RBN IP List Update 5-27-2011



RBN IP List Removals:

199.30.139.110 replaced by 199.30.139.0/24
92.38.232.93 replaced by 92.38.232.0/24



RBN IP List Additions:

118.142.83.181
97199.com
down.97199.com	Android trojan follow on
srtyj.com

123.252.193.141
asur56hhzs72n8.com
98dfgr994883798df.com	Zeus
fs8g78f8dduf.com

124.232.147.145	name servers for malware domains
591m2.com
ns2.befvi.ru
ns2.bt4bt.ru
ns2.dnsnew111.ru
ns2.refg436ct.ru
ns2.vdj32vdj3.ru
ns2.viffy.ru
ns3.gcas.ru
ns4.buddgd.ru

173.244.212.242	product piracy
*.ctoshop.com
168hshop.com
925jewerly.com
abagtown.com
alifeshoe.com
ayuanshop.com
beier-jewelry.com
bestchooseforyou.com
brandfactorystore.com
ce-product.com
celebritybridal.net
dongdongcraft.com
dreamcigar.com
e-fifthavenue.com
ehealthpill.com
etowalk.com
foxonetel.com
ggccbrands.com
goodhandbag8.com
gzs-electrical.com
luxizone.com
marry925shop.com
mobilesmvp.com
necklacetitanium.com
nflmlbshop.com	unlicensed, Chinese product piracy
s-fifthavenue.com
shop870.com
shopforlabel.com
silkinroad.com
slimminghall.com
taclamp-shop.com
tanwm.com
tokyoeshop.com
topphonehk.com
toptradeus.com
tradephonehk.com
ulike-show.com
usa.ctoshop.com
uwant-shop.com
vakcak.com
wholesaleclothingstock.com
wintech-shop.com
www.ggccbrands.com
www.propitiousgoods.com
www.wearbr.com
ynslimmig.com

173.255.206.5
quake2012.ru
webfrogs.ru	Incognito Exploit Kit
webpigs.ru

174.139.12.38	product piracy
ccytrade.com
estrategiachina.com
loves-art.com
namebrandjunkee.com
nflmlbjerseys.com	unlicensed, Chinese product piracy
shoes658.com
yicaotrade.com

180.150.132.197
mobile.flexispy.com	SymbOS.Flexispy.a
111-222-333-444.com
222-333-444-555.com
222-333-444-555.info
333-444-555-666.com
444-555-666-777.com
555-666-777-888.com
555-666-777-888.info
666-777-888-999.com
777-888-999-111.com
777-888-999-111.info
888-999-111-222.com
888-999-111-222.info
999-111-222-333.com
999-111-222-333.info
admin.flexispy.com
djp.cc
flexi-spy.ru
flexispy.com
login.flexispy.com
mobile.222-333-444-555.info
mobile.555-666-777-888.info
mobile.777-888-999-111.info
mobile.888-999-111-222.info
mobile.999-111-222-333.info
mobilefonex.com
utilities.flexispy.com
vervata.com
www.djp.cc
www.flexispy.com

188.26.199.0/24	AS8708 RDSNET

188.26.199.79	scams
anews7daily.com
awesomebeststocksnow.com
bestrichsecrets.com
binary-secrets.com
careertrendreports.com
dailyhotnewsk.com
dailyhotnewsm.com
dailyhotnewss.com
dailyhotnewst.com
dailyhotnewsw.com
dailynews7k.com
dailynews7m.com
dailynews7n.com
dailynews7o.com
dailynews7q.com
dailynewsc.com
dailynewsf.com
dailynewsl.com
dailynewsn.com
dailynewsq.com
datingundeemoon.com
dkpbigprofit.com
earning-secrets.com
enews7daily.com
freepassport4u.com
govbempnews.com
govbempreport.com
govbempreports.com
govbemps.com
govbempsreport.com
govbempupdates.com
hotbettyblog.com
hotcaroleblog.com
hotdailynewsj.com
hotdailynewsk.com
hotdailynewsl.com
hotdailynewsp.com
hotdailynewsz.com
hotexgfbonnie.com
hotexgfcarol.com
hotexgfcheryl.com
hotexgfchristine.com
hotexgfclaudia.com
hotexgfdiane.com
hotexgfevelyn.com
hotexgfgloria.com
hotexgfisabel.com
hotexgfjanice.com
hotexgfkate.com
hotexgfkristin.com
hotexgflori.com
hotexgflouise.com
hotexgfmandy.com
hotexgfmarlene.com
hotexgfnicole.com
hotexgfrachel.com
hotexgfrita.com
hotexgfrose.com
hotexgfrosemary.com
hotexgfstella.com
hotexgftaisia.com
hotexgftonya.com
hotexgfvanessa.com
hotexgfvera.com
hotexgfvicki.com
hotmargieblog.com
hotmaryblog.com
hotrebeccablog.com
howtogetrich1.com
inews7daily.com
mnews7daily.com
nnews7daily.com
nynews7daily.com
qnews7daily.com
rich-secrets.com
rnews7daily.com
sexyhottieadela.com
sexyhottiebianca.com
sexyhottiegreta.com
sexyhottiehilary.com
sexyhottiejuliana.com
sexyhottiejuliette.com
sexyhottiemadelyn.com
sexyhottiemarci.com
sexywhoreamy.com
sexywhoreanita.com
sexywhoreclaudia.com
sexywhorediane.com
sexywhoredonna.com
sexywhorelori.com
sexywhorerachel.com
sexywhorerose.com
sexywhorestella.com
sexywhorevanessa.com
topmoney-secrets.com
unews7daily.com
usanews7daily.com
usbestoffers.com
usews7daily.com
wdcnews7daily.com
wdnews7daily.com
wnews7daily.com
xnews7daily.com
mortgagenewsi.com
mortgagenewsp.com
mmaxgagner.com
mortgagenewsv.com
*.gcas.ru.hotexgfkristin.com
*.hotexgfkristin.com
*.ru.hotexgfkristin.com
gcas.ru.hotexgfkristin.com
hotdailynewsz.com
hotexgfkristin.com
ru.hotexgfkristin.com

199.30.139.0/24	AS174 COGENT/PSI

199.30.139.109

199.30.139.110 OS X malware
mstoolonline.com
ms-tool.com
macbookprotection.com
macbookprotector.com
mstoolkit.com
macbooksecurity.com

199.30.139.111 OS X malware
macbookprotector.com	

199.30.139.112 OS X malware
mstoolonline.com

199.30.140.205
*.52pojie.cn
*.700dy.com
*.dns860.com
110.com
17guagua.net
34.com
51sole.com
80.com
8791.com
898.com
9000114.com
9263.cn
cn.mu
dmding.com
dnspod-vip.urlpod.cn	known bad actor
fzvogue.com
gongchang.com
my4399.com
nalibar.com
qire123.com
qnr.cn
sj998.com
tom61.com
union.cn.mu
www.2bj.cc
www.898.com

207.179.75.114	backdoor/botnet command and control server
sauu.improverember.com
mdb.clawsnare.com
sview.clawsnare.com	falsified registrant data

208.71.105.191
*.blog60.fc2.com
403viplog.blog60.fc2.com	links to Mac malware
anjazz.blog60.fc2.com
blog60.fc2.com
fredhoyle.blog60.fc2.com
sanggarpamungkas.blog60.fc2.com
sippou2006.blog60.fc2.com

216.246.16.34
ofsrtndmcxcsoexq.org	Zeus

64.13.229.96
*.apropersite.com
*.robcarlos.com
apropersite.com	IRCBot
mail.apropersite.com
mail.robcarlos.com
robcarlos.com
www.apropersite.com

64.62.164.126
daily-giveaway-club.com
fastlander.com
financialalertssystem.com	Fake Epsilon Breach Warning Phish
online-rewards-center.com

70.32.96.69
theoneplanet.com	IRCBot

72.47.252.37
jabian.com	IRCBot


92.38.232.0/24	AS12695 DINET-AS

92.38.232.90
assamblerwearss.cz.cc
carbowearsans.cc.im
carboxxss.biz
ns1.carboxxss.biz
ns2.carboxxss.biz

92.38.232.91
valsofargowebss7777g.cz.cc
carboxxxs.biz
mail.carboxxxs.biz

92.38.232.92
analyticgoogle.net	visiting this web site may harm your computer. Malicious software includes 3 exploit(s). Successful infection resulted in an average of 13 new process(es) on the target machine.
lsospawwdfg.cz.cc	SpyEye
mail.analyticgoogle.net
mail.upstrack.org
proderton.com
savvi-investments.com	zeus v2.1 trojan, Blackhole exploit kit
upstrack.org	visiting this web site may harm your computer. Malicious software includes 2 exploit(s). Successful infection resulted in an average of 9 new process(es) on the target machine.
fg3r1sd.co.cc
www.neonreklamaonline.co.cc
popkorn52.cz.cc
topmail13.cz.cc
godzarion13.cz.cc
topmail14.cz.cc
dsloeubjbha.cz.cc
slsoiugha.cz.cc
vnbjhbnta.cz.cc
gulrva.cz.cc
etmzid.cz.cc
bnbnjnutd.cz.cc
orifytawd.cz.cc
taranoe.cz.cc
bjbytrsse.cz.cc
mvmjyyedf.cz.cc
pqolsuisydf.cz.cc
tresdff.cz.cc
ozrvdg.cz.cc
wowldskuydg.cz.cc
lsospawwdfg.cz.cc
oqwldkjyug.cz.cc
xrstxg.cz.cc
gnwwzm.cz.cc
domeniko.cz.cc
horitoko.cz.cc
infero.cz.cc
woloradyto.cz.cc
kotoewo.cz.cc
digjhbyhtq.cz.cc
diexr.cz.cc
lsloeuyybas.cz.cc
sdirytfgtgas.cz.cc	visiting this web site may harm your computer. Malicious software includes 12 exploit(s).
eodjbhas.cz.cc
pfofuttras.cz.cc
fofiubybyas.cz.cc
osuftgasds.cz.cc
cafokolos.cz.cc
xeperos.cz.cc
dugighnoass.cz.cc
hroncahss.cz.cc
iiisss.cz.cc
mvjutyats.cz.cc
mbybtasws.cz.cc
balorodu.cz.cc
pqomdnhgbv.cz.cc
eowlux.cz.cc
rotohaty.cz.cc
lotns4.co.be
voxmer67.co.be
ewloidydytgba.co.be
7ya.co.be
korab.co.be
best-android.co.be
8ne.co.be
jgidstn.co.be
slsodiugas.co.be
checks.co.be
soslwps.co.be
qlsoutyew.co.be
dkoousw.co.be
upstrack.org
www.upstrack.org
upsclients.org
aaxl.gv.vg
lsoqsgas.gv.vg
aaxx.gv.vg
etoneigra.iuqwksa.com
vashsagame.iuqwksa.com
varealestateblog.com
pictureusa.qoiwueoi.com
www1.aksdjlk.com
jrryder.com
vashamasha.outputjeans.com
perfectmatchproductions.com
picturesss.sajdiqu.com
output.sajdiqu.com
greatkelly.com
deed83.in
momozo.uk.to
auready.areureadyaua.net