxy.biz
test1.windwarp.uicp.net
www.billgates.ns01.us	brand jacker

213.83.117.172
aaa.buffet.bbsindex.com
billgates.ns01.us	brand jacker
buffet80.bigmoney.biz
buffet80.moneyhome.biz
ftp.buffet.bbsindex.com
www.buffet.bbsindex.com
xmahone.itemdb.com
xmahone.itsaol.com	brand jacker
xmahone.ocry.com

213.83.117.173	RSA attacker domain
*.buffet.bbsindex.com
blizzcon.buffet.bbsindex.com
buffet.bbsindex.com
datron.buffet.bbsindex.com
emcweb.buffet.bbsindex.com
football.buffet.bbsindex.com
kdsjfng1294.buffet.bbsindex.com
moto.buffet.bbsindex.com
prc.buffet.bbsindex.com
test1.buffet.bbsindex.com

216.245.220.72	liu jiachang

216.245.220.73	liu jiachang

216.245.220.74	liu jiachang

216.245.220.75	liu jiachang
registrywell.com	rogue

216.245.220.77	liu jiachang
*.advancedpctweaker.com	rogue
advancedpctweaker.com	rogue
www.advancedpctweaker.com	rogue

216.245.220.78	liu jiachang

216.245.220.79	liu jiachang

216.45.57.53
bustygfs.net
cravingcarmen.org
mail.bustygfs.net
mail.cravingcarmen.org
newsologirls.org	visiting this web site may harm your computer.

216.45.59.0/24	AS29761 QUADRANET 

216.45.59.12	child sexual abuse
*.admin.all-sex-links.com
*.all-sex-links.com
*.movies.all-sex-links.com
admin.all-sex-links.com
all-sex-links.com
crueltyparty.all-sex-links.com
fuckmymommyandme.all-sex-links.com
hornythieftales.all-sex-links.com
mail.movies.all-sex-links.com
mail2.movies.all-sex-links.com
melissadoll.all-sex-links.com
melonhunter.all-sex-links.com
movies.all-sex-links.com
nbddos.com
ns1.all-sex-links.com
ns2.all-sex-links.com
pregnantsistas.all-sex-links.com
root.all-sex-links.com
spicyroulette.all-sex-links.com
teenbff.all-sex-links.com
watchingmydaughtergoblack.all-sex-links.com
webcamhackers.all-sex-links.com

216.45.59.18
amateurddl.com
babesbrazil.com
babesdesire.com
babeslol.com
boobsvidz.com
brazilddl.com
bunduda.net
cepazeluz-chicoxavier.com.br
collegexoxo.com
equipegardenal.com
fbgirls.net
humorninja.com
imagecamel.com
lasvegasvidz.com
mail.babesbrazil.com
mail.babeslol.com
mail.boobsvidz.com
mail.brazilddl.com
mail.bunduda.net
mail.collegexoxo.com
mail.equipegardenal.com
mail.fbgirls.net
mail.humorninja.com
mail.imagecamel.com
mail.lasvegasvidz.com
mail.pandorasvids.com
mail.phunpics.com
mail.realgirlspost.com
mail.risada.net
mail.ufoviral.com
mail.xoxovids.com
pandorasvids.com
phunpics.com
realgirlspost.com
ufoviral.com
www.amateurddl.com
www.babeslol.com
www.bunduda.net
www.imagecamel.com
www.lasvegasvidz.com
www.realgirlspost.com
xoxovids.com

216.45.59.122
www.eruptiontube.com
www.teattube.com

216.45.59.146
adultbabies.org
amateurforum.com
blackmailhumiliation.com
bustmyballs.org
clothedfemalenakedmale.org
dogfart.biz
envypenis.com
facesittingporn.org
felicitygold.com
felicitysgirls.com
footporn.org
forced-bi.org
hotwifelog.com
humiliatrix.biz
littlemissmean.com
malechastity.org
moneyslave.org
sissylife.net
sissytraining.net
sockfetish.biz
sockworship.net
sphtalk.com
straponhumiliation.net
thehumiliation.com
webcamwhore.co.uk
worshipfeet.net
www.smallpenisporno.com
www.thehumiliation.com

216.45.59.178
badpamma.com
baileysroom.org
freerealpeachez.com
joonmali.org
lanetilson.com
lilykoh.biz
lilykoh.us
mail.baileysroom.org
mail.lilykoh.biz
mail.lilykoh.us
mail.rawblogs.com
mail.realpeachez.cc
myxxxblog.com
rawblogs.com
realpeachez-hardcore.com
realpeachez.cc
www.myxxxblog.com
www.rawblogs.com

216.45.59.211
*.77169.org
77169.org	RSA attacker domain
www.77169.org

216.45.59.214	Virus.Win32.Virut data collector.
52wpt.com
91mhzx.com
cbg163mp.com
cbgc163.com
cgb163gc.com
cgb163rg.com
cgbg163.com
cggb163.com
dbgc163.com
dzfortune.com
g163m.com
gcbg163.com
gcbgs163.com
q3yx.com
qq0ou.com
qq5ou.com
qq8ou.com
qqbu88.com
qqvuv88.com
qqxvx.com
rtxqq.com
s163m.com
scbg163.com
scdg163.com
sgz163.com
tengzx.com
tenrsz.com
warcraft-blizz.net	reverse is us12.hapt01.cn
wcbg163w.com	reverse is us12.hapt01.cn
www.gggs.sh.cn	reverse is us12.hapt01.cn
www.q3yx.com	reverse is us12.hapt01.cn
yysuliaotong.com	reverse is us12.hapt01.cn

217.112.35.77
*.bizkit.ru
*.poufe.ru
*.sadovody.ru
antichat.net
antichat.ru
autovikup.ru
bizkit.ru
d0m.ru
infotravel.ru
lokoclub.ru
mosmart.ru
myauto.ru
phe.ru
poufe.ru
putistiny.com
redisson-hotel.ru
sistema-z.ru	Gbot
sovlab.ru
technocomp.ru
toytricksy.com
www.bizkit.ru
www.infotravel.ru
www.poufe.ru

217.23.92.217
cross-stitch-club.ru
mail.cross-stitch-club.ru
winx4u.ru	visiting this web site may harm your computer. Malicious software includes 71 scripting exploit(s), 11 exploit(s), 3 trojan(s). Successful infection resulted in an average of 3 new process(es) on the target machine. 25 page(s) resulted in malicious software being downloaded and installed without user consent.
www.cross-stitch-club.ru

218.10.17.178
2b.yigeyuming.com	Win32/Virut.AK traffic recipient

218.240.39.0/24	AS17672 CHINATELECOM-HE-AS-AP asn for Hebei Provincial Net of CT

218.240.39.244
dns.zkbbs.net	name server for RSA attacker domain
dns.hxvps.com	name server for RSA attacker domain
*.zkbbs.net
4lzx.com
www.4lzx.com
zkbbs.net

218.75.110.0/24	AS4134 CHINA-TELECOM China Telecom

218.75.110.152	IP address previously listed
21875110152.myisp.cn
bbs.cz88.net
cz88.net
softyun.com
www.cz88.net	RSA attacker domain

220.162.238.241	trojan

221.195.40.0/24	CNC Group HeBei Network AS4837 China-Network-Communications-Group China Network Communications (CNC Group)

221.195.40.2
book.77169.com	RSA attacker domain

221.195.40.6
mail.77169.net	mail server for RSA attacker domain

221.195.40.40
ns1.77169.net	name server for RSA attacker domain
ns2.77169.net	name server for RSA attacker domain

221.204.203.60
ns1.dnsv5.com
q3y1dns1.mydnspod.com	known bad actor

222.173.227.82
q3y1dns1.mydnspod.com	known bad actor

222.186.189.213
q3y1dns1.mydnspod.com	known bad actor

222.186.189.214
q3y1dns1.mydnspod.com	known bad actor

46.252.128.0/23	AS25190 KIS-AS UAB "Kauno Interneto Sistemos"

46.166.129.253	IP address previously listed, Trojan Palevo

46.252.130.0/23	AS25190 KIS-AS UAB "Kauno Interneto Sistemos"

46.252.130.200	fake anti-virus
antivirus-2932.co.cc
defender-ayva.co.cc
defender-qotg.in
defender-wrhw.in
exirzexl.co.cc
pzecsfas.co.cc
software-nerx.co.cc
software-q9k9.co.cc
software-werp.co.cc
system-scanner-iwcw.co.cc
zlpeqbhp.co.cc
zlvtwfwl.co.cc

46.252.132.0/23	ReliktBVK AS52055

46.252.134.0/24	AS25190 KIS-AS UAB "Kauno Interneto Sistemos"

46.252.134.5
alcobro.net
badcobro.net
curem.net
fast-av-scan.co.cc	fake anti-virus
imgaaa.net
juoiossf.co.cc
www.curem.net
yoavtito.co.cc
zoomt.net

46.252.134.8
chriam.co.cc
easybatch.co.cc
mail.couchey.co.cc
ns1.couchey.co.cc
ns1.upaon.co.cc
www.chriam.co.cc

46.252.134.9
dl.juoiossf.co.cc
dl.yoavtito.co.cc
dl.your-fast-antivirus-scan.cw.cm	fake anti-virus
ns2.upaon.co.cc

58.221.35.0/24	China Telecom JiangSu province AS4134 CHINA-TELECOM China Telecom

58.221.35.113
77169.cn	RSA attacker domain

60.190.218.104	Trojan Palevo
61699.com
6666woool.com
90yos.com
bazhe2008.com
bcwoool.com
fangshengda.com
hubs.ishtiben.com
llwoool.com
nnwoool.com
qq-woool.com
renticaihui.com
sl2007.com
xiaoyijia.com

60.190.218.154
szvr.com	Malicious software includes 113 trojan(s), 65 exploit(s). Successful infection resulted in an average of 29 new process(es) on the target machine.

61.160.235.196	IP address previously listed
*.go.7766.org
*.go.8866.org
*.to.8800.org
2288.org	Malicious software includes 314 exploit(s), 20 scripting exploit(s), 4 trojan(s).
3322.org	Malicious software includes 19900 exploit(s), 2738 trojan(s), 1566 scripting exploit(s).
6600.org	Malicious software includes 321 exploit(s), 13 scripting exploit(s).
7766.org	Malicious software includes 23570 exploit(s), 3586 scripting exploit(s).
8800.org	Malicious software includes 4161 exploit(s), 805 scripting exploit(s), 24 trojan(s).
8866.org	Malicious software includes 55584 exploit(s), 7144 scripting exploit(s), 3295 trojan(s).
9966.org	visiting this web site may harm your computer. this site has hosted malicious software over the past 90 days. It infected 17 domain(s)
ad.go.2288.org
artnude.cn99.com
bdxz5.go.3322.org
changbai.cn99.com
chinaspeaking.go.2288.org
cz5.cn99.com
cz6.cn99.com
df.at.8866.org
eastmoneycom.go.7766.org
ebiz.go.2288.org
feds.to.8800.org
g686.to.3322.org
gagasf.to.3322.org
hepingli.net
hongyunmiaomu.at.3322.org
hopesaleingtraffic.go.2288.org
hostingtraffic.go.2288.org
jiading.cn99.com
juyide.com
kittyboy1983.go.3322.org
lfxq.cn99.com
link.at.9966.org
lisa2080.go.7766.org
ns1.cn99.com
ppyy.bentium.com
qdjpk.cn99.com
qingyunju.cn99.com
search.bentium.com
slobudating.go.2288.org
tcw.cn99.com
teentaiwang10.at.2288.org
wspa.cn99.com
xp.go.9966.org
zch.cn99.com
zydy.go.9966.org

61.164.140.12	PLA hackers
2beusable.com
3zben.com
71777.net
92cml.com
anddy.net
bbs027.cn
cl24k.com
cnhzla.com
crazytempo.com
diannaoabc.com
easy2learn.cn
hangqing8.com
hbmto.com
hodisc.com
hundunjr.com
jiangluxia.com
juyeshop.com
kxcnet.com
m2woool.com
mei43.com
mtkmtk.com
ourv1.com
qq263.net
szymq.net
wan120.com
wuzixian.com
www.168u168.cn
www.2beusable.com
www.bbs027.cn
www.cz007.com
www.hangqing8.com
www.qq263.net
www.s118.com
yidianyidi.com
zdsj8.com

61.164.150.26
*.ns1.180yx.com
222pk.net
root.ns1.180yx.com

61.185.238.215
shaanxi.cn	1160 page(s) resulted in malicious software being downloaded and installed without user consent.

62.117.85.76
ircinfo.ru	IRCBot

64.111.199.221	IP address previously listed
*.superquicksearch.com	Win32.Palevo
*.ytuongmoi.info
0oogle.com
absolutascelebridades.com
acces-reserve.com
adultdating-search.com
allecoute.com
allecoute.net
alotabout.com
aptall.com
arcadewii.com
audioget.com
audioput.com
backhomeboyz.com
become-your-best.com
bingocardole.com
bisnis-blog.com
blastinglive.com
blog2q.com
blowinglive.com
bodysculptinggym.com
bondagetop.com
btoj.com
buyandclaim.com
camconseil.com
camconsulting.net
campushavoc.com
camsalsa.com
camvideofun.net
careersolutions.info
casinoegaming.com
casinoriata.com
casinos69.com
cheap-insurance-coverage.com
cheap-insurance-policy.com
chiacharms.com
chiez.com
colliourehouserental.com
colliourerental.com
conseilvoyance.com
conseilvoyance.net
cupidsland.net
daily-payment.com
datewomenguide.com
delawareauctionsonline.com
denned.com
discounted-insurance-coverage.com
discounted-insurance-policies.com
discounted-insurance-policy.com
domillions.com
dompet.net
drunkextreme.net
enginecheatcode.com
enginecheatcodes.com
enterallworld.com
f5b.net
farmaciaspopulares.com
feeling-star.net
femmes-matures-porno.com
femmes-nues-sexe.com
finalfantasy10.net
findmycasino.com
flashpoint.cc
freepeopletv.com
freevideopost.net
gethotel.net
gr8ads.com
growrichasyousleep.net
haberadam.com
haberiki.com
holidayinhell.com
holidaysbookmarks.com
hosting-tips.net
imudra.com
in-hotel.com
incomemagic.net
infinite-illusions.com
insurance-coverage-rate.com
insurance-plan-choices.com
insurance-policy-choice.com
insurance-rate-quotes.com
italianpornart.com
jeunes-libertins.com
jjhp.com
justher.net
justsearchz.com
k-9space.net
kinkycamslive.com
kissmekissmenot.net
kittycraze.com
kittylicking.com
krpz.com
ladyluna.net
lateledesgens.com
likemelikemenot.net
listesexe.com
little-baby-shop.com
liveblaster.com
livechatandporn.com
livepsycho.com
livevideohelp.com
livevideoshop.com
livevideosupport.com
lolitam.com
lookwhatthestorkbroughtus.net
loversearcher.net
lovinlive.com
lucialapiedra.com
lunaseaarts.com
maaa3.com
mail.porntorrents.net
maiseliem.com
makecashfromcams.com
makemoneyfromcams.com
manken1.com
mediumconseil.com
mediumnic.com
mediumpassion.com
mediumpassion.net
mega-sexe-videos.com
megasprix.com
monblogerotique.com
monfutur.net
morecarinsurance.com
mortgageloanwebpage.com
mx.ytuongmoi.info
myfatpussy.com
myliveshop.com
naughtyhacker.com
ns1.dreams-blog.com
ns1.easyfreeblog.com
ns1.flashpoint.cc
ns1.gb-blog.com
ns1.hollywood-blog.com
ns2.dreams-blog.com
ns2.flashpoint.cc
ns2.gb-blog.com
ns2.hollywood-blog.com
nvnw.com
parsansms.com
partofsex.com
peopletalkshow.com
physicalprowess.com
pjnk.com
pokerarabia.com
porn-hot-sex.net
pornlinksupersite.com
pornorepertoire.com
pornsexsites.net
pornsitehardcore.com
postitcreditcards.com
pramazon.com
promomatos.com
rapetop.com
rapevids.com
rapeworld.com
realitypornblogger.com
realitypornreview.com
reddb.com
rememberedlovedones.net
routenullmx.ukboysnextdoor.net
sales-booster.com
saturdayjob.net
schoolgirlsrape.com
sex-access.com
sexe-amateur-extra.com
sexe-conseil.com
sexgaysite.net
shagmeshagmenot.net
shitemail.com
sikilecekkadin.com
sinemacini.com
sixty6designing.com
sixty6domains.com
slutstop.net
sofia69.com
sosvoyant.com
sosvoyant.net
spicysearch.com
superquicksearch.com	Win32.Palevo
tdtameritrade.com
technokomgid.com
teenspic.com
teledesgens.com
televideonet.com
tiendasdealicante.com
toddfriesen.com
top-dvd-rentals.com
top-pornsites.com
total-sexe-amateur.com
transexualessexy.com
turkishlolitas.com
turktaraftar.com
tvvideoweb.com
twointhehand.com
ueuh.com
ukboysnextdoor.net
ukgirlsnextdoor.net
unusualcharms.com
usgirlsnextdoor.net
viagra-cialis101.com
videocorazon.com
visiofuture.com
visitinglasvegas.net
vitaminboost.net
voirlefutur.com
voyance-passion.com
voyance-passion.net
wakq.com
wantaplaystation3.com
wantaps3.com
webcamconseil.com
wordcloudpage.com
www-movie.com
www.superquicksearch.com	Win32.Palevo
xbox-360-news.net
xeww.com
xn--3i0bk5iuotqc710a.net
xn--jk1bu5jmycd1f.net
xn--vk1bv2q0ohutq.net
yourgambles.com
ytuongmoi.info

64.120.161.214
dataglobalone.in	trojan
filesearth.in	trojan
efirst-data.in
ns2.bigvids.net
www.clipsclub.com

64.21.9.42
*.noc.su	Malicious software includes 3095 scripting exploit(s), 1 exploit(s).
album.beermir.com
alz.org.ru
beermir.com
chelkendo.ru
denek.net
electrostal.su
erolove.info
etolove.info
mx3.insurerealities.com
noc.su	Malicious software includes 3095 scripting exploit(s), 1 exploit(s).
rpdx.com.ru
serverdns7.net.ru
tnpkursk.com
virusfm.ru
webinfo.pp.ru
www.hhpr.org
www.reino-de-espana.ru
www.sergiofalconi.ru
yourhost.ru

64.246.11.81
clickmarketanalyzer.com
mail.clickmarketanalyzer.com
paidfreedatabase.com	malware hosting

65.75.138.99	Blackhole Exploit Kit landing page

66.128.53.31
iblp-rd.org	ZeuS

66.212.18.193
aaliyahlove.org
mail.aaliyahlove.org
mail.roxyrhodes.biz
mail.sologirlsdb.com
mail.tinytyler.net
sologirlsdb.com
tinytyler.net
www.sologirlsdb.com	visiting this web site may harm your computer.  241 page(s) resulted in malicious software being downloaded and installed without user consent.

66.90.74.187
us12.hap01.com
us12.hapt01.cn	known bad actor

66.90.104.171
idcns2.77169.net	RSA attacker domain
my12593.cn
w3008.cn
warciaftmovies.com
wowgamemovie.com
www.52ptw.com
www.ebainian.com
www.gzsjxx.com

67.15.107.166
dl.bitroll.com
dl.winzix.com
dl.x3codec.com	exploit

67.15.107.181
install.netpumper.com	adware

67.15.186.2
dnsworld.net
give4free.net
system-processes.com	rogue

67.15.190.12	rogues, fake anti-virus
*.acasoftware.com
*.cblite.com
*.cheesesoft.com
*.cookerfactory.com
*.duplicatefilecleaner.com
*.perfectuninstall.com
*.perfectuninstaller.net
*.recoveryer.com
*.registryfast.net
*.registrywell.com
*.repairproblems.com
*.spywarecease.org
*.topbrandreviews.com
*.windriverupdate.com
4youonline.info
acasoftware.com
areviewsite.com
cblite.com
check1st.info
cheesesoft.com
com-1st.info
com-truth.info
cookerfactory.com
dgpoint.info
digitalzones.info
easylauncher.com
fix-pc-problems.com
fixpcreviews.com
gunlicence.net
job2009.org
mail.acasoftware.com
mail.cblite.com
mail.cheesesoft.com
mail.cookerfactory.com
mail.duplicatefilecleaner.com
mail.finaluninstaller.com
mail.perfectuninstaller.com
mail.recoveryer.com
mail.registryfast.net
mail.registrywell.com
mail.spicyaffiliate.com
mail.spydig.com	mail server for fake anti-virus
mail.spywarecease.org mail server for fake anti-virus
mail.topbrandreviews.com
mail.videotoflashconverter.com
mail.windriverupdate.com
mail.yongjinwang.com
memorysavior.com
otctrading.info
pennystocksprophet.net
perfectuninstall.com
perfectuninstaller.net
recoveryer.com
registryfast.net
registrywell.com
regisyryfix.com
repairproblems.com
reversecallnumber.com
reviewscam.net
shockreview.net
spicyaffiliate.com
spywarecease.org
topbrandreviews.com
toptradingsystem.net
tradingsys.net
vectorvestreview.com
videotoflashconverter.com
windriverupdate.com
www.acasoftware.com
www.cheesesoft.com
www.duplicatefilecleaner.com
www.finaluninstaller.com
www.memorysavior.com
www.perfectuninstall.com
www.perfectuninstaller.net
www.recoveryer.com
www.registryfast.net
www.registrywell.com
www.repairproblems.com
www.shockreview.com
www.spywarecease.org
www.topbrandreviews.com
www.videotoflashconverter.com
www.windriverupdate.com
yongjinwang.com

67.159.29.226
1k2k.com
gqzhan.com	Malicious software includes 102 exploit(s), 93 trojan(s), 21 virus. Successful infection resulted in an average of 22 new process(es) on the target machine.

67.19.52.179
mail.npssoftware.com
npssoftware.com
www.npssoftware.com

67.214.165.91
mx2.87645indergrown.com	Trojan Palevo

67.222.143.123
ns2.hostingrapido.com

67.228.121.12
mail.googleconquest.com
mail.thesiterush.com
ns.googleconquest.com
ns9.nameserverhere.com
thesiterush.com	visiting this web site may harm your computer.
www.googleconquest.com
www.thesiterush.com

69.163.252.54
deepershades.net
globalhouseconnection.com
housesound.com
katize.com	fake anti-virus

69.197.182.51
ns2.fraudns.net

69.205.69.34
kawabungashop.ru	ZeuS

69.50.188.4	IP address previously listed
100girlspeeing.com
69freegalleries.com
a-kerry.com
ablzizy.com
ak717aka.com
alamuk.com
alexredirect.com
alfullzero.com
algals.com
angelsxs.com
arivaviva.com
assjustfucked.com
assloveporn.com
asspreader.com
balltaas.com
band-pix.com
bannbaba.com
bdsm-bondage-videos.com
bestporninlife.com
bestsmalltits.com
bidage.com
bigbaaas.com
bluebomdia.com
bookhasi.com
bustypicsite.com
bustyqueenx.com
car-blue.com
chicksgonebad.com
clan555.com
clicksexygirls.com
clickteengirls.com
coollivesex.com
couplesexbbw.com
cumcock-some.com
cumcockon.com
cyber-grom.com
daily-weather.com
dailybestpics.com
dating-party.com
dedok-kok.com
defy-rx.com
dennisreer.com
der-dzzz.com
drilledasians.com
driverboy.com
dukuukes.com
e-teny.com
e25das.com
easytds.com
ebankguide.com
ebokan.com
elixbook.com
er5acc.com
familyanalrape.com
familyboy.com
fanazorra.com
fat-tits-sex.com
femaleropebondage.com
femaleslavedomination.com
femalezoosex.com
filarolla.com
filsystem.com
findallgood.com
findsexporn.com
finish-shoping.com
firstfatslut.com
fish-ka.com
flesiniawar.com
for-gay.com
forgaylovers.com
framtis.com
freeatas.com
freegofuck.com
freephotosplace.com
frxts.com
fucking-gay-teens.com
fukaje.com
futbolnana.com
galleryspy.com
gangherass.com
gay-young-boys.com
gayhardcoreteens.com
gaysneeded.com
getcumcock.com
girls-pissing-clips.com
goodorgy.com
goodsexhouse.com
gotomire.com
happys44.com
hardcoreandmature.com
hardxxxweb.com
harnishbruceshupe.com
hentaikings.com
hentaimoviefree.com
hentaimoviesgames.com
hungryforgays.com
i-fufel.com
ilikehotoporn.com
incestandbrother.com
inentits.com
inforeal07.com
inter-videos.com
irdybond.com
justmore-porn.com
kenpopo.com
la-savista.com
last-lesky.com
lemododo.com
lesa333.com
life111.com
linksclinic.com
lovelaaas.com
luckreal3.com
luckrom.com
maaaee.com
madtranny.com
male-rape-sites.com
mapi-tech.com
maris-lc.com
maturedadsex.com
maturegirlsnudes.com
micomall.com
mintminima.com
misyrons.com
moodlood.com
movie2collection.com
ms-tomb.com
my-phentermine-pills.com
nailed-beauties.com
nc-goril.com
neofetish.com
netgetporn.com
newgeoweb.com
nk-real.com
old-mature-links.com
one-royales.com
orgasm-secret.com
owiltrust.com
pantyhose-porn-stars.com
pilabook.com
pixbrowser.com
pornandfetish.com
prytvcash.com
pt2minx.com
puppyduk.com
qnashow.com
queenofmoms.com
raxdev.com
rdposters.com
realhardxxx.com
realrapegallerys.com
rinoze.com
rostovchat.org
salmikan.com
sara-pama.com
sart-ok.com
secretaryrapes.com
sexyeuroteens.com
sexymomsonpics.com
sexyteenpornsite.com
shemale-cum-tgp.com
shemaledailythumbs.com
shuluxx.com
softcoreaction.com
sosexybabes.com
sportrealxxx.com
stare4free.com
stellapast.com
storiesincestgay.com
sunnyasians.com
team6969.com
teamregules.com
teenshowspussy.com
teensinternal.com
teenvoyeurvideos.com
the-bondage-list.com
toplessnow.com
topnewthumbs.com
topxxxweb.com
tranny-sex-clips.com
trannys-world.com
trivialsoftware.com
troitsk-fc.com
tvanons.com
twinkgalls.com
tzttaas.com
ultrasexgals.com
uniform-pictures.com
unrealfukkfor4.com
valiruz.com
valkrutz.com
viponder.com
viprealscar.com
voyeur-and-pics.com
voyeurfreelinks.com
vsv-studio.com
w-gay.com
w-hardcore.com
wanksecrets.com
web-aks.com
whitepantyhosesex.com
windows-find4u.com
worldlinkcenter.com
x-adril.com
x-models-x.com
x10bab.com
xinglif.com
xxx-extreme-fetish.com
xxxcumhard.com
xxxpornpassion.com
y-tuture.com
yakyane.com
ylaala.com
youngshemalesex.com
z-borge.com
zaoffice1.com
zero-full.com
zladyboys.com
zukinell.com

69.50.219.235
ns1.pidnsku.org

69.59.28.0/24	Carolina Internet AS13618 RoadRunner RR-RC-Carolina Internet-Raleigh

70.38.70.58
poetryvisualized.com	reverse domain for RSA attacker domain idcns2.77169.net
www.poetryvisualized.com

71.6.221.94
autogoogl.info
computergoogl.info
deallike.info
googlbox.info
googlcool.info
ip94.ttpblog.com
likecreative.info
likedomain.info
marketinglike.info
realestategoogl.info	trojan downloader, exploit kit

72.18.202.18
americasnewtech.com
mail.americasnewtech.com
mail.thefathersgateway.org
ns.americasnewtech.com
ns.prescoproperties.com
ns.thefathersgateway.org
prescoproperties.com
thefathersgateway.org
umx1.worldadult.biz	Win32.Palevo

72.20.22.6
vk4.virustotal.com	DNS cache poisoning

74.53.169.2	fake anti-virus
winregpro.com
www.adwarefree.com
www.malwareremovalbot.com
www.registryfox.com
www.winregpro.com

74.54.156.234	fake anti-virus
download.2squared.com
download.adwarealert.com
download.adwarebot.com
download.antispyware.com
download.antispywarebot.com
download.errorkiller.com
download.errorsmart.com
download.errorsweeper.com
download.evidenceeraser.com
download.macrovirus.com
download.malwarebot.com
download.malwareremovalbot.com
download.privacycontrol.com
download.regclean.com
download.registrybot.com
download.registryclear.com
download.registryfox.com
download.registrysmart.com
download.regrecall.com
download.regsweep.com
download.spywarebot.com
download.spywareremover.com
download.spywarestop.com
download.winregpro.com
ea.9c.364a.static.theplanet.com
errorsmart.setupxv.com
get.adwarealert.com
get.adwarealert2009.com
mail.setupxv.com
setup.adwarealert.com
setup.adwarebot.com
setup.antispyware.com
setup.antispyware2008.com
setup.antispywarebot.com
setup.errorkiller.com
setup.errorsweeper.com
setup.evidenceeraser.com
setup.malwarebot.com
setup.malwareremovalbot.com
setup.regclean.com
setup.registrybot.com
setup.registryfox.com
setup.registrysmart.com
setup.regrecall.com
setup.regsweep.com
setup.spywareremover.com
setup.spywarestop.com
setupxv.com

74.54.156.235	fake anti-virus
*.audiodeviceerrors.com
*.drivers.pro
*.explorerrepair.com
*.fixaol.org
*.fixaolmail.com
*.fixdirectx.com
*.fixfileextension.com
*.fixoutlookexpress.net
*.flashplayerrepair.com
*.internetexplorer.pro
*.javascript.pro
*.javaupdates.org
*.microsofterrors.org
audiodeviceerrors.com
drivers.pro
eb.9c.364a.static.theplanet.com
errorfix.pro
explorerrepair.com
fixaol.org
fixaolmail.com
fixdirectx.com
fixdlls.com
fixfileextension.com
fixoutlookexpress.net
flashplayerrepair.com
free.javascript.pro
internetexplorer.pro
javascript.pro
javaupdates.org
mail.2squared.com
mail.adwarealert.com
mail.adwarealert2009.com
mail.adwarebot.com
mail.antispyware.com
mail.antispyware2009.com
mail.antispywarebot.com
mail.aolerrors.com
mail.audiodeviceerrors.com
mail.av360removaltool.com
mail.cheapcarsearch.com
mail.connectmyfiles.com
mail.copemedia.net
mail.drivers.pro
mail.erroreasy.com
mail.errorfix.com
mail.errorkiller.com
mail.errorrepairtool.com
mail.errorsmart.com
mail.errorstool.com
mail.errorsweeper.com
mail.errortune.com
mail.errorupdatetool.com
mail.evidenceeraser.com
mail.explorerfix.com
mail.explorerrepair.com
mail.explorertool.org
mail.fixaol.org
mail.fixaolmail.com
mail.fixdirectx.com
mail.fixoutlookexpress.net
mail.flashplayerrepair.com
mail.free-registrysmart.com
mail.geekonline.com
mail.ietools.org
mail.javaupdates.org
mail.macrovirus.com
mail.malwareremovalbot.com
mail.microsofterrors.org
mail.privacycontrol.com
mail.regclean.com
mail.regfixpro.com
mail.registryclear.com
mail.registryfox.com
mail.registrypc.com
mail.registrysmart.com
mail.regrecall.com
mail.regsweep.com
mail.regtool.pro
mail.repairerrors.com
mail.spywarebot.com
mail.spywareremover.com
mail.spywarestop.com
mail.updatesregistry.com
mail.vundofix.org
mail.winregpro.com
microsofterrors.org
registryrepair.pro
regtool.pro
soundcarderrors.com
spywareremover.com
support.drivers.pro
support.fixdirectx.com
support.fixfileextension.com
support.fixoutlookexpress.net
support.internetexplorer.pro
support.javascript.pro
support.mediaplayer.pro
www.drivers.pro
www.fixfileextension.com
www.fixoutlookexpress.net
www.internetexplorer.pro
www.javascript.pro
www.repairerrors.com
www.spywareremover.com

74.54.156.236
connectmyfiles.com	rogue

74.54.156.237
mail.regtool.com	rogue

74.63.219.132
*.bestspywarescanner.net
bestspywarescanner.net	fake anti-virus
www.bestspywarescanner.net

74.82.163.232
douxia.info
down.92rmm.com	Trojan QQFish
x.ring3.info

74.86.129.123	rape, animal abuse
violacionanal.com
violacionbrutal.com
violacionporno.com
violacionsexual.net
zoofilia-animal.net
zoofilia-gratis.name

75.125.222.242	IP address previously listed
aghtdkpaoxk.com
aghtdqpaoxk.com
carsinfinity.in
crystal1.searchcrystal.com
dbcyjnudoxk.com
dhjftzbdoxk.com
keirun.in
loncer.in
mcduimqmoxk.com
pfgswlopoxk.com
piamlzjpoxk.com
qjigaicqoxk.com
searchcrystal.com
www.searchcrystal.com

75.125.230.50	IP address previously listed, fake anti-virus
addwere.com
adwareblaster.com
adwareblocker.com
adwarecatch.com
adwarecatcher.com
adwarecheck.com
adwaredestroyer.com
adwareeraser.com
adwareinspector.com
adwareterminator.com
killthespyware.com
spyflusher.com
spypolice.com
spystriker.com
spywarecatch.com
spywarecatcher.com
spywarecops.com
spywarepolice.com
spywareseeker.com
spywareshield.com
spywarestriker.com
spywarewipe.com
spywipe.com
www.spywareguard.com

75.125.241.58	IP address previously listed, fake anti-virus
*.antispyware.com
adwarebot.com
antispyware.com
antispyware2009.com
errorsmart.com
mail.remover.org
registryclear.com
remover.org
support.antispyware.com
www.adwarebot.com
www.antispyware.com
www.antispyware2009.com
www.errorsmart.com
www.registryclear.com
www.regsweep.com
www.remover.org

75.125.50.26	bot registrations
aefrqajancz.com
aefwvznancz.com
aghiddaancz.com
aghidwaancz.com
ciamlbdcncz.com
gabnwiegncz.com
giawvangncz.com
hiarqujhncz.com
ihjfigvincz.com
iiahgvxincz.com
jdebperjncz.com
mjibpbrmncz.com
sghtnsksncz.com
viawvinvncz.com

75.125.61.160	paidfreedatabase.com Mobile, AL
75.125.61.161	paidfreedatabase.com Mobile, AL

75.125.61.162	paidfreedatabase.com Mobile, AL
database.privacycontrol.com
errorsweeper.com	fake anti-virus
spywaredb3.2squared.com
support.2squared.com
www.2squared.com
www.antispywarebot.com	fake anti-virus
www.errorsweeper.com
www.privacycontrol.com	rogue
www.regclean.com	rogue

75.125.61.163	paidfreedatabase.com Mobile, AL
errorrepairtool.com
errorupdatetool.com	fake anti-virus
www.errorrepairtool.com
www.errorsrepair.com

75.125.61.164	paidfreedatabase.com Mobile, AL
mail.windows-help.org
windows-help.org	rogue
www.windows-help.org

75.125.61.165	paidfreedatabase.com Mobile, AL
mail.xser89j23sgskjn490.com
xser89j23sgskjn490.com

75.125.61.166	paidfreedatabase.com Mobile, AL
mail.p2pnet.net

75.125.61.167	paidfreedatabase.com Mobile, AL
regfixpro.com
updatesregistry.com	rogue
www.regfixpro.com
www.updatesregistry.com

75.125.61.168	paidfreedatabase.com Mobile, AL
www.pcerrorfix.com

75.125.61.169	paidfreedatabase.com Mobile, AL
75.125.61.170	paidfreedatabase.com Mobile, AL
75.125.61.171	paidfreedatabase.com Mobile, AL
75.125.61.172	paidfreedatabase.com Mobile, AL
75.125.61.173	paidfreedatabase.com Mobile, AL
75.125.61.174	paidfreedatabase.com Mobile, AL
75.125.61.175	paidfreedatabase.com Mobile, AL
75.125.61.176	paidfreedatabase.com Mobile, AL
75.125.61.177	paidfreedatabase.com Mobile, AL
75.125.61.178	paidfreedatabase.com Mobile, AL
75.125.61.179	paidfreedatabase.com Mobile, AL
75.125.61.180	paidfreedatabase.com Mobile, AL
75.125.61.181	paidfreedatabase.com Mobile, AL
75.125.61.182	paidfreedatabase.com Mobile, AL
75.125.61.183	paidfreedatabase.com Mobile, AL
75.125.61.184	paidfreedatabase.com Mobile, AL
75.125.61.185	paidfreedatabase.com Mobile, AL


75.125.61.186	paidfreedatabase.com Mobile, AL
2squared.com
antispywarebot.com	fake anti-virus
privacycontrol.com	rogue
regclean.com

75.125.61.187	paidfreedatabase.com Mobile, AL
antispywarebotpro.com	fake anti-virus
errorsweeperpro.com	fake anti-virus
mail.antispywarebotpro.com
mail.errorsweeperpro.com
mail.privacycontrolpro.com
mail.regcleanlite.com	rogue
privacycontrolpro.com
regcleanlite.com

75.125.61.188	paidfreedatabase.com Mobile, AL
antispywarebotrenew.com
errorsweeprenew.com	fake anti-virus
mail.antispywarebotrenew.com
mail.errorsweeprenew.com
mail.privacycontrolrenew.com
mail.regcleanrenew.com
privacycontrolrenew.com	rogue
regcleanrenew.com	rogue

75.125.61.189	paidfreedatabase.com Mobile, AL
75.125.61.190	paidfreedatabase.com Mobile, AL
75.125.61.191	paidfreedatabase.com Mobile, AL

76.73.116.115
222bobo.com	Malicious software includes 85 trojan(s), 1 exploit(s). Successful infection resulted in an average of 1 new process(es) on the target machine.
55yin.com
www.55yin.com

76.73.4.3
*.511zy.com
511qvod.info
ns3.x5x.ru	name server for malware domains
qqrenti.net
www.511zy.com

76.73.4.4
qqrenti.org
rrrenti.com
www.qqrenti.org
www.rrrenti.com

76.73.4.10
bbs.77169.net	RSA attacker domain

76.73.4.14
*.77169.com	RSA attacker domain
*.77169.net	RSA attacker domain
77169dx.hap01.com
exploits.77169.net	RSA attacker domain
foo.77169.net	RSA attacker domain
hack.77169.com	RSA attacker domain
www.77169.com	"Hacked by Dis9 Team", RSA attacker domain
www.77169.net	RSA attacker domain

76.73.4.100
59nnn.com
888fcp.com
888fucai.com
999fucai.com
cecai8.com
cecai88.com
cecaivip.com
fucaivip.com
l23l5.com
zhongjiang18.com
zhongjiang88.com

76.73.4.101
*.398000.com
*.ns1.398000.com
398000.com
6688haomy.info
7708haomy.info
cbilumy.info
gq8888.com
guhuimy.info
l8899my.info
ns1.398000.com
root.ns1.398000.com

76.73.47.28	IP address previously listed
ns3.pidnsku.org

77.221.130.20	IP address previously listed
autoklad.net	visiting this web site may harm your computer.

77.221.130.44	IP address previously listed
misha800.ru	visiting this web site may harm your computer. misha800.ru appeared to function as an intermediary for the infection of 1 site(s)

81.177.139.111
*.474h3.jino.ru
*.fantasi.ru
*.gorod312forum.ru
*.mockva-seks.ru
*.moscva-seks.ru
*.moskva-seks.ru
*.putana-seks.ru
*.seks-defky.ru
*.seks-dozsug.ru
*.seks-dozug.ru
*.seks-girls.ru
474h3.jino.ru
adam.mockva-seks.ru
adam.moscva-seks.ru
adam.moskva-seks.ru
adam.putana-seks.ru
adam.seks-defky.ru
adam.seks-dozsug.ru
adam.seks-dozug.ru
adam.seks-girls.ru
adela.mockva-seks.ru
adela.moscva-seks.ru
adela.moskva-seks.ru
adela.putana-seks.ru
adela.seks-defky.ru
adela.seks-dozsug.ru
adela.seks-dozug.ru
adela.seks-girls.ru
alena.mockva-seks.ru
alena.moscva-seks.ru
alena.moskva-seks.ru
alena.putana-seks.ru
alena.seks-defky.ru
alena.seks-dozsug.ru
alena.seks-dozug.ru
alena.seks-girls.ru
annak.mockva-seks.ru
annak.moscva-seks.ru
annak.moskva-seks.ru
annak.putana-seks.ru
annak.seks-defky.ru
annak.seks-dozsug.ru
annak.seks-dozug.ru
annak.seks-girls.ru
daniel.mockva-seks.ru
daniel.moscva-seks.ru
daniel.moskva-seks.ru
daniel.putana-seks.ru
daniel.seks-defky.ru
daniel.seks-dozsug.ru
daniel.seks-dozug.ru
daniel.seks-girls.ru
david.mockva-seks.ru
david.moscva-seks.ru
david.moskva-seks.ru
david.putana-seks.ru
david.seks-defky.ru
david.seks-dozsug.ru
david.seks-dozug.ru
david.seks-girls.ru
eliska.mockva-seks.ru
eliska.moscva-seks.ru
eliska.moskva-seks.ru
eliska.putana-seks.ru
eliska.seks-defky.ru
eliska.seks-dozsug.ru
eliska.seks-dozug.ru
eliska.seks-girls.ru
eva.mockva-seks.ru
eva.moscva-seks.ru
eva.moskva-seks.ru
eva.putana-seks.ru
eva.seks-defky.ru
eva.seks-dozsug.ru
eva.seks-dozug.ru
eva.seks-girls.ru
fantasi.ru
filip.mockva-seks.ru
filip.moscva-seks.ru
filip.moskva-seks.ru
filip.putana-seks.ru
filip.seks-defky.ru
filip.seks-dozsug.ru
filip.seks-dozug.ru
filip.seks-girls.ru
gorod312forum.ru
hana.mockva-seks.ru
hana.moscva-seks.ru
hana.moskva-seks.ru
hana.putana-seks.ru
hana.seks-defky.ru
hana.seks-dozsug.ru
hana.seks-dozug.ru
hana.seks-girls.ru
helena.mockva-seks.ru
helena.moscva-seks.ru
helena.moskva-seks.ru
helena.putana-seks.ru
helena.seks-defky.ru
helena.seks-dozsug.ru
helena.seks-dozug.ru
helena.seks-girls.ru
ifree.ws
jakub.mockva-seks.ru
jakub.moscva-seks.ru
jakub.moskva-seks.ru
jakub.putana-seks.ru
jakub.seks-defky.ru
jakub.seks-dozsug.ru
jakub.seks-dozug.ru
jakub.seks-girls.ru
jana.mockva-seks.ru
jana.moscva-seks.ru
jana.moskva-seks.ru
jana.putana-seks.ru
jana.seks-defky.ru
jana.seks-dozsug.ru
jana.seks-dozug.ru
jana.seks-girls.ru
jarmila.mockva-seks.ru
jarmila.moscva-seks.ru
jarmila.moskva-seks.ru
jarmila.putana-seks.ru
jarmila.seks-defky.ru
jarmila.seks-dozsug.ru
jarmila.seks-dozug.ru
jarmila.seks-girls.ru
jaroslav.mockva-seks.ru
jaroslav.moscva-seks.ru
jaroslav.moskva-seks.ru
jaroslav.putana-seks.ru
jaroslav.seks-defky.ru
jaroslav.seks-dozsug.ru
jaroslav.seks-dozug.ru
jaroslav.seks-girls.ru
jaroslava.mockva-seks.ru
jaroslava.moscva-seks.ru
jaroslava.moskva-seks.ru
jaroslava.putana-seks.ru
jaroslava.seks-defky.ru
jaroslava.seks-dozsug.ru
jaroslava.seks-dozug.ru
jaroslava.seks-girls.ru
jiri.mockva-seks.ru
jiri.moscva-seks.ru
jiri.moskva-seks.ru
jiri.putana-seks.ru
jiri.seks-defky.ru
jiri.seks-dozsug.ru
jiri.seks-dozug.ru
jiri.seks-girls.ru
jitka.mockva-seks.ru
jitka.moscva-seks.ru
jitka.moskva-seks.ru
jitka.putana-seks.ru
jitka.seks-defky.ru
jitka.seks-dozsug.ru
jitka.seks-dozug.ru
jitka.seks-girls.ru
josef.mockva-seks.ru
josef.moscva-seks.ru
josef.moskva-seks.ru
josef.putana-seks.ru
josef.seks-defky.ru
josef.seks-dozsug.ru
josef.seks-dozug.ru
josef.seks-girls.ru
karel.mockva-seks.ru
karel.moscva-seks.ru
karel.moskva-seks.ru
karel.putana-seks.ru
karel.seks-defky.ru
karel.seks-dozsug.ru
karel.seks-dozug.ru
karel.seks-girls.ru
karolina.mockva-seks.ru
karolina.moscva-seks.ru
karolina.moskva-seks.ru
karolina.seks-defky.ru
karolina.seks-dozsug.ru
karolina.seks-dozug.ru
karolina.seks-girls.ru
katerina.mockva-seks.ru
katerina.moscva-seks.ru
katerina.moskva-seks.ru
katerina.seks-defky.ru
katerina.seks-dozug.ru
katerina.seks-girls.ru
kristyna.mockva-seks.ru
kristyna.moscva-seks.ru
kristyna.moskva-seks.ru
kristyna.seks-defky.ru
kristyna.seks-dozsug.ru
kristyna.seks-dozug.ru
kristyna.seks-girls.ru
ladislav.mockva-seks.ru
ladislav.moscva-seks.ru
ladislav.moskva-seks.ru
ladislav.seks-defky.ru
ladislav.seks-dozsug.ru
ladislav.seks-dozug.ru
ladislav.seks-girls.ru
lenka.mockva-seks.ru
lenka.moscva-seks.ru
lenka.moskva-seks.ru
lenka.seks-defky.ru
lenka.seks-dozsug.ru
lenka.seks-dozug.ru
lenka.seks-girls.ru
link.cyberxz.jino.ru	TDL3/TDSS
mockva-seks.ru
moscva-seks.ru
moskva-seks.ru
nycbook.net
putana-seks.ru
seks-defky.ru
seks-dozsug.ru
seks-dozug.ru
seks-girls.ru
www.fantasi.ru
www.gorod312forum.ru

82.146.42.244
lamer.la	known bad actor
mail.lamer.la

83.233.33.6
fuskbugg.se	trojan
www.fuskbugg.se

84.123.115.228
defender-thga.in	fake anti-virus		youngantonio6055@gmail.com
defender-wqga.in	fake anti-virus		christodoulosglidden8856@gmail.com
defender-gnva.in	fake anti-virus		ananddaher7294@gmail.com
defender-rlob.in	fake anti-virus		vasikaranfreudenburg2690@gmail.com
defender-abcc.in	fake anti-virus		rubysmart5057@gmail.com
defender-pakc.in	fake anti-virus		sabrinawheelock7642@gmail.com
defender-keod.in	fake anti-virus		khashayarbirss4814@gmail.com
defender-xcre.in	fake anti-virus		pavelmayer4891@gmail.com
defender-qumf.in	fake anti-virus		rachelalba1891@gmail.com
defender-fmof.in	fake anti-virus		kamillamartin1237@gmail.com
defender-uvag.in	fake anti-virus		espenkeck7682@gmail.com
defender-hsug.in	fake anti-virus		moniquetkarnopp3596@gmail.com
defender-vxgh.in	fake anti-virus		griseldavelez5369@gmail.com
defender-lcoh.in	fake anti-virus		timothythomas6924@gmail.com
defender-kwwh.in	fake anti-virus		tobyboisseau6505@gmail.com
defender-osbi.in	fake anti-virus		fidelslattum2159@gmail.com
defender-wbui.in	fake anti-virus		carlosbuntschu1238@gmail.com
defender-vlmj.in	fake anti-virus		lauriefreeman9930@gmail.com
defender-hjlk.in	fake anti-virus		lauriefreeman9930@gmail.com
defender-endl.in	fake anti-virus		adamgaylard1113@gmail.com
defender-jgnl.in	fake anti-virus		caseyalzen3316@gmail.com
defender-iksl.in	fake anti-virus		marasanders9974@gmail.com
defender-labm.in	fake anti-virus		gregorybradford1520@gmail.com
defender-rrin.in	fake anti-virus		kevincharoenset5321@gmail.com
defender-sxin.in	fake anti-virus		taloupavlinovich7166@gmail.com
defender-cron.in	fake anti-virus		lisasuresh9147@gmail.com
defender-vqqn.in	fake anti-virus		chrisjames4421@gmail.com
defender-dteo.in	fake anti-virus		giovannaraggio5417@gmail.com
defender-uqko.in	fake anti-virus		christinakaaikati5574@gmail.com
defender-qpwo.in	fake anti-virus		carlaadams@gmail.com
defender-atxo.in	fake anti-virus		celineiebba9266@gmail.com
defender-rlfp.in	fake anti-virus		latanyamuscatell9507@gmail.com
defender-vflq.in	fake anti-virus		terriacuna2081@gmail.com
defender-eklq.in	fake anti-virus		sebastiensheppard8680@gmail.com
defender-ddbr.in	fake anti-virus		selenajohansson9195@gmail.com
defender-ojbr.in	fake anti-virus		fucknielsen8675@gmail.com
defender-drnr.in	fake anti-virus		sumanvcasquez2008@gmail.com
defender-nrpr.in	fake anti-virus		burtonalba8156@gmail.com
defender-kuts.in	fake anti-virus		rogerfrancis3322@gmail.com
defender-bcvs.in	fake anti-virus		martinefinklea5375@gmail.com
defender-grlt.in	fake anti-virus		anthonygaylard9887@gmail.com
defender-hmfu.in	fake anti-virus		lynnbone8026@gmail.com
defender-htlu.in	fake anti-virus		jerihamann4163@gmail.com
defender-aabv.in	fake anti-virus		leonflanagan7681@gmail.com
defender-ppdw.in	fake anti-virus		divinakempton5670@gmail.com
defender-wrhw.in	fake anti-virus		bradsuresh1406@gmail.com
defender-wkiw.in	fake anti-virus		otisvaladez7778@gmail.com
defender-hipw.in	fake anti-virus		angiejohansen9730@gmail.com
defender-qfdx.in	fake anti-virus		hokyeongyancey6369@gmail.com
defender-xnnx.in	fake anti-virus		sylviawulff2140@gmail.com
defender-xkox.in	fake anti-virus		ryanmartin7607@gmail.com

84.242.111.236	pharma
drpillsfresh.ru

84.242.111.237	IP address previously listed, pharma
*.ru.plazawestgamez.ru
*.viffy.ru.plazawestgamez.ru
9basic-business-feed.net
9breaking-news.net
elitgrandplayz.ru
faultsgeneralz.info
freshooelo.com
genepharms.net
greatdrpills.ru
ip-84-242-111-237.net.upcbroadband.cz
ns1.viffy.ru.classicplayroyal.ru
ns1.viffy.ru.classplayzworld.ru
ns1.viffy.ru.king-gamez-elit.ru
party-fortune-gamez.ru
roulettecrazyplayz.ru
royalfortunegames.ru
ru.plazawestgamez.ru
uknewdrpills.ru
viffy.ru.classicplayroyal.ru
viffy.ru.classplayzworld.ru
viffy.ru.king-gamez-elit.ru

84.242.111.238	IP address previously listed, pharma
*.lhxxkdp.ru
*.oemsoftware-buy.ru
*.ru.bonus-play-bingo.ru
*.ru.classicplayroyal.ru
*.ru.king-gamez-elit.ru
*.viffy.ru.bonus-play-bingo.ru
*.viffy.ru.classicplayroyal.ru
*.viffy.ru.king-gamez-elit.ru
bildobonyq.com
classic-royal-gamez.ru
classplayzworld.ru
hulyvtx.ru
ip-84-242-111-238.net.upcbroadband.cz
lhxxkdp.ru
ns1.oemsoftware-buy.ru
ns1.viffy.ru.elitgrandplayz.ru
ns1.viffy.ru.party-fortune-gamez.ru
ns1.viffy.ru.partyplayfortune.ru
ns1.viffy.ru.plazawestgamez.ru
ns1.viffy.ru.vegasfashiongamez.ru
ns2.oemsoftware-buy.ru
ns3.oemsoftware-buy.ru
ns4.oemsoftware-buy.ru
oemsoftware-buy.ru
phgbqtw.co.cc
playz-west-plaza.ru
playzworldclass.ru
qmtzmso.co.cc
refillgodart18m.ru
ru.bonus-play-bingo.ru
ru.classicplayroyal.ru
ru.king-gamez-elit.ru
saymed.in
tabvasily78t.ru
usadoctorpills2.ru
usadrpillsoft.com
usaonlinebillingdrpills.com
vegas-playz-joker.ru
viffy.ru.elitgrandplayz.ru
viffy.ru.party-fortune-gamez.ru
viffy.ru.partyplayfortune.ru
viffy.ru.plazawestgamez.ru
viffy.ru.vegasfashiongamez.ru
xbm.lhxxkdp.ru
zyxxoyl.co.cc

84.242.111.252	IP address previously listed, pharma
www.luxoryonlineplays.ru
*.bsiiie.ru.lavagold.ru
*.buy-web-oem-7.ru
*.digital-storeoem-2.ru
*.digitalstoreonline1.ru
*.familymedicineweb1.ru
*.lavagold.ru
*.luxoryonlineplays.ru
*.oem-software-digital.ru
*.ru.lavagold.ru
*.storeplanningweb.ru
*.storerunnerweb.ru
*.storewideweb.ru
*.themedicineweb.ru
*.thepharmacyweb.ru
*.toystoreweb.ru
*.usastoreweb.ru
*.worldmedicineweb.ru
allpretty.ru
alpodogs.ru
bassalert.ru
bassfoxy.ru
bassmax.ru
biopool.ru
blowmind.ru
boompool.ru
brandairport.ru
bsiiie.ru.lavagold.ru
buy-web-oem-7.ru
cas321.ru.games-party-fortune.ru
cas321.ru.party-games-fortune.ru
cheap-digital-2.ru
creamhair.ru
defensesuccessorv.info
digital-storeoem-2.ru
digitalstoreonline1.ru
elit-king-plays.ru
empleo-portal.net
familymedicineweb1.ru
feelsmall.ru
forkcat.ru
games-party-fortune.ru
gamesbestfortune.ru
getsmall.ru
glorywatches.ru
goldunrivaled.ru
goodcabin.ru
greenford.ru
hardpool.ru
hovermass.ru
hubhuge.ru
iceford.ru
ip-84-242-111-252.net.upcbroadband.cz
jumpcat.ru
lavagold.ru
livejolt.ru
lookcabin.ru
lookford.ru
lovebomb.ru
lovechips.ru
luxoryonlineplays.ru
manchart.ru
mindpool.ru
morecute.ru
ns1.bsiiie.ru.lavagold.ru
ns1.buy-web-oem-7.ru
ns1.cas321.ru.games-party-fortune.ru
ns1.cas321.ru.party-games-fortune.ru
ns1.glorywatches.ru
ns1.storeplanningweb.ru
ns1.storerunnerweb.ru
ns1.storewideweb.ru
ns1.themedicineweb.ru
ns1.thepharmacyweb.ru
ns1.toystoreweb.ru
ns1.usastoreweb.ru
ns1.worldmedicineweb.ru
ns2.buy-web-oem-7.ru
ns2.glorywatches.ru
ns2.oem-software-digital.ru
ns2.storeplanningweb.ru
ns2.storerunnerweb.ru
ns2.storewideweb.ru
ns2.themedicineweb.ru
ns2.thepharmacyweb.ru
ns2.toystoreweb.ru
ns2.usastoreweb.ru
ns2.worldmedicineweb.ru
ns3.buy-web-oem-7.ru
ns3.glorywatches.ru
ns3.storeplanningweb.ru
ns3.storerunnerweb.ru
ns3.storewideweb.ru
ns3.themedicineweb.ru
ns3.thepharmacyweb.ru
ns3.toystoreweb.ru
ns3.usastoreweb.ru
ns3.worldmedicineweb.ru
ns4.glorywatches.ru
oem-software-digital.ru
online-luxory-plays.ru
ouchsmall.ru
party-games-fortune.ru
pharmacydiscountweb.ru
pharmacyjobsweb.ru
pharmacyprescriptionweb.ru
pharmacytechnicianweb.ru
physicalmedicineweb.ru
questoil.ru
realmedicineweb.ru
riversoft-digital-2.ru
ru.lavagold.ru
salmon-food.net
shop-buy-digital.ru
storeplanningweb.ru
storerunnerweb.ru
storewideweb.ru
themedicineweb.ru
thepharmacyweb.ru
toystoreweb.ru
urgemax.ru
usastoreweb.ru
west-classic-plays.ru
winpool.ru
worldmedicineweb.ru
wowmonday.ru
www.luxoryonlineplays.ru

87.106.150.232
*.androgeek.com
skymilescreditcard.info	Win32/Virut.BN
wownovenalegion.com

87.242.76.68	IP address previously listed
*.xuix.com
3d2f.com	12 page(s) resulted in malicious software being downloaded and installed without user consent.
mail.3d2f.com
mail.beon.ru
mail.car-guru.com
mail.carguru.ru
mail.gyxe.com
mail.ltalk.ru
mail.mindmix.ru
mail.openhack.ru
mail.qaix.com
mail.ryxi.com
mail.softsearch.ru
mail.talxy.com
mail.talxy.ru
mail.tolxy.com
mail.tolxy.ru
mail.xuix.com
mail.xyqe.com
mail.xywe.com
mx.softsearch.ru
ns2.qaix.com
soft-blog.ru
soft-search.ru
softblog.ru
softbn.ru
softsearch.ru
www.3d2f.com
www.softbn.ru
www.softsearch.ru
www.xuix.com
xoib.com
xuix.com

87.98.253.89	child sexual abuse
*.antena.oo.lv
*.at.home.be
*.bannedscenes.oo.lv
*.blop.be
*.boulay.be
*.dns6.org
*.ecinema.oo.lv
*.home.be
*.houdart.be
*.htmlwww.openhost.be
*.iax.be
*.ipv4.be
*.lv.htmlwww.openhost.be
*.mu-heroia.oo.lv
*.odns.be
*.oo.lv
*.oo.lv.htmlwww.openhost.be
*.openhost.be
*.pouet.be
*.router.blop.be
*.skatiesfilmas.oo.lv
*.tassin.be
*.teeni.oo.lv
*.xdns.eu
*.yulia.oo.lv
adult.oo.lv	TR/Jevafus.B
alex.xdns.eu
anna.at.home.be
antena.oo.lv
armakidon.iax.be
at.home.be
bannedscenes.oo.lv
banzuke.oo.lv
birzgale.oo.lv
blop.be
boss.oo.lv
boulay.be
csv.oo.lv
dns.openhost.be
dns6.org
ds.xdns.eu
dvb.lu
ecinema.oo.lv
etname.at.home.be
ggoooogle.odns.be
grmml.dns6.org
hedy.oo.lv
home.be
hoseatex.iax.be
houdart.be
htmlwww.openhost.be
iax.be
ipv4.be
ipv6.lv
jest.oo.lv
kevinana.pouet.be
lootaxes.iax.be
loownx.at.home.be
lt.router.blop.be
lutiki.oo.lv
lv.htmlwww.openhost.be
mail.antena.oo.lv
mail.bannedscenes.oo.lv
mail.yulia.oo.lv
moldova-mu.oo.lv
mu-heroia.oo.lv
mu-night.oo.lv
mx.ecinema.oo.lv
mx.openhost.be
nasty.iax.be
ns.antena.oo.lv
odns.be
oo.lv
oo.lv.htmlwww.openhost.be
openhost.be
pms21.be
pouet.be
prototype-games.oo.lv
random.boulay.be
rlc.oo.lv
samey.oo.lv
sandra.pouet.be
skatiesfilmas.oo.lv
tassin.be
tcp-ip.be
teeni.oo.lv
teeni.oo.lv.htmlwww.openhost.be
ua.xdns.eu
vinel.be
webmania.net
webmania.org
www.boulay.be
www.dns6.org
www.home.be
www.houdart.be
www.iax.be
www.ipv4.be
www.mu-heroia.oo.lv
www.odns.be
www.oo.lv
www.openhost.be
www.pouet.be
www.skatiesfilmas.oo.lv
www.teeni.oo.lv
www.yulia.oo.lv
xdns.eu
yandexx.at.home.be
youngtop.oo.lv
yulia.oo.lv
zemafick.boulay.be

89.208.149.204
mialepromo.ru	U.S. Postal service brand jacker, dropper

89.28.13.199
shecanseeyou.info	visiting this web site may harm your computer. Malicious software includes 513 trojan(s), 22 exploit(s), 4 scripting exploit(s). Successful infection resulted in an average of 5 new process(es) on the target machine.

91.197.172.9
files.etherway.ru	Mebroot

91.220.131.104	IP address previously listed
freerealteengirls.com	Malicious software includes 89 exploit(s), 1 trojan(s).
gigashockporn.com	visiting this web site may harm your computer. Malicious software includes 1199 exploit(s), 86 trojan(s).
teenhandjobpix.com	visiting this web site may harm your computer. Malicious software includes 266 exploit(s), 2 trojan(s).
megashockporn.com	visiting this web site may harm your computer. Malicious software includes 370 exploit(s), 82 trojan(s).

93.175.240.0/20	AS47860 Albino-ua-as LLC Albino 69% of sites tested infected other sites.

93.186.127.0/24	AS44565 VITAL TEKNOLOJI

94.100.26.94
baqsoft.com
blogvip.ru	visiting this web site may harm your computer. Malicious software includes 89 exploit(s), 43 trojan(s). Successful infection resulted in an average of 2 new process(es) on the target machine.
ns1.baqsoft.com
wadscykaning.tk

94.199.180.228
*.uvegesgyorsszolgalat.hu
szocialisklaszter.hu
uvegesgyorsszolgalat.hu	ZeuSv2
www.uvegesgyorsszolgalat.hu

94.75.199.163
popbanner.net	Rootkit.Sirefef
www.popbanner.net

95.211.130.132	Backdoor.Tofsee

95.215.0.0/22	AS44050 PIN-AS Petersburg Internet Network LLC

95.215.0.23	pharma
ns1.drugseduard70o.ru
ns1.drugsfabio79a.ru
ns1.drugsflinn16a.ru
ns1.drugsgerri9a.ru
ns1.drugsgrace19a.ru
ns1.drugshilly2a.ru
ns1.drugsjock98s.ru
ns1.drugsrory58a.ru
ns1.drugsulrick49a.ru
ns1.drugsvern50a.ru
ns1.drugsxymenes60a.ru
ns1.erecthanan75f.ru
ns1.erectkin80f.ru
ns1.erectvirge82c.ru
ns1.medjackson96y.ru
ns1.onlineronald74a.ru
ns1.pharmhuntington90a.ru
ns1.pharmrancell35a.ru
ns1.pharmreggis23a.ru
ns1.pharmsalem36a.ru
ns1.pharmvictor30a.ru
ns1.pharmzelig37a.ru
ns1.pilljerrome64p.ru
ns1.pillprescott91s.ru
ns1.refillethelred53l.ru
ns1.refillgaspard50f.ru
ns1.refillisador73k.ru
ns1.tablem100l.ru
ns1.tabsyd31g.ru
ns1.ytdxaxci.ru

95.215.1.8
poleoa.net	Zeus trojan
anadtyskland.com
axeons.net
conitw.net
eriwes.net
gasanq.net
gelepr.net
gobenq.net
gorles.net
grediw.net
hedniz.net
herepq.net
hernok.net
honewq.net
horesk.net
kelipw.net
lomenr.net
lomins.net
maglrt.net
mail.anadtyskland.com
moewap.net
poleoa.net
powety.net
qoiuep.net
sundqx.net
uqazek.net
yumiwe.net

95.215.1.13	pharma
*.drugsfabio79a.ru
*.drugsflinn16a.ru
*.drugsgerri9a.ru
*.drugsgrace19a.ru
*.drugshilly2a.ru
*.drugsrory58a.ru
*.drugsulrick49a.ru
*.drugsvern50a.ru
*.drugsxymenes60a.ru
*.erectvirge82c.ru
*.medjackson96y.ru
*.onlineronald74a.ru
*.pharmreggis23a.ru
*.pharmsalem36a.ru
*.pharmvictor30a.ru
*.pillprescott91s.ru
*.radical-tabs.com
*.refillethelred53l.ru
*.refillisador73k.ru
*.tablem100l.ru
*.tabsyd31g.ru
drugsfabio79a.ru
drugsflinn16a.ru
drugsgerri9a.ru
drugsgrace19a.ru
drugshilly2a.ru
drugsrory58a.ru
drugsulrick49a.ru
drugsvern50a.ru
drugsxymenes60a.ru
erecthanan75f.ru
hostmaster.drugsfabio79a.ru
hostmaster.drugsflinn16a.ru
hostmaster.drugsgerri9a.ru
hostmaster.drugsgrace19a.ru
hostmaster.drugshilly2a.ru
hostmaster.drugsrory58a.ru
hostmaster.drugsulrick49a.ru
hostmaster.drugsvern50a.ru
hostmaster.drugsxymenes60a.ru
hostmaster.erecthanan75f.ru
hostmaster.erectvirge82c.ru
hostmaster.medjackson96y.ru
hostmaster.onlineronald74a.ru
hostmaster.pharmreggis23a.ru
hostmaster.pharmsalem36a.ru
hostmaster.pharmvictor30a.ru
hostmaster.pillprescott91s.ru
hostmaster.refillethelred53l.ru
hostmaster.refillisador73k.ru
hostmaster.tablem100l.ru
hostmaster.tabsyd31g.ru
mail.radical-tabs.com
ns0.tldns.me
ns1.tldns.me
onlineronald74a.ru
pharmreggis23a.ru
pharmsalem36a.ru
pharmvictor30a.ru
pillprescott91s.ru
radical-tabs.com
refillethelred53l.ru
tablem100l.ru
ytdxaxci.ru

95.215.2.56
krot.name
traff.biz

95.215.2.57
*.loadkino.com
loadkino.com
mx1.loadkino.com
ns2.loadkino.com
www.loadkino.com

95.215.2.100
cisco.shikima.net

95.215.4.0/24	AS6849 UKRTELNET JSC UKRTELECOM

95.215.5.0/24	AS6849 UKRTELNET JSC UKRTELECOM

95.215.6.0/24	AS6849 UKRTELNET JSC UKRTELECOM

95.215.62.29
*.5-kapel-club.ru
*.amagirls.ru
*.htmlweb.ru
*.po-gazam.ru
*.pritop.ru
*.torrentbay.ru
*.tyumen-it.ru
44.web-dozor.ru
5-kapel-club.ru
admin.5-kapel-club.ru
admin.fidep.ru
admin.po-gazam.ru
admin.pritop.ru
admin.torrentbay.ru	piracy
admin.tyumen-it.ru
amagirls.ru
clickwm.ru	visiting this web site may harm your computer.
detal-ka.ru
fidep.ru
htmlweb.ru
intermg.ru
po-gazam.ru
pritop.ru
tyumen-it.ru
www.5-kapel-club.ru
www.amagirls.ru
www.htmlweb.ru
www.po-gazam.ru
www.pritop.ru
www.tyumen-it.ru

95.215.7.0/24	AS6849 UKRTELNET JSC UKRTELECOM

95.64.8.0/24	INTERMEDIA TOP SRL AS49873 Telecompo-AS "Telecompo" Ltd.

95.64.8.5	drive by exploits
*.com.servat.cc
*.nwolb.com.servat.cc
com.servat.cc
nwolb.com.servat.cc
www.nwolb.com.servat.cc

95.64.8.27	malvertising
*.newslocal89.com
localnews47.com
localnews69.com
newslocal64.com
newslocal74.com
newslocal89.com
root.newslocal89.com

95.64.8.75	drive by exploits
atlaty.com
atydut.com
buroti.com
derat.cz.cc
fileac.com
itapos.com
lsrato.com
memhys.com
mew2.ce.ms
morafu.com
mupoga.com
muposs.com
nlosaf.com
onfiro.com
podyme.com
poisor.com
posjuc.com
posunn.com
qertys.com
qz2m.co.cc
scoolq.com
se3k.co.cc
tmwars.com
usudom.com
zy8n.co.cc

95.64.8.197	malvertising, fake anti-virus
*.censonger.co.cc
*.fergoson.co.cc
*.kersten.ce.ms
*.koszynsko.co.cc
*.wygle.ce.ms
censonger.co.cc
euchewom.tk
fergoson.co.cc
kersten.ce.ms
koszynsko.co.cc
scan12.kersten.ce.ms
scan20.fergoson.co.cc
scan30.koszynsko.co.cc
scan42.censonger.co.cc
update18.wygle.ce.ms
wygle.ce.ms

95.64.8.198	malvertising, fake anti-virus
*.pockong.cz.cc
diuplymdau.co.cc
gedessa.co.cc
hodgbackthe.co.cc
hoognauper.co.cc
mmogner.co.cc
ogifis.co.cc
onezne.co.cc
onmoceo.co.cc
orenab.co.cc
pockong.cz.cc
sgeces.ce.ms
theowasti.co.cc
update21.clemowceer.cz.cc
update8.pockong.cz.cc

95.82.34.4	Trojan Palevo

96.44.137.149
18luoliao.info	visiting this web site may harm your computer. Malicious software includes 883 trojan(s).
520ckk.com
57luoliao.info
59xxb.com
91xxb.com
99luoliao.info
jmzpl.info
www.g03z.com

96.9.130.165
1001video.com
700spb.ru
72e.ru
a-linea.ru
add.s-films.ru
aliveshare.net
all-c.ru
allvpn.net.ru
art-al.ru
bigporn-hd.com
bmrc.net
chess45.ru
galaxymusic.ru
govorushenko.ru
gyg-stop-car.info
gyg-stop-dor.info
gyg-stopcar.info
gyg-stopdor.info
gyg-trassa-au.info
gyg-trassaau.info
gygstop-dor.info
gygstopdor.info
gygstopmass.info
gygtrassa-av.info
gygtrassaav.info
host-box.ru
hotpornzone.net
ipoteka2011.tk
landshaft.tk
lj7.ru
love-sity.ru
mass-au-gyg.info
mass-augyg.info
mass-aumotor.info
massandra-ps.crimea.ua
massau-gyg.info
massau-motor.info
massaugyg.info
massaumotor.info
masterhoster.ru
materialsfortheinterior.info
metalloobrabotka.net
mobilphone2011.tk
motor-gyg-dor.info
motor-gygdor.info
motorgyg-dor.info
nanotehnology.tk
odnaidea.ru
ofap.net
otoplenie.tk
pornbest.in
pricheskaclub.tk
proelektrika.ru
psiholog.kiev.ua
putani.info
razvratnica.net
rusdns.org.ru
s-films.ru
scfex.com
securepagelogin.com
segvon.com
sex-devochki.info
sex-devushki.info
sex45.ru
skriptbox.ru	DDoS.Optima
stroim.proelektrika.ru
t86.ru
vgt41.vgthosting.com
warezona.ws
wmeu.ru
www.72e.ru
www.a-linea.ru
www.all-c.ru
www.allvpn.net.ru
www.art-al.ru
www.bmrc.net
www.dosuk.org
www.galaxymusic.ru
www.lj7.ru
www.love-sity.ru
www.massandra-ps.crimea.ua
www.odnaidea.ru
www.proelektrika.ru
www.putani.info
www.secabe.com
www.sex45.ru
www.skriptbox.ru	DDoS.Optima
www.stroim.proelektrika.ru
www.t86.ru
www.tetrial.net
www.vnew.ru
x-dosug.com
xtorrent.net
xxx-forum.tk

98.126.11.178	Trojan OnlineGames
*.21nn.cn
*.lcjin.cn
*.ns1.zlksw.cn
*.zlksw.cn
10zhounianhd.com
guanfanghuodong.com
huodongxy.com
lcjin.cn
ns1.zlksw.cn
root.ns1.zlksw.cn
shinianhuodong.com
shunfa6.com
www.21nn.cn
www.lcjin.cn
www.zlksw.cn
wywg.20-13.cn
wywg.21nn.cn
wywg.37tx.cn
wywg.4vido.cn
wywg.737r.cn
wywg.98yt.cn
wywg.ab918.cn
wywg.ahtxw.cn
wywg.am99.cn
wywg.awcd.cn
wywg.bbczl.cn
wywg.blvz.cn
wywg.ccsfyb.cn
wywg.fpls.cn
wywg.hnwy.cn
wywg.ieoke.cn
wywg.ifetr.cn
wywg.jgyh.cn
wz636.com
xingyunwb-vip.com
xingyunyonghu-vip.com
xinyunhuo.com
xinyunhuodong.com
ycziwei.com
zhounian-vip.com
zhounianqingdian.com
zlksw.cn

98.126.11.179	Trojan OnlineGames
84561.com
l000.us

98.126.11.180	Trojan OnlineGames
wywg.031d.cn
wywg.404i.cn
wywg.61it.cn
wywg.69qb.cn
wywg.xq2y.cn

98.126.11.194
3333338.com
dvc82.com
dvn77.com
dvu7.com
verifyyourage.net
www.90cps.com
zx06.com

98.126.14.218
80ok.info	Malicious software includes 1235 trojan(s).
daquanw.com
ronggou.com
bb178.info	Malicious software includes 27 trojan(s)
91liaoliao.info	Malicious software includes 8 trojan(s).

98.126.24.162
dacv.info
msrre.com
qdko.info	stnjts wbar known bad actor
ssxb.info
wowand.com
www.aicaiyule.com

98.126.229.114
97cpm.com	Malicious software includes 186 trojan(s).

98.126.242.114
955uc.org	Malicious software includes 1066 trojan(s).

98.126.63.19
jcardil.com	Malicious software includes 568 exploit(s), 14 scripting exploit(s).