From root at dbserver.netpilot.net Thu Feb 23 00:11:42 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 00:11:42 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 00:04:06 CET Message-ID: <20120222231142.A46491D68005@lists.clean-mx.com> Up(nil): JS/iFrame.cti ARIN US ipadmin at ecommerce.com 173.83.156.2 to 173.83.156.2 fashstylestoday.com http://fashstylestoday.com Up(nil): unknown_html_google_malware LACNIC BR abuse at comdominio.com.br 200.219.245.253 to 200.219.245.253 tycoonestudios.com.br http://tycoonestudios.com.br/port/ Up(nil): HTML/Drop.Agent.AB ARIN US abuse at dimenoc.com 64.37.48.20 to 64.37.48.20 trainingreports.in http://trainingreports.in Up(nil): JS/iFrame.cti ARIN US ipadmin at ecommerce.com 173.83.156.2 to 173.83.156.2 fash2all.com http://fash2all.com Up(nil): JS/iFrame.cti ARIN US ipadmin at ecommerce.com 173.83.156.2 to 173.83.156.2 world4blogs.com http://world4blogs.com Up(nil): JS/iFrame.cti ARIN US ipadmin at ecommerce.com 173.83.156.2 to 173.83.156.2 word2words.com http://word2words.com Down: NA ARIN US security at futurehosting.com 72.44.88.111 to 72.44.88.111 soloairesmaduro.com http://www.soloairesmaduro.com/XeDAnmz3/zN0TbKxQ.exe Up(nil): unknown_html ARIN US abuse at theplanet.com 67.18.18.122 to 67.18.18.122 mofiki.com http://www.mofiki.com/Mofikis-AutoClicker-Premium.php Down: unknown_html_google_malware ARIN US abuse at theplanet.com 64.246.3.226 to 64.246.3.226 desktop-xp.com http://www.desktop-xp.com/files/freespring.exe Up(nil): unknown_html ARIN US abuse at godaddy.com 184.168.179.1 to 184.168.179.1 fransfillingstation.com http://fransfillingstation.com/ Down: NA APNIC KR abuse at kornet.net 121.189.62.121 to 121.189.62.121 kr52.info http://ad.kr52.info/ Up(nil): unknown_html_RFI_eval RIPE DE abuse at aquatix.de 91.200.110.123 to 91.200.110.123 steuerkanzlei-jegert.de http://steuerkanzlei-jegert.de Up(nil): TR/PSW.Zbot.AF.1284 RIPE IT abuse at tiscali.it 213.205.38.22 to 213.205.38.22 stellacrociere.it http://stellacrociere.it/info/Dettagli.zip Up(nil): TR/PSW.Zbot.AF.1284 RIPE IT abuse at tiscali.it 213.205.38.22 to 213.205.38.22 stellacrociere.it http://stellacrociere.it/info/Confermata.zip Up(nil): JS/iFrame.cti ARIN US abuse at dimenoc.com 67.23.226.35 to 67.23.226.35 akhilgopinath.com http://akhilgopinath.com Up(nil): JS/iFrame.cti ARIN US abuse at dimenoc.com 67.23.226.35 to 67.23.226.35 kurampala.com http://kurampala.com Up(nil): JS/iFrame.GR RIPE PL abuse at onet.pl 213.180.150.17 to 213.180.150.17 republika.pl http://slonko_tg.republika.pl/poezja/ocalony.html Up(nil): JS/iFrame.cti ARIN US abuse at dimenoc.com 67.23.226.35 to 67.23.226.35 londonexpresscar.com http://londonexpresscar.com Up(nil): JS/iFrame.cti ARIN US abuse at dimenoc.com 67.23.226.35 to 67.23.226.35 prismazure.com http://prismazure.com Up(nil): JS/iFrame.cti ARIN US abuse at dimenoc.com 67.23.226.35 to 67.23.226.35 vanquishleather.com http://vanquishleather.com Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/autumn_demo.exe Up(nil): unknown_html ARIN US abuse at theplanet.com 67.19.210.162 to 67.19.210.162 mg-shadow.com http://www.mg-shadow.com/trial/ Up(nil): JS/iFrame.cti ARIN US abuse at bluehost.com 74.220.207.139 to 74.220.207.139 themiixx.com http://www.themiixx.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 00:33:06 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 00:33:06 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 00:31:11 CET Message-ID: <20120222233306.6333A1D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US abuse at godaddy.com 64.202.163.156 to 64.202.163.156 cevsl.org http://www.cevsl.org/tmp/Guardiao30hrs_v204.exe Down: NA ARIN US abuse at ntt.net 198.63.210.207 to 198.63.210.207 everstrike.com http://www.everstrike.com/rss.php Up(nil): unknown_html_RFI_shell RIPE DE abuse at hetzner.de 78.46.94.75 to 78.46.94.75 vzlomat.ru http://vzlomat.ru/engine/go.php?url=aHR0cDovL2hpZGVzb2Z0Lm5ldC92a3JhY2tlci56aXA= Down: NA APNIC KR abuse at kornet.net 121.189.62.121 to 121.189.62.121 kr52.info http://ad.kr52.info/images/ bak/i.html Up(nil): TR/ArchSMS.mhdfnc RIPE NL abuse at as49544.net 188.95.50.171 to 188.95.50.171 zip-host.in http://s4.zip-host.in/download/a0ca9834-3551/ Down: NA RIPE HU netadmin at enternet.hu 62.112.193.10 to 62.112.193.10 conspiracy.hu http://www.conspiracy.hu/ Up(nil): JS/iFrame.ZJ.1 RIPE DE abuse at Level3.com 62.140.23.84 to 62.140.23.84 quick-textilverwertung.de http://quick-textilverwertung.de/index-Dateien/slide0008.htm Up(nil): unknown_file_Jp2lt.exe ARIN US abuse at theplanet.com 74.52.123.230 to 74.52.123.230 thinninghairwomen.org http://www.thinninghairwomen.org/software/besthairlossproductpuzzle.exe Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 antispywareconsumerreport.com http://spywareremover.antispywareconsumerreport.com/drv/DvdRomDriverUpdate/Run-UpdateDriverTool.exe Up(nil): JS/Redirector.k.795 RIPE DE abuse at strato.de 81.169.145.71 to 81.169.145.71 uwfilm.com http://uwfilm.com/miraguade/video-seminar.htm Up(nil): HTML_IFRAME.SMDC RIPE DE abuse at 1and1.com 212.227.25.135 to 212.227.25.135 userport.co.uk http://userport.co.uk Up(nil): JS/iFrame.cti ARIN US ipadmin at ecommerce.com 173.83.156.2 to 173.83.156.2 fashstylz.com http://fashstylz.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 01:02:44 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 01:02:44 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 01:01:16 CET Message-ID: <20120223000244.899F11D68005@lists.clean-mx.com> Up(nil): TR/ATRAPS.Gen RIPE UA abuse at justhost.in.ua 91.213.8.76 to 91.213.8.76 pxnet.to http://pxnet.to/bi.exe Down: NA RIPE BE abuse at ispserver.com 82.146.54.230 to 82.146.54.230 zapzep.com http://zapzep.com/pad/wpmb.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/TMD-Math-Downloader.exe Up(nil): unknown_exe RIPE SI si-ripe at t-2.net 89.212.5.249 to 89.212.5.249 redzion.com http://www.redzion.com/dolvleka/Kriptirnik.exe Down: unknown_html_google_malware ARIN US abuse at theplanet.com 74.53.38.226 to 74.53.38.226 amritsarbuzz.com http://amritsarbuzz.com/property/images/limited_Account_From.html Up(nil): JS/iFrame.cti RIPE ES nemesys at telefonica.es 80.36.122.88 to 80.36.122.88 falbertocrespo.es http://falbertocrespo.es/index.php Up(nil): JS/iFrame.cti RIPE ES nemesys at telefonica.es 80.36.122.88 to 80.36.122.88 franciscotoajas.es http://franciscotoajas.es/index.php Up(nil): JS/iFrame.cti RIPE ES nemesys at telefonica.es 80.36.122.88 to 80.36.122.88 joseantoniodominguez.es http://joseantoniodominguez.es/index.php Up(nil): JS/iFrame.cti RIPE ES nemesys at telefonica.es 80.36.122.88 to 80.36.122.88 pepecaballero.es http://pepecaballero.es/index.php Down: NA ARIN US noc at godaddy.com 72.167.131.152 to 72.167.131.152 mysystemexpert.com http://www.mysystemexpert.com/SystemControlManagerSetup.exe Up(nil): PHP/PHPShell.K ARIN US abuse-mh at peer1.com 66.40.65.194 to 66.40.65.194 4mailnow.com http://4mailnow.com/emails/config.txt --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 01:33:17 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 01:33:17 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 01:30:38 CET Message-ID: <20120223003317.D42031D68005@lists.clean-mx.com> Up(nil): unknown_exe RIPE US ripeadmin at cotendo.com 94.127.76.80 to 94.127.76.80 bcdn.info http://cdn01.bcdn.info/geo/downloads/VLC/geo/BR/setup.exe Up(nil): unknown_exe ARIN US noc at securedprivatenetwork.net 67.215.233.132 to 67.215.233.132 67.215.233.132 http://67.215.233.132/offers/utct-02-conduit-20120130.exe Down: NA ARIN VG abuse at confluence-networks.com 208.91.197.104 to 208.91.197.104 mail-fax-internet.com http://www.mail-fax-internet.com/soft/freeemailfax.exe Up(nil): JS/iFrame.cti ARIN US abuse at godaddy.com 173.201.63.1 to 173.201.63.1 lyndasbathhouse.com http://lyndasbathhouse.com Up(nil): ADWARE/Agent.2225204 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/sdownload/wrr4001.exe Up(nil): unknown_file_$INSTDIR/htpm.exe ARIN US abuse at 1and1.com 74.208.183.11 to 74.208.183.11 hidetools.com http://www.hidetools.com/hsm/hsm_install.exe Up(nil): unknown_arch_zip APNIC AU abuse at tpg.com.au 203.26.24.80 to 203.26.24.80 tpg.com.au http://users.tpg.com.au/hbk02542/products/bktrro03.zip Down: NA ARIN US abuse at godaddy.com 72.167.1.59 to 72.167.1.59 chrisqueen.com http://chrisqueen.com/dp/distr/app-cashslide/site-0062101e758/lng-eng/cashslide.exe Up(nil): JS/Dldr.Agent.psyx ARIN US abuse at gnax.net 65.254.55.106 to 65.254.55.106 transvalia75.co.za http://transvalia75.co.za/fotos/include/smarty/iwerk/2.js Up(nil): JS/iFrame.aai.1 RIPE PT abuse at pt.clara.net 80.172.241.21 to 80.172.241.21 topcare.pt http://topcare.pt/mouseover.js Up(nil): JS/iFrame.aai.1 RIPE PT abuse at pt.clara.net 80.172.241.21 to 80.172.241.21 topcare.pt http://topcare.pt/menu.js Up(nil): JS/iFrame.aai.1 RIPE PT abuse at pt.clara.net 80.172.241.21 to 80.172.241.21 topcare.pt http://topcare.pt/header.js Up(nil): JS/iFrame.aai.1 RIPE PT abuse at pt.clara.net 80.172.241.21 to 80.172.241.21 topcare.pt http://topcare.pt/copyright.js Up(nil): JS/iFrame.aai.1 RIPE PT abuse at pt.clara.net 80.172.241.21 to 80.172.241.21 topcare.pt http://topcare.pt/copyright-allwebco.js --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 02:12:35 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 02:12:35 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 02:01:23 CET Message-ID: <20120223011235.F34151D68005@lists.clean-mx.com> Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/mou2n.exe Down: unknown_html_google_malware ARIN US Chavvon at yoggin.com 65.99.250.117 to 65.99.250.117 ezthemes.com http://www.ezthemes.com/site_tempfiles/themexp/b1/13/184880.exe Down: NA ARIN US abuse at linode.com 96.126.126.245 to 96.126.126.245 alfredomusik.de http://alfredomusik.de/search.php?page=d44175c6da768b70 Up(nil): unknown_file_$TEMP/ikdss.exe ARIN US nic at hostnoc.net 184.22.184.11 to 184.22.184.11 trumaxsystems.info http://trumaxsystems.info/jjegbs/icupsp.exe Up(nil): ADWARE/AdLoad.i.1 AFRINIC EU bitbucket at ripe.net 146.185.18.242 to 146.185.18.242 protetor.info http://protetor.info/download/alot/ad34/pcmegarapido.exe Up(nil): TR/Kazy.57011 ARIN US abuse at 1and1.com 74.208.87.128 to 74.208.87.128 slickthaceo.com http://www.slickthaceo.com/www.facebook.com Down: NA ARIN US abuse at theplanet.com 70.87.86.66 to 70.87.86.66 bahrainprimeminister.net http://bahrainprimeminister.net/images/family/family.exe Down: NA ARIN US security at level3.com 65.89.173.68 to 65.89.173.68 65.89.173.68 http://65.89.173.68/aspnet_client/report.asp Down: NA APNIC CN ipmgr at jltele.com 124.235.67.164 to 124.235.67.164 124.235.67.164 http://124.235.67.164/11.exe Up(nil): unknown_exe RIPE DE abuse at leaseweb.de 178.162.130.111 to 178.162.130.111 fileserve011.info http://fileserve011.info/fsmsetup.exe Up(nil): TR/Agent.363008.5 RIPE FR abuse at ovh.net 178.33.155.98 to 178.33.155.98 ares.com.es http://ares.com.es/downloads/Ares.exe Up(nil): unknown_html RIPE DE abuse at giga-hosting.biz 178.238.225.232 to 178.238.225.232 x-web.in http://x-web.in/Y2x8MS42fDNiZDQxNDNjMjJlMjgyZjIxMmJkZjgyYjE0MDgwMDBlfDMwNg== Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 softwarepile.com http://www.softwarepile.com/download/siiv.exe Up(nil): ADWARE/BonusCash.B APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://topguide.co.kr/update/TG29/TGU1003.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprinttwobonus.exe Up(nil): unknown_exe ARIN US ipadmin at websitewelcome.com 96.125.165.169 to 96.125.165.169 easy-iphone-unlocking.com http://easy-iphone-unlocking.com/download/blackra1n4.3.exe Up(nil): TR/VB.Downloader.Gen LACNIC BR abuse at gvt.com.br 177.43.95.226 to 177.43.95.226 colegiowz.com.br http://colegiowz.com.br/kebraav.ini& Up(nil): JS/iFrame.cti ARIN US abuse at singlehop.com 184.154.63.66 to 184.154.63.66 acd-seen-on-tv.com http://acd-seen-on-tv.com Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/outpostpro.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/outpostpro64.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/fsmpad.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/fblimiter_pad.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/chris_pclock_padfile.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/chrispc_free_anonymous_proxy_padfile.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/cftpdeluxe.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/download/cerberus-pad.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 02:33:27 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 02:33:27 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 02:30:44 CET Message-ID: <20120223013327.4EB941D68005@lists.clean-mx.com> Up(nil): PHISH/TAM.A RIPE DE ip at all-inkl.com 85.13.145.235 to 85.13.145.235 yvogeis.de http://yvogeis.de/wp-content/themes/folioway/cache/TAM/tam Down: NA ARIN US andy at centralhost.com 199.30.89.197 to 199.30.89.197 linertweet.com http://linertweet.com/ Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 crank-start.com http://crank-start.com Up(nil): unknown_html ARIN US abuse at godaddy.com 68.178.254.123 to 68.178.254.123 greenway-solutions.com http://greenway-solutions.com/FKhGvBAS/index.html Down: NA ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://yuzzxhbsdk.casino2win.eu/Fr-WinPalace.exe Up(nil): unknown_exe ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://yrarazsdra.casino2win.eu/Fr-WinPalace.exe Up(nil): PHISH/TAM.A ARIN US abuse at embarqservices.net 209.26.153.54 to 209.26.153.54 stcloud.org http://weblink.stcloud.org/images/index.asp Up(nil): unknown_exe RIPE DE abuse at telia.com 80.239.207.201 to 80.239.207.201 vshare.net.tc http://vshare.net.tc/Setup.exe Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 czechmatefilms.com http://czechmatefilms.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 czechmatefilms.com.au http://czechmatefilms.com.au Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 emelizabeth.com http://emelizabeth.com Up(nil): JS/iFrame.cti ARIN US abuse at gnax.net 74.81.94.114 to 74.81.94.114 christymoreno.com http://love.christymoreno.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 perfectscars.com http://perfectscars.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 pitchforce.com http://pitchforce.com Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/FireGratesTwit.exe Up(nil): unknown_exe ARIN US abuse at cyberwurx.com 69.61.74.189 to 69.61.74.189 onlinecasinoextra.com http://www.onlinecasinoextra.com/downloads/7reelscasino.exe Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 stylesonfile.com http://stylesonfile.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 203.170.85.189 to 203.170.85.189 thatiscookingawesome.com http://thatiscookingawesome.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 thebrisbaneexperience.com http://thebrisbaneexperience.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 thedisappointedband.com http://thedisappointedband.com Up(nil): JS/iFrame.cti ARIN US abuse at gnax.net 74.81.94.114 to 74.81.94.114 foreveryoungintl.com http://v1p.foreveryoungintl.com Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 yourvetcoach.com http://yourvetcoach.com Up(nil): unknown_exe ARIN US abuse at 1and1.com 74.208.87.128 to 74.208.87.128 slickthaceo.com http://www.slickthaceo.com/gb.jpg Up(nil): TR/Offend.KD.539324 ARIN US abuse at 1and1.com 74.208.87.128 to 74.208.87.128 slickthaceo.com http://www.slickthaceo.com/fb.jpg Up(nil): unknown_exe AFRINIC EU bitbucket at ripe.net 146.185.18.242 to 146.185.18.242 protetor.info http://www.protetor.info/download/alot/pcmega_2.1f.exe Up(nil): unknown_html ARIN US abuse at softlayer.com 174.36.55.111 to 174.36.55.111 pcmegarapido.com http://www.pcmegarapido.com/alot/ad34/manager_novo.htm Up(nil): unknown_exe ARIN US abuse at bluehost.com 69.89.21.152 to 69.89.21.152 myscenespace.ca http://myscenespace.ca/_pay/paypal/41upjmrlzz.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 03:10:05 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 03:10:05 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 03:01:17 CET Message-ID: <20120223021005.2DF2B1D68005@lists.clean-mx.com> Up(nil): ADSPY/NaviPromo.J RIPE UA abuse at hostbizua.com 91.207.44.10 to 91.207.44.10 falcogames.com http://www.falcogames.com/StreetKarate2Setup.exe Up(nil): unknown_html_RFI_eval ARIN US abuse at ee.net 173.45.108.10 to 173.45.108.10 is-a-financialadvisor.com http://promocaopremiada.is-a-financialadvisor.com/portal/lojista.php Down: unknown_html_google_malware ARIN US noc at amazon.com 72.21.203.149 to 207.171.163.152 bit89.com http://bit89.com/ Down: NA RIPE BE abuse at ispserver.com 82.146.54.230 to 82.146.54.230 zapzep.com http://zapzep.com/pad/rpms.exe Down: NA ARIN US abuse at theplanet.com 64.246.3.226 to 64.246.3.226 puzzle-game-download.com http://www.puzzle-game-download.com/files/free/zuma.exe Up(nil): unknown_exe ARIN US support at linode.com 173.230.141.92 to 173.230.141.92 goztun.com http://www.goztun.com/download/FlipFlashAlbumDeluxeSetup.exe Down: NA ARIN CA admin at dotcompower.com 208.66.16.52 to 208.66.16.52 attackonamericain2001.com http://attackonamericain2001.com/fbclassifieds.exe Down: UDS:DangerousObject.Multi.Generic APNIC CN abuse_gdnoc at 189.cn 183.60.197.176 to 183.60.197.176 sjs1.in http://3gf.sjs1.in:3533/z/ Down: Variant.Kazy.19005 RIPE UA abusemail at infiumhost.com 188.190.126.179 to 188.190.126.179 188.190.126.179 http://188.190.126.179/ Down: Trojan.Win32.StartPage.aqnj ARIN US admin-arin at vpls.net 174.139.50.44 to 174.139.50.44 174.139.50.44 http://174.139.50.44/zx/ Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.197.64 to 200.98.197.64 victorianajoias.com http://ftp.victorianajoias.com/gQLyytYi/ Up(nil): unknown_html RIPE DE abuse at hetzner.de 176.9.98.60 to 176.9.98.60 mdownload.org http://www.mdownload.org/modules/Products/admin/ Down: NA LACNIC BR abuse at comdominio.com.br 200.219.245.188 to 200.219.245.188 telaprint.com.br http://www.telaprint.com.br/SiteBuilder/UploadUsers/telaprint.com.br/Galeria/80848/gallery.php?pc=SANDBOXB Down: NA RIPE ES abuse at infortelecom.net 84.246.210.43 to 84.246.210.43 iweekend.org http://iweekend.org/nD8HmBK0/index.html Down: NA ARIN US support at linode.com 74.207.234.39 to 74.207.234.39 favoritetank.net http://favoritetank.net/ Up(nil): unknown_html ARIN US bnbrock at maileig.com 209.59.212.135 to 209.59.212.135 favoriteleague.com http://favoriteleague.com/ Down: NA ARIN US andy at centralhost.com 199.30.89.210 to 199.30.89.210 favoriteguild.com http://favoriteguild.com/ Down: NA ARIN US bnbrock at maileig.com 209.59.212.14 to 209.59.212.14 favoriteburger.net http://favoriteburger.net/ Up(nil): unknown_html_RFI_shell LACNIC BR network at digirati.com.br 187.73.33.15 to 187.73.33.15 anoticianv.com.br http://anoticianv.com.br/ Down: NA ARIN US abuse at linode.com 96.126.126.245 to 96.126.126.245 alfredomusik.de http://alfredomusik.de/ Up(nil): JS/iFrame.cti APNIC AU admin at syra.com.au 27.123.31.81 to 27.123.31.81 boatfriends.net http://boatfriends.net Up(nil): unknown_html_RFI_php RIPE DE abuse at hetzner.de 176.9.63.19 to 176.9.63.19 altervista.org http://tennisdiamanti.altervista.org/allnet.jpg?? Up(nil): unknown_html_RFI_php RIPE DE abuse at hetzner.de 176.9.63.19 to 176.9.63.19 altervista.org http://tennisdiamanti.altervista.org/byroe.jpg?? Up(nil): PHP/PBot.A.6 ARIN US abuse at limestonenetworks.com 64.31.30.93 to 64.31.30.93 hotmusics.net http://hotmusics.net/CMD.txt? --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 03:32:12 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 03:32:12 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 03:30:38 CET Message-ID: <20120223023212.B1A581D68005@lists.clean-mx.com> Up(nil): unknown_html RIPE US network at serverclub.com 93.170.104.78 to 93.170.104.78 antivirusbest.co.uk http://antivirusbest.co.uk/ Down: NA RIPE GB abuse at killercreation.co.uk 178.239.167.218 to 178.239.167.218 veenkoloniaalgoud.nl http://veenkoloniaalgoud.nl/wordpress/rapport.pdf.exe Up(nil): TR/Kazy.6832 RIPE UA abuse at justhost.in.ua 91.213.8.76 to 91.213.8.76 pxnet.to http://pxnet.to/winsvc.exe Up(nil): unknown_exe RIPE UA abuse at uahoster.org 91.217.153.21 to 91.217.153.21 osa.pl http://photo-album-m329c.osa.pl/photo.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/dvd-to-mp4-converter.exe Up(nil): unknown_exe ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://lmoixukydh.casino2win.eu/Fr-WinPalace.exe Up(nil): PUA.Packed.ASPack LACNIC BR abuse at comdominio.com.br 200.219.207.210 to 200.219.207.210 cabalonline.com.br http://info.cabalonline.com.br/Update/Files_2/pure/update.exe Up(nil): unknown_exe RIPE PL abuse at home.pl 89.161.214.29 to 89.161.214.29 home.pl http://ftp.zofia.home.pl/TjwyR1p.exe Down: Adware.EoRezo.T RIPE FR abuse at ovh.net 46.105.174.26 to 46.105.174.26 eorezo.com http://dfr.eorezo.com/clib/eorezo/fr//winrar/ Down: Variant.Adware.iBryte.2 RIPE FR abuse at ovh.net 46.105.174.26 to 46.105.174.26 eorezo.com http://dfr.eorezo.com/clib/eorezo/fr//counterstrike/ Down: Trojan.Generic.KD.541945 ARIN US abuse at cox.net 184.184.112.152 to 184.184.112.152 kbm2.com http://content.kbm2.com/offers/5/dl/ Up(nil): unknown_html RIPE DE abuse at funpic.de 213.202.225.90 to 213.202.225.90 funpic.org http://clichere.cl.funpic.org/EpicBot/ Down: HEUR:Trojan.Win32.Generic ARIN US abuse at mediatemple.net 70.32.91.126 to 70.32.91.126 cecicelanyc.com http://cecicelanyc.com/js/_inf/ Down: Monitor.Win32.Perflogger.fq APNIC kr abuse at nextline.co.kr 61.109.252.190 to 61.109.252.190 best11.co.kr http://best11.co.kr/comm/ Down: Backdoor.IRC.Zapchast.zwrc RIPE GB abuse at blueconnex.net 94.76.206.158 to 94.76.206.158 94.76.206.158 http://94.76.206.158/grafiche/ Up(nil): unknown_html RIPE DE abuse at plusserver.de 85.25.35.126 to 85.25.35.126 85.25.35.126 http://85.25.35.126/ecard/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 04:01:26 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 04:01:26 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 04:01:02 CET Message-ID: <20120223030126.3DF641D68005@lists.clean-mx.com> Up(nil): unknown_exe RIPE RO noc at voxility.com 109.163.226.162 to 109.163.226.162 filehold.net http://www.filehold.net/files/1a899664bbe2a2695f61c301320ae987.exe Down: File is damaged APNIC KR lws2065 at nate.com 115.165.176.35 to 115.165.176.35 modernplus.net http://download.modernplus.net/setup2/ Down: HEUR:Trojan.Win32.Generic RIPE FR abuse at ovh.net 46.105.174.26 to 46.105.174.26 eorezo.com http://dles.eorezo.com/clib/eorezo/es//counterstrike/ Down: Trojan-Banker.Win32.Banker.spyj ARIN US ec2-abuse at amazon.com 107.20.162.145 to 107.20.162.145 dropbox.com http://dl.dropbox.com/u/61447439/ Down: Trojan-Downloader.Win32.Refroso.aeto ARIN US ec2-abuse at amazon.com 107.20.162.145 to 107.20.162.145 dropbox.com http://dl.dropbox.com/u/60423033/ Down: Adware.EoRezo.T ARIN US ec2-abuse at amazon.com 107.20.162.145 to 107.20.162.145 dropbox.com http://dl.dropbox.com/u/58425109/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 04:33:22 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 04:33:22 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 04:30:50 CET Message-ID: <20120223033322.E69921D68005@lists.clean-mx.com> Up(nil): ADWARE/Relevant.377472 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 bostonhitech.com http://www.bostonhitech.com/sdownload/bill2000.exe Up(nil): unknown_exe RIPE CZ obchod at anoweb.cz 88.86.113.152 to 88.86.113.152 xf.cz http://videozone.xf.cz/daily/Play_Video5509_Click_Run.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 surprise-knjsct.tk http://surprise-knjsct.tk/ Up(nil): unknown_html_RFI_shell RIPE SK konc at primanet.sk 86.110.226.50 to 86.110.226.50 windows7download.com http://www.windows7download.com/win7-war-rock/kldwdlos.html Up(nil): unknown_html ARIN US abuse at singlehop.com 184.154.7.26 to 184.154.7.26 renew-order.com http://www.renew-order.com/ Up(nil): DR/StartPage.FK RIPE DE abuse at fibre1.net 85.114.135.84 to 85.114.135.84 yousex.in http://www.yousex.in/yousex.exe Up(nil): unknown_exe ARIN US abuse at godaddy.com 173.201.141.128 to 173.201.141.128 horse-screensavers.com http://horse-screensavers.com/software/exes/clydesdale.exe Up(nil): BDS/Backdoor.Gen RIPE DE abuse at hetzner.de 46.4.73.74 to 46.4.73.74 altervista.org http://trmunezz.altervista.org/trmungid.exe Up(nil): unknown_exe ARIN US nic at hostnoc.net 184.22.184.11 to 184.22.184.11 dvximage.info http://dvximage.info/hrettr/rbntnss.exe Up(nil): JS/iFrame.cti ARIN US abuse at turnkeyinternet.net 67.231.244.42 to 67.231.244.42 vancouverize.com http://vancouverize.com Down: NA ARIN US abuse at dimenoc.com 72.29.79.212 to 72.29.79.212 72.29.79.212 ftp://adolfogr:7o3vf0W7Wy at 72.29.79.212/www/Scripts/jquery/Mail.txt? Down: Trojan.Agent/Gen-Downloader RIPE RU abuse at avguro.com 81.177.139.75 to 81.177.139.75 free-old-games.ru http://free-old-games.ru/games/ Up(nil): unknown_html ARIN US abuse at theplanet.com 74.52.127.34 to 74.52.127.34 forexzu.net http://forexzu.net/pads/ Down: Trojan-Dropper.Win32.Delf.duy ARIN US abuse at comcast.net 68.48.224.111 to 78.109.151.74 esycwyf.eu http://esycwyf.eu/ Down: Backdoor.IRC.Zapchast.zwrc APNIC CN abuse at gddc.com.cn 121.12.172.169 to 121.12.172.169 huhumm04.com http://emxy.huhumm04.com:999/gengxin/ Up(nil): unknown_html APNIC TW network-adm at hinet.net 220.130.1.110 to 220.130.1.110 serveusers.com http://e-card.serveusers.com/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 05:04:00 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 05:04:00 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 05:01:43 CET Message-ID: <20120223040400.3E4061D68005@lists.clean-mx.com> Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 myipodcenter.com http://www.myipodcenter.com/download/miic.exe Up(nil): unknown_html ARIN US NOC at webnx.com 173.231.40.131 to 173.231.40.131 guccicenter.com http://guccicenter.com/inc/retail-santander/LOGSUK-NS-ENS/ Up(nil): unknown_html ARIN US abuse at jaguarpc.com 69.73.146.202 to 69.73.146.202 gresikunited.com http://gresikunited.com/inc/retail-santander/LOGSUK-NS-ENS/ Up(nil): unknown_exe ARIN US abuse at theplanet.com 69.93.79.171 to 69.93.79.171 mp3towav.org http://www.mp3towav.org/download/winxmedia_wmv_mp4_converter.exe Up(nil): unknown_exe ARIN US abuse at acenet-inc.net 207.45.186.94 to 207.45.186.94 jsr-productions.com http://www.jsr-productions.com/screensavers/CellRacingSetup.exe Up(nil): unknown_html ARIN CA noc at tera-byte.com 216.194.70.10 to 216.194.70.10 cjb.net http://users.cjb.net/vampir/mawlay.html Up(nil): JS/iFrame.cti ARIN US abuse at ntt.net 198.106.210.121 to 198.106.210.121 gv.ao http://www.comunicacaosocial.gv.ao Up(nil): unknown_html RIPE RU vadim at ufanet.ru 92.50.149.126 to 92.50.149.126 joomilas.tk http://webqt.joomilas.tk/ Up(nil): unknown_html RIPE FR abuse at ovh.net 213.186.33.4 to 213.186.33.4 webplayersearch.com http://webplayersearch.com/ Down: HEUR:AdWare.Win32.OneStep.gen ARIN US abuse at securedservers.com 174.138.160.19 to 174.138.160.19 wardom.us http://wardom.us/update/21/ Down: Adware.Zwangi ARIN US support at cdnetworks.com 174.35.4.134 to 174.35.7.26 bathitbox.com http://upgrade.bathitbox.com/download/questbasic/1_14/ Down: RiskTool.VBS.LoadExec.a ARIN US support at cdnetworks.com 174.35.6.25 to 174.35.4.134 batbeathit.com http://upgrade.batbeathit.com/download/basicscan/1_14/ Down: TrojanDownloader:Win32/Pluzoks.A ARIN US support at cdnetworks.com 174.35.6.39 to 174.35.7.3 areazonecircle.com http://upgrade.areazonecircle.com/download/zinkwink/1_1/ Down: AdWare.Win32.SideTab.ar APNIC kr abuse at skbroadband.com 218.38.15.92 to 218.38.15.92 rolypop.com http://up.rolypop.com/ Down: HEUR:Trojan.Win32.StartPage RIPE NL abuse at fiberring.com 87.255.54.11 to 87.255.54.11 selectedloads.com http://selectedloads.com/country/DE/ Up(nil): unknown_html RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/ Up(nil): unknown_html RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/ Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 187.17.98.44 to 187.17.98.44 prespor.com.br http://prespor.com.br/sv/ Togglevirusname: Trojan-Dropper.Win32.Dapato.adav to unknown_html_RFI_shell ARIN US abuse at bluehost.com 74.220.201.107 to 74.220.201.107 desgastec.net http://postalesgusanito.desgastec.net/1/e-cards/esp/mipostal/recoger/ Up(nil): unknown_html_RFI_shell ARIN US abuse at bluehost.com 74.220.201.107 to 74.220.201.107 desgastec.net http://postalesgusanito.desgastec.net/1/e-cards/esp/mipostal/recoger/ Down: WebToolbar.Win32.Zango.acfm RIPE NL abuse at leaseweb.com 85.17.156.80 to 85.17.156.80 placefortalk.net http://placefortalk.net/style/ Down: WebToolbar.Win32.Zango.acfm ARIN US abuse at internap.com 66.150.14.88 to 66.150.14.88 ravenbleu.com http://origin-ics.ravenbleu.com/IC/GPLRavenBleu05/32913/0/ed32f266-17db-466c-b97e-7203702e426e/ Down: WebToolbar.Win32.Zango.acfm ARIN US abuse at internap.com 66.150.14.88 to 66.150.14.88 ravenbleu.com http://origin-ics.ravenbleu.com/IC/GPLRavenBleu05/32913/0/e5987a83-8e7f-4e32-9f5b-d525ea744362/ Down: WebToolbar.Win32.Zango.acfm ARIN US abuse at internap.com 66.150.14.88 to 66.150.14.88 ravenbleu.com http://origin-ics.ravenbleu.com/IC/GPLRavenBleu05/32913/0/d18a2dda-64e4-4275-8428-47cc8ce62d02/ Down: AdWare.Win32.ScreenSaver.k ARIN US abuse at internap.com 66.150.14.88 to 66.150.14.88 ravenbleu.com http://origin-ics.ravenbleu.com/IC/GPLRavenBleu05/32913/0/cb0d4e72-d95f-494d-9306-e3a9d73610b4/ Down: HEUR:Trojan-Downloader.Win32.Generic ARIN US abuse at internap.com 66.150.14.88 to 66.150.14.86 brightbreeze.com http://origin-ics.brightbreeze.com/IC/GPLBrightBreeze16/32882/0/6ac60714-7ab6-4d06-88ee-98e192a5ee85/ Down: Trojan.Win32.Genome.ktdj RIPE RU info at eut.ru 212.59.117.29 to 212.59.117.29 new-code.ru http://new-code.ru/soft/vkg4/ Down: Trojan-PSW.Win32.Autoit.m RIPE HU abuse at t-online.hu 84.2.40.160 to 84.2.40.160 szoftverbazis.hu http://letoltes.szoftverbazis.hu/0acd9707806cccf2bba364b7ca5cbef7547d4b80/4f3e26fb/disspy-lite-v3-0-0-OG11/ Down: Hoax.Win32.ArchSMS.ipeo APNIC CN abuse at online.ln.cn 202.107.39.182 to 202.107.39.182 ns02.us http://gsp.ns02.us/d/ Down: NA ARIN US abuse at hostnoc.net 66.197.139.117 to 66.197.139.117 dudlik-munik.com http://i5p.dudlik-munik.com/logo.png?sv=825&tq=gL5HtzoYwLzEpUb5fU3HxcW0BPE6EsazybMRtyFZ0umG8Ar0SsSA/gSoSEU= Down: NA RIPE CZ abuse at casablanca.cz 109.123.210.163 to 109.123.210.163 webnode.com http://highspeedinternetlosangeles.webnode.com/news/1.php?sv=603&tq=gHZutDyMv5rJfiG1J8K+1MWCJbP4lltXIA== --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 05:32:06 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 05:32:06 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 05:30:48 CET Message-ID: <20120223043206.D804B1D68005@lists.clean-mx.com> Up(nil): unknown_exe RIPE NL abuse at serverius.nl 46.249.55.98 to 46.249.55.98 downloadexecute.com http://downloadexecute.com/uploads/c0t9l804o.exe Up(nil): JS/Agent.FDC ARIN US noc at godaddy.com 97.74.144.115 to 97.74.144.115 petronela.me http://petronela.me/wp-content/themes/irresistible/includes/js/superfish.js?ver=3.0.1 Up(nil): unknown_html ARIN US abuse at godaddy.com 72.167.1.59 to 72.167.1.59 chrisqueen.com http://chrisqueen.com/dp/distr/app-ekmedia/site-0062101e758/lng-eng/ekmedia.exe Up(nil): unknown_file_winplot.exe ARIN US ccs_arin at cable.comcast.com 209.23.204.39 to 209.23.204.39 exeter.edu http://math.exeter.edu/rparris/peanut/wp32z.exe Up(nil): unknown_exe ARIN US bnbrock at maileig.com 66.96.132.91 to 66.96.132.91 gatec.com.py http://gatec.com.py/publicidad/popup/Viejito.exe Down: NA RIPE DE abuse at ip-exchange.de 212.112.227.158 to 212.112.227.158 free-space.at http://free-space.at/gratis-webspace.exe Down: Trojan-Downloader/W32.Agent.366592.H ARIN US ipadmin at webair.com 174.137.173.78 to 174.137.173.78 manidownloads.info http://www.manidownloads.info/files/ Up(nil): unknown_html ARIN US noc at theplanet.com 174.121.151.218 to 174.121.151.218 incodesolutions.com http://www.incodesolutions.com/updr2/ Up(nil): unknown_html RIPE DE net-abuse at hosteurope.de 80.237.246.189 to 80.237.246.189 hide-ip-browser.com http://www.hide-ip-browser.com/ Down: Trojan-Spy.Win32.SpyEyes.adwg APNIC CN anti-spam at ns.chinanet.cn.net 117.21.226.98 to 117.21.226.98 xiangxueche.com http://www.fuck.xiangxueche.com/download.php/ Togglevirusname: Hoax.Win32.FBHack.c to unknown_html_RFI_eval RIPE LT abuse at zebra.lt 212.59.0.8 to 212.59.0.8 f-sport.lt http://www.f-sport.lt/ Up(nil): unknown_html_RFI_eval RIPE LT abuse at zebra.lt 212.59.0.8 to 212.59.0.8 f-sport.lt http://www.f-sport.lt/ Down: Hoax.Win32.ArchSMS.pic RIPE NL abuse at netrouting.eu 31.171.128.3 to 31.171.128.3 demonoid-invites.net http://www.demonoid-invites.net/ Up(nil): unknown_html APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com/ Up(nil): unknown_html ARIN US greg at jaguarpc.com 209.217.236.19 to 209.217.236.19 c-duke.com http://www.c-duke.com/contenidos/prod_cult/escuelas/ct/expo/ Down: VirTool.Win32.VB.iu ARIN US abuse at infortech.net 216.237.119.102 to 216.237.119.102 bigautomacao.com.br http://www.bigautomacao.com.br/sistemabig2/release/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 06:10:06 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 06:10:06 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 06:01:43 CET Message-ID: <20120223051006.5C5A31D68005@lists.clean-mx.com> Up(nil): PHISH/TAM.A ARIN US abuse at verizon.net 96.240.18.2 to 96.240.18.2 96.240.18.2 http://96.240.18.2/images/tam/index.asp Up(nil): SPR/PHP.ID ARIN US abuse at ecommerce.com 66.116.145.195 to 66.116.145.195 eruetr.tk http://eruetr.tk/e107/e107_log/idosyris.txt???? Up(nil): unknown_arch_zip RIPE FR abuse at gandi.net 92.243.19.91 to 92.243.19.91 hitstrack.in http://spider.hitstrack.in/mdl/1.jar Up(nil): unknown_file_$COMMON_PROGRAMS/Office Password Recovery/Office Password Recovery 5.0.exe ARIN US abuse at godaddy.com 184.168.229.155 to 184.168.229.155 recoverlostpassword.com http://www.recoverlostpassword.com/downloads/office_password_recovery_trial.exe Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 myipodcenter.com http://www.myipodcenter.com/download/mico.exe Up(nil): EXP/CVE-2011-3544.BF RIPE FR abuse at gandi.net 92.243.19.91 to 92.243.19.91 hitstrack.in http://spider.hitstrack.in/mdl/2.jar Up(nil): unknown_html ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/ Down: Program:Win32/Pameseg ARIN US nic at hostnoc.net 184.22.184.11 to 184.22.184.11 trumaxsystems.info http://trumaxsystems.info/jjegbs/ Up(nil): unknown_html RIPE DE abuse at hetzner.de 88.198.20.189 to 88.198.20.189 zipfile-down.ru http://zipfile-down.ru/ Up(nil): unknown_html ARIN US abuse at godaddy.com 173.201.233.128 to 173.201.233.128 yilmazlar-bmcenter.com http://yilmazlar-bmcenter.com/libraries/ Down: HEUR:Trojan.Win32.Generic ARIN US abuse at 1and1.com 74.208.30.213 to 74.208.30.213 yogawithdevta.com http://www.yogawithdevta.com/img/ Up(nil): unknown_html APNIC KR abuse at skbroadband.com 114.207.113.105 to 114.207.113.105 yes-english.co.kr http://www.yes-english.co.kr/css/ Up(nil): unknown_html RIPE IT abuse at ngi.it 88.149.174.74 to 88.149.174.74 volontarisanmartino.org http://www.volontarisanmartino.org/components/com_dor/ Up(nil): unknown_html RIPE FR abuse at ovh.net 213.186.33.4 to 213.186.33.4 uvnc.eu http://www.uvnc.eu/download/10962/ Down: AdWare.Win32.EZula.hgvo APNIC KR abuse at kornet.net 220.73.162.14 to 220.73.162.14 micronames.co.kr http://www.micronames.co.kr/download/App/835/ Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=177 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=145 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=124 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=176 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=90 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=70 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=33 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=92 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=54 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=23 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=66 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=38 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=90 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=59 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=35 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=93 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=69 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=33 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=76 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=46 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=21 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=69 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=35 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=172 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=147 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=99 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=66 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=37 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=90 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=28 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=93 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=57 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=24 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=86 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=64 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=32 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=97 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=70 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=31 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=89 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=54 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=32 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=78 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=53 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=29 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=86 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=31 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=136 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=93 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=55 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=29 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=70 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=31 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=88 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=67 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=31 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=93 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=59 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=31 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=84 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=58 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=81 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=44 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=22 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=91 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=66 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=91 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=32 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=71 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=169 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=147 Up(nil): EXP/Java.Blacole.K ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/worms.jar Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=68 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=36 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=59 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=24 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=56 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=27 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=82 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=56 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=27 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=79 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=56 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=27 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=82 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=56 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=24 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=84 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=58 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=37 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=87 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=52 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=48 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=67 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=100 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=170 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=95 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=56 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=26 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=0 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=84 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=58 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=35 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=0 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=86 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=65 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=41 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=21 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=0 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=74 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=49 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=21 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=0 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=87 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=51 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=26 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=0 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=77 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=52 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=29 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=0 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=85 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=26 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=0 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=39 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=0 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 06:32:29 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 06:32:29 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 06:30:58 CET Message-ID: <20120223053229.E736A1D68005@lists.clean-mx.com> Up(nil): unknown_exe RIPE DE abuse at hetzner.de 78.46.102.37 to 78.46.102.37 1x.biz http://weaponsettings1.1x.biz/lawInject/LawInject.exe Up(nil): unknown_exe ARIN US hostmaster at reflected.net 66.254.123.32 to 66.254.123.32 sexy-screen-savers.com http://www.sexy-screen-savers.com/downloads/sexys108.exe Down: unknown_html_google_malware ARIN US contact at dfw-datacenter.com 72.9.157.122 to 72.9.157.122 saverzz.com http://www.saverzz.com/download/anna-kournikova-1.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 surprise-kndww.tk http://surprise-kndww.tk/ Up(nil): unknown_exe RIPE HU info at 1bhosting.hu 193.142.209.22 to 193.142.209.22 kangamama.hu http://kangamama.hu/VSKnU.exe Up(nil): JS/iFrame.cau.1 ARIN US abuse at hostingsolutionsint.com 69.64.36.78 to 69.64.36.78 7-furniture.com http://7-furniture.com//index.php/outdoor.html Up(nil): JS/iFrame.cau.1 ARIN US abuse at hostingsolutionsint.com 69.64.36.78 to 69.64.36.78 7-furniture.com http://7-furniture.com//index.php/feed/rss.html Up(nil): JS/iFrame.cau.1 ARIN US abuse at hostingsolutionsint.com 69.64.36.78 to 69.64.36.78 7-furniture.com http://7-furniture.com//index.php/bar.html Down: AdWare.Win32.SideTab.ar APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 plustab.co.kr http://sm.plustab.co.kr/update/SM59/ Down: HEUR:Trojan.Win32.Generic APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 plustab.co.kr http://sm.plustab.co.kr/update/SM48/ Up(nil): unknown_html RIPE DE piotr at gmx.pl 88.198.224.154 to 88.198.224.154 yoyo.pl http://tibiaworld123.yoyo.pl/ Down: Trojan-Spy.Win32.Zbot.dldw RIPE HU abuse at gts.hu 195.56.193.98 to 195.56.193.98 mindenkilapja.hu http://users1.ml.mindenkilapja.hu/users/programok01/uploads/ Up(nil): unknown_html RIPE PL abuse at home.pl 89.161.214.29 to 89.161.214.29 home.pl http://ftp.zofia.home.pl/ Down: W32/Buzus.J.gen!Eldorado LACNIC BR abuse at comdominio.com.br 200.219.207.210 to 200.219.207.210 cabalonline.com.br http://info.cabalonline.com.br/Update/Files_2/pure/ Up(nil): unknown_html ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://lmoixukydh.casino2win.eu/ Up(nil): unknown_html RIPE UA abuse at uahoster.org 91.217.153.21 to 91.217.153.21 osa.pl http://photo-album-m329c.osa.pl/ Togglevirusname: Trojan.Agent/Gen-FallegT-Cont to JS/Blacole.BV.1 RIPE GB abuse at killercreation.co.uk 178.239.167.218 to 178.239.167.218 veenkoloniaalgoud.nl http://veenkoloniaalgoud.nl/wordpress/ Up(nil): JS/Blacole.BV.1 RIPE GB abuse at killercreation.co.uk 178.239.167.218 to 178.239.167.218 veenkoloniaalgoud.nl http://veenkoloniaalgoud.nl/wordpress/ Up(nil): unknown_html RIPE DE abuse at telia.com 80.239.207.201 to 80.239.207.201 vshare.net.tc http://vshare.net.tc/ Up(nil): unknown_html ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://yuzzxhbsdk.casino2win.eu/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 07:03:44 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 07:03:44 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 07:01:37 CET Message-ID: <20120223060344.72C061D68005@lists.clean-mx.com> Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/savsm.exe Down: NA ARIN US noc at theplanet.com 174.120.202.61 to 174.120.202.61 mindtoheartinstitute.com http://mindtoheartinstitute.com/Yogamiamiscreen3.exe Down: PHP/Spy.Ettu.D ARIN US abuse at liquidweb.com 72.52.254.226 to 72.52.254.226 marunda.com.sg http://picasa.com.marunda.com.sg/yahoo.php Up(nil): unknown_html_RFI_shell ARIN CA abuse at noc.privatedns.com 174.142.215.122 to 174.142.215.122 egoimpressao.com http://egoimpressao.com/FIDE/index1.php?=nlBI8SLOZGpfItW4ba6ZooLzBOEPYBPrhIAF2R6c1UQiAaEoxoe4kXGhEmNkvIxRnymKPVdaEDlcBC5kr7Dx2QQrM9xvjUqYDm65 Up(nil): unknown_html_RFI_shell ARIN CA abuse at noc.privatedns.com 174.142.215.122 to 174.142.215.122 egoimpressao.com http://egoimpressao.com/FIDE/index1.php Up(nil): unknown_html_google_malware RIPE UA postmaster at crimea.edu 80.245.119.18 to 80.245.119.18 crimea.edu http://solar.crimea.edu/index40.html?ddyuyduz Down: Trojan.Win32.Buzus.lasn ARIN US noc at amazon.com 207.171.163.34 to 207.171.163.132 amazonaws.com http://dl02.s3.amazonaws.com/installers/640909/ Togglevirusname: Variant.Kazy.57575 to unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147336518/a56580a/ Up(nil): unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147336518/a56580a/ Down: Trojan/W32.Agent.4000443 ARIN US bnbrock at maileig.com 66.96.132.91 to 66.96.132.91 gatec.com.py http://gatec.com.py/publicidad/popup/ Down: Trojan.BAT.StartPage.fk ARIN US nic at hostnoc.net 184.22.184.11 to 184.22.184.11 dvximage.info http://dvximage.info/hrettr/ Togglevirusname: Trojan-Dropper.Win32.ZAccess.ey to unknown_html_RFI_shell RIPE DE abuse at fibre1.net 85.114.135.84 to 85.114.135.84 yousex.in http://www.yousex.in/ Up(nil): unknown_html_RFI_shell RIPE DE abuse at fibre1.net 85.114.135.84 to 85.114.135.84 yousex.in http://www.yousex.in/ Up(nil): unknown_html RIPE CZ obchod at anoweb.cz 88.86.113.152 to 88.86.113.152 xf.cz http://videozone.xf.cz/daily/ Up(nil): unknown_html ARIN US abuse at peakwebhosting.com 204.11.223.9 to 204.11.223.9 casino2win.eu http://hjrbylzudt.casino2win.eu/ Up(nil): unknown_html RIPE UA abusemail at infiumhost.com 188.190.126.171 to 188.190.126.171 mensoloko.in http://mensoloko.in/ Togglevirusname: AdWare.Win32.SideTab.ar to unknown_html_RFI_shell RIPE ES abuse at arsys.es 217.76.150.31 to 217.76.150.31 restaurantejabalon.com http://restaurantejabalon.com/ Up(nil): unknown_html_RFI_shell RIPE ES abuse at arsys.es 217.76.150.31 to 217.76.150.31 restaurantejabalon.com http://restaurantejabalon.com/ Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=70 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=33 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=0 Up(nil): TR/Offend.KD.536807 RIPE UA colocation at ukr.net 91.232.199.33 to 91.232.199.33 91.232.199.33 http://91.232.199.33/files/17 Up(nil): unknown_exe RIPE UA colocation at ukr.net 91.232.199.17 to 91.232.199.17 91.232.199.17 http://91.232.199.17/files/52 Up(nil): TR/RevetonP.A RIPE UA colocation at ukr.net 91.232.199.17 to 91.232.199.17 91.232.199.17 http://91.232.199.17/files/48 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=79 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=50 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=20 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=87 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=63 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=30 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=28 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=0 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 07:31:54 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 07:31:54 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 07:30:55 CET Message-ID: <20120223063154.F3BC81D68005@lists.clean-mx.com> Up(nil): unknown_html APNIC CN abuse at cnc-noc.net 116.255.160.136 to 116.255.160.136 ha.cn http://www.xxit.ha.cn/CSS/1.html Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/toolbar1-2.exe Up(nil): ADWARE/Relevant.377472 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/sdownload/nfsmost3000.exe Down: NA ARIN US abuse at softlayer.com 50.23.205.16 to 50.23.205.16 cix.net.br http://www.cix.net.br/admin/tiny_mce/plugins/table/langs/sdsw/sees/CIELO/contact.html --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 08:07:08 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 08:07:08 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 08:01:45 CET Message-ID: <20120223070708.6FA441D68005@lists.clean-mx.com> Down: unknown_html_google_malware ARIN US contact at dfw-datacenter.com 72.9.157.122 to 72.9.157.122 saverzz.com http://www.saverzz.com/download/ana-hickmann-1.exe Up(nil): unknown_file_$INSTDIR/AIOSecurityManager.exe ARIN US noc at godaddy.com 72.167.131.152 to 72.167.131.152 mysystemexpert.com http://www.mysystemexpert.com/AIOSecurityManagerSetupFull.exe Down: NA RIPE DE abuse at hetzner.de 176.9.98.60 to 176.9.98.60 mdownload.org http://www.mdownload.org/modules/Products/admin/Compac.com Up(nil): TR/Spirt.8 RIPE HU abuse at gts.hu 195.56.193.98 to 195.56.193.98 mindenkilapja.hu http://users1.ml.mindenkilapja.hu/users/programok01/uploads/AVG_Anti-Virus_7.0.344.618__.exe Up(nil): TR/ATRAPS.Gen RIPE DE piotr at gmx.pl 88.198.224.154 to 88.198.224.154 yoyo.pl http://tibiaworld123.yoyo.pl/Javavirtualmachine_updatefortibiawiki.exe Down: unknown_html_google_malware RIPE VG noc.akrino at gmail.com 91.202.63.176 to 91.202.63.176 ez.lv http://rapidsrv23.ez.lv/a5/size3698688/rett Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/unicows.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/SpeedTreeRT.dll Down: NA RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/python22.dll Down: NA RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/MSVCRTD.DLL Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/msvcp60.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/MSS32.DLL Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/mscoree.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/Metin2Lcs.exe Up(nil): BDS/Hupigon.260927.1 RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/metin2.exe.bin Up(nil): BDS/Hupigon.261119 RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/metin2.bin Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/ilu.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/ijl15.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/ICSharpCode.SharpZipLib.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/granny2.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/DSETUP.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/devil.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/DevComponents.DotNetBar2.dll Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/config.exe Up(nil): unknown_exe RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/AutoPatch.exe Down: NA RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/artpclnt.dll Up(nil): TROJ_SPNR.15KL11 RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/2010ClientHelper.dll Up(nil): unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147336518/a56580a/bsup31.exe Up(nil): unknown_exe AFRINIC EG haitham.elgenedy at etisalatdata.net 41.64.21.71 to 41.64.21.71 energirans.net http://energirans.net/w.php?f=cddc7&&e=2 Up(nil): PHP/IRCBOT.K ARIN US abuse at ecommerce.com 66.116.145.195 to 66.116.145.195 eruetr.tk http://eruetr.tk/e107/e107_log/ver?&modez=shellz Down: unknown_html_google_malware ARIN US abuse at layeredtech.com 64.38.5.34 to 64.38.5.34 vetagro.cl http://picasa.com.vetagro.cl/dnx.php Down: unknown_html_google_malware ARIN US abuse at layeredtech.com 64.38.5.34 to 64.38.5.34 vetagro.cl http://picasa.com.vetagro.cl/stun.php Up(nil): PHP/BackDoor.AR ARIN US abuse at ecommerce.com 66.116.145.195 to 66.116.145.195 eruetr.tk http://eruetr.tk/e107/e107_log/2.txt??? Up(nil): TR/Script.75 ARIN US abuse at ecommerce.com 66.116.145.195 to 66.116.145.195 eruetr.tk http://eruetr.tk/e107/e107_log/1.txt?? Up(nil): PHP/IRCBOT.K ARIN US abuse at ecommerce.com 66.116.145.195 to 66.116.145.195 eruetr.tk http://eruetr.tk/e107/e107_log/ver?&modez=botz Down: NA ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/clonedvd/CloneDVDSetup_R75348.exe Up(nil): unknown_html RIPE HU info at 1bhosting.hu 193.142.209.22 to 193.142.209.22 kangamama.hu http://kangamama.hu/ Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=86 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=53 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=23 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=62 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=92 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=56 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 vmdaily.in http://vmdaily.in/content/ap1.php?f=31 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=54 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=36 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=85 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=51 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=99 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=68 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=30 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=85 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=55 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=25 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=93 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=55 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=31 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=92 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=57 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=77 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=46 Up(nil): EXP/Pidief.aud AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/content/ap1.php?f=23 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 08:31:12 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 08:31:12 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 08:30:47 CET Message-ID: <20120223073112.D1C091D68005@lists.clean-mx.com> Up(nil): unknown_arch_zip ARIN US abuse at gigenet.com 69.65.42.28 to 69.65.42.28 filebeam.com http://filebeam.com/download2.php?a=83be9718b3af6fdc5d9fb77d8012a7e3&b=7d302e695a86e66539d9721716206593 Up(nil): unknown_exe LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.246.163 to 200.98.246.163 dominiincorporadora.com.br http://dominiincorporadora.com.br/hgbkM.exe Up(nil): unknown_html ARIN US arin-contact at google.com 74.125.79.94 to 74.125.79.94 google.ro http://www.google.ro/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 09:04:56 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 09:04:56 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 09:01:33 CET Message-ID: <20120223080456.7F6391D68005@lists.clean-mx.com> Down: NA LACNIC BR regcom at locaweb.com.br 187.45.240.44 to 187.45.240.44 tibiaredbot.com.br http://www.tibiaredbot.com.br/news.html Up(nil): JS/iFrame.HI LACNIC BR regcom at locaweb.com.br 200.234.196.185 to 200.234.196.185 izabelbenavides.com.br http://izabelbenavides.com.br Down: NA RIPE DK abuse at easyspeedy.com 82.103.142.34 to 82.103.142.34 smartcheckerio.com http://www1.smartcheckerio.com/qhu241_5576.php?f6z0kksv45=iq3hp6ja6PCkmJniytaxmJ2cmZHV282smVzbks3dsMiIgJnZ1K+ml5mL0t6i6d/Htlzcmc+o1dV9equTytPh3OCix9LS09PY21zdk6i5v5ydpbCmlaClk5qTmJ2To56jjKnukd/g5rNlW+rWxa+pl47Z19eioprTm5itYaTMpthaqeaqkqWmnKGdlaGbo4/T1aPbmdmo6u2raaHVwuTYkM3LyuDG5M2dyaXnVt/Q692Wcujbytbcidvaxa7S1qbiy6TedtTX2Jo= Up(nil): unknown_html_google_malware ARIN US abuse at wholesaleinternet.net 204.12.247.106 to 204.12.247.106 110mb.com http://anekdots.110mb.com/r1.html Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/easyregistry.exe Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 bostonhitech.com http://www.bostonhitech.com/sdownload/book.exe Down: mdl_trojan Sinowal RIPE DE abuse at kabel-bb.de 77.20.179.251 to 88.59.252.242 oiriwvscohl.com http://oiriwvscohl.com/oiriwvscohl.com/w.php?f=5a20e&e=2 Down: mdl_Blackhole exploit kit RIPE DE abuse at kabel-bb.de 77.20.179.251 to 151.37.31.26 oiriwvscohl.com http://oiriwvscohl.com/index.php?tp=001e4bb7b4d7333d Down: mdl_zeus v2 drop zone RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/gate.php Togglevirusname: mdl_zeus v2 trojan to TR/Spy.ZBot.aoqb.5 RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/ldr.exe Up(nil): TR/Spy.ZBot.aoqb.5 RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/ldr.exe Togglevirusname: mdl_zeus v2 config file to unknown_html_RFI RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/cfg.bin Up(nil): unknown_html_RFI RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/cfg.bin Togglevirusname: mdl_zeus v2 config file to unknown_html_RFI ARIN CA admin at frantech.ca 209.141.60.202 to 209.141.60.202 weaponomd.ru http://weaponomd.ru/cx2.bin Up(nil): unknown_html_RFI ARIN CA admin at frantech.ca 209.141.60.202 to 209.141.60.202 weaponomd.ru http://weaponomd.ru/cx2.bin Togglevirusname: mdl_zeus v2 config file to unknown_html_RFI ARIN CA admin at frantech.ca 209.141.60.202 to 209.141.60.202 weaponomd.ru http://weaponomd.ru/cx.bin Up(nil): unknown_html_RFI ARIN CA admin at frantech.ca 209.141.60.202 to 209.141.60.202 weaponomd.ru http://weaponomd.ru/cx.bin Togglevirusname: mdl_trojan Sinowal to unknown_exe RIPE NL abuse at as9143.net 83.84.222.32 to 124.125.242.156 eolhonmcrp.com http://eolhonmcrp.com/w.php?f=5a20e&e=2 Up(nil): unknown_exe RIPE NL abuse at as9143.net 83.84.222.32 to 124.125.242.156 eolhonmcrp.com http://eolhonmcrp.com/w.php?f=5a20e&e=2 Down: mdl_trojan Sinowal APNIC AU abuse at dodo.com.au 122.150.248.70 to 83.86.165.159 rnpscolosegv.com http://rnpscolosegv.com/w.php?f=5a20e&e=2 Down: Trojan-Spy.Win32.Zbot.dlib RIPE RU noc at yola.ertelecom.ru 188.187.157.75 to 188.187.157.75 dlinkddns.com http://guiodertoll.dlinkddns.com/z/ Up(nil): unknown_arch_zip RIPE FR abuse at gandi.net 92.243.19.91 to 92.243.19.91 92.243.19.91 http://92.243.19.91/mdl/1.jar Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=167 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=137 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=180 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=52 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=22 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=85 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=52 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=27 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=83 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=50 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=28 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=66 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=37 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=41 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=20 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=96 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=66 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=43 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=21 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=97 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=61 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=98 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=34 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=97 Up(nil): JS/iFrame.cti ARIN US abuse at gigenet.com 69.65.3.223 to 69.65.3.223 lillianrecords.com http://lillianrecords.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 09:32:31 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 09:32:31 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 09:30:53 CET Message-ID: <20120223083231.C62B31D68005@lists.clean-mx.com> Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 trishulsoft.com http://erasehistory.trishulsoft.com/as/WhatIsSpyware/Run-SpywareEliminationSoftware.exe Down: NA APNIC KR abuse at kornet.net 183.111.8.171 to 183.111.8.171 torangcomz.com http://down.torangcomz.com/down/1.0.0.2/keywordfindagent.exe Up(nil): PHP/PBot.A.6 ARIN US abuse at limestonenetworks.com 74.63.243.194 to 74.63.243.194 preme.name http://preme.name//wp-content/themes/neo/lang/byroe.jpg?? Up(nil): PHP/IRCBOT.K ARIN US abuse at limestonenetworks.com 74.63.243.194 to 74.63.243.194 preme.name http://preme.name//wp-content/themes/neo/lang/allnet.jpg?? Up(nil): unknown_exe ARIN US abuse at pair.com 66.39.106.2 to 66.39.106.2 nch.com.au http://nch.com.au/components/panoann.exe Up(nil): unknown_html ARIN US abuse at godaddy.com 184.168.192.125 to 184.168.192.125 softwaregrabber.info http://www.softwaregrabber.info/OneClickPopupStopperSetup.exe Down: NA ARIN US noc at theplanet.com 174.120.202.34 to 174.120.202.34 orchidstoresecrets.com http://www.orchidstoresecrets.com/Orchid_Lights_Toolbar.exe Up(nil): unknown_exe ARIN US abuse at cyberwurx.com 69.61.74.189 to 69.61.74.189 onlinecasinoextra.com http://www.onlinecasinoextra.com/downloads/richcasino.exe Up(nil): ADWARE/Agent.2232997 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 file4me.com http://www.file4me.com/Conceiva/deadlink.exe Up(nil): unknown_html ARIN US abuse at 1and1.com 74.208.126.113 to 74.208.126.113 coulsontech.net http://coulsontech.net/ Up(nil): unknown_file_$[35]/utilnaraupdate.exe APNIC KR noc at hclc.co.kr 124.217.218.5 to 124.217.218.5 utilnara.co.kr http://down.utilnara.co.kr/update/utilnara_20101201_update.exe Up(nil): JS/iFrame.cti ARIN US abuse at liquidweb.com 69.167.150.108 to 69.167.150.108 scootersaregay.com http://scootersaregay.com Up(nil): JS/iFrame.cti ARIN US netops at singlehop.com 69.175.39.66 to 69.175.39.66 dancefromsoul.com http://dancefromsoul.com/index.html Up(nil): JS/iFrame.cti ARIN CA abuse at panelboxmanager.com 72.55.186.43 to 72.55.186.43 golfvins.com http://golfvins.com/index.php Up(nil): JS/iFrame.cti ARIN CA abuse at panelboxmanager.com 72.55.186.43 to 72.55.186.43 golfwines.com http://golfwines.com/index.php Up(nil): JS/iFrame.cti ARIN CA abuse at panelboxmanager.com 72.55.186.43 to 72.55.186.43 golfwinestravel.com http://golfwinestravel.com/index.php Up(nil): EXP/PHP.E RIPE IT hostmaster at technorail.com 62.149.140.25 to 62.149.140.25 gelateriarefrescos.com http://www.gelateriarefrescos.com/plugins/system/tool.txt? --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 10:10:40 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 10:10:40 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 10:03:06 CET Message-ID: <20120223091040.224821D68007@lists.clean-mx.com> Down: NA RIPE EU abuse at ripe.net 77.45.115.25 to 82.215.42.213 monedyg.eu http://monedyg.eu/jucheck.exe Down: NA RIPE BA igor.krneta at nsc.ba 31.47.25.127 to 95.160.101.211 ogkozew.eu http://ogkozew.eu/rnn0001.exe Down: NA ARIN US abuse at lemuriaco.com 74.120.11.113 to 74.120.11.113 hotfile.com http://s740.hotfile.com/get/612bf60d145e28e934b14dac08980f2051d7ba17/4f454f1b/2/53a4e70db7f639d5/8c82d46/bsup31.exe Up(nil): unknown_exe APNIC KR ip-adm at skbroadband.com 1.234.4.228 to 1.234.4.228 smartfind.co.kr http://smartfind.co.kr/Download/SmartKey/ipo/1.0.0.1/SmartKeyUpt.exe Down: NA ARIN US abuse at lemuriaco.com 74.120.9.81 to 74.120.9.81 hotfile.com http://s44.hotfile.com/get/1d5059346c6cf3f7209f56e7e59e9434243c9c52/4f45bbd1/2/91239e8aaccc226e/8c4a062/19feb.exe Down: unknown_html_google_malware RIPE GB abuse at blueconnex.net 85.234.144.59 to 85.234.144.59 3mates.com http://3mates.com/.sys/?action=ldgen&v=16&crc=669 Down: NA ARIN US abuse at godaddy.com 68.178.254.77 to 68.178.254.77 amircreative.com http://amircreative.com/.sys/?action=ldgen&v=16&crc=669 Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/AccessPasswordRecoveryTrial1.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 67.18.22.25 to 67.18.22.25 loan-modification-program.org http://www.loan-modification-program.org/lpt/loanmodificationp.exe Up(nil): unknown_exe APNIC CN anti-spam at ns.chinanet.cn.net 222.187.220.199 to 222.187.220.199 yinuolm.com http://www.yinuolm.com:8080/APtwice.exe Down: NA APNIC CN anti-spam at ns.chinanet.cn.net 222.187.220.199 to 222.187.220.199 yinuolm.com http://www.yinuolm.com:8080/APProtected.exe Up(nil): unknown_exe APNIC CN anti-spam at ns.chinanet.cn.net 222.187.220.199 to 222.187.220.199 yinuolm.com http://www.yinuolm.com:8080/114LMrotected.exe Down: NA ARIN US abuse at theplanet.com 74.53.225.228 to 74.53.225.228 laptopscreensusa.com http://www.laptopscreensusa.com/VYp4.exe Down: NA ARIN US abuse at cox.net 70.182.176.240 to 70.182.176.240 cheathappens.com http://www.cheathappens.com/unauthorized/129296670.zip Up(nil): TR/Crypt.XPACK.Gen LACNIC AR noc at fibertel.com.ar 190.193.4.211 to 113.52.217.52 wabomiw.eu http://wabomiw.eu/jucheck.exe Up(nil): TR/Crypt.ULPM.Gen RIPE UA office at sitek.od.ua 91.202.244.59 to 91.202.244.59 lusklk.com http://lusklk.com/temp/fast.exe Up(nil): WORM/Palevo.HG.2 APNIC CN abuse at online.ln.cn 202.107.39.182 to 202.107.39.182 ns02.us http://gsp.ns02.us/d/t.exe Down: NA APNIC CN abuse at online.ln.cn 202.107.39.182 to 202.107.39.182 ns02.us http://gsp.ns02.us/d/r.exe Up(nil): TR/Dropper.Gen APNIC CN abuse at online.ln.cn 202.107.39.182 to 202.107.39.182 ns02.us http://gsp.ns02.us/d/q.exe Up(nil): ADWARE/Adware.Gen APNIC CN abuse at online.ln.cn 202.107.39.182 to 202.107.39.182 ns02.us http://gsp.ns02.us/d/6.exe Down: NA RIPE PL abuse at upc.com.pl 89.79.176.2 to 80.108.169.194 goemqag.eu http://goemqag.eu/rtce007.exe Down: NA RIPE US ripeadmin at cotendo.com 94.127.76.170 to 94.127.76.170 soft32.com http://get.soft32.com/program/id/81088?message=invalid&s=oKF8qlQzyfTANAT9lXVyLQ&t=1329642412&ext=.exe Down: NA RIPE US ripeadmin at cotendo.com 94.127.76.170 to 94.127.76.170 soft32.com http://get.soft32.com/program/id/79440?message=invalid&s=CT2QCOvaMIyeukH75evb5A&t=1329642201&ext=.exe Down: NA RIPE TR abuse at ni.net.tr 95.173.189.44 to 95.173.189.44 feyzmusteri.com http://feyzmusteri.com/pAfy.exe Down: NA RIPE DE noc at voxility.com 109.163.236.96 to 109.163.236.96 soft32.net http://download02.eu.soft32.net/8/79440/136859/lcp504en.exe?s=CT2QCOvaMIyeukH75evb5A&t=1329642201&ext=.exe Down: NA RIPE DE noc at voxility.com 109.163.236.89 to 109.163.236.89 soft32.net http://download01.eu.soft32.net/9/81088/772945/setup-av-free.exe?s=oKF8qlQzyfTANAT9lXVyLQ&t=1329642412&ext=.exe Down: NA APNIC CN abuse at cnc-noc.net 210.51.33.61 to 210.51.33.61 sdo.com http://dlc2.sdo.com/FTP/kuaizip/20120222/1/KuaiZip_setup.exe Up(nil): unknown_arch_zip ARIN US noc at zerolag.com 67.201.31.128 to 67.201.31.128 airdlr.com http://cdn.airdlr.com/themes/theme_5/theme_5.zip Up(nil): unknown_arch_zip ARIN US noc at zerolag.com 67.201.31.128 to 67.201.31.128 airdlr.com http://cdn.airdlr.com/themes/theme_5/software_38.zip Up(nil): unknown_arch_zip ARIN US noc at zerolag.com 67.201.31.128 to 67.201.31.128 airdlr.com http://cdn.airdlr.com/themes/theme_5/offer_34.zip Up(nil): unknown_arch_zip ARIN US noc at zerolag.com 67.201.31.128 to 67.201.31.128 airdlr.com http://cdn.airdlr.com/themes/theme_5/offer_32.zip Down: NA ARIN US noc at zerolag.com 67.201.31.128 to 67.201.31.128 airdlr.com http://cdn.airdlr.com/themes/theme_5/offer_23.zip Down: NA ARIN US noc at theplanet.com 184.173.9.136 to 184.173.9.136 alliswellintheuniverse.com http://alliswellintheuniverse.com/pRru4.exe Down: NA APNIC KR ipmanager at samsung.com 211.45.30.136 to 211.45.30.136 211.45.30.136 http://211.45.30.136/updatefb/CLVer.exe Up(nil): unknown_html RIPE DE abuse at plusserver.de 188.138.95.75 to 188.138.95.75 188.138.95.75 http://188.138.95.75/cfg/yad.bin Up(nil): TR/Crypt.XPACK.Gen ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/files/16 Up(nil): TR/Crypt.XPACK.Gen ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/files/17 Up(nil): TR/Crypt.XPACK.Gen ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/files/19 Up(nil): unknown_exe ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/files/32 Down: unknown_html RIPE FR abuse at ovh.net 176.31.104.65 to 176.31.104.65 xtragfx.com http://xtragfx.com/uploads/posts/2012-02-08/1328663953_jn.jpg Down: NA RIPE LU tanja.praha at ymail.com 193.104.153.31 to 193.104.153.31 surero48421.ru http://surero48421.ru/aaa/index.php Down: NA ARIN US abuse at bluehost.com 69.89.21.152 to 69.89.21.152 myscenespace.ca http://myscenespace.ca/_pay/paypal/do.txt Down: NA ARIN US domain at facebook.com 69.171.229.11 to 69.171.229.11 servegame.com http://meteidora.servegame.com/was/tnk.php Up(nil): TR/Crypt.FKM.Gen LACNIC BR network at digirati.com.br 187.73.33.36 to 187.73.33.36 k8.com.br http://kiauaia.web100.f1.k8.com.br/latas.jpg Up(nil): unknown_exe LACNIC BR network at digirati.com.br 187.73.33.36 to 187.73.33.36 k8.com.br http://kiauaia.web100.f1.k8.com.br/kota.jpg Down: NA ARIN CA turkers at softcom.biz 168.144.159.126 to 168.144.159.126 ipcheker.com http://jt80w1z8p43fj4no4xx16404rl4535.ipcheker.com/ Down: NA APNIC cn abuse at cnc-noc.net 218.12.4.254 to 217.24.246.7 cutenews.net http://cutenews.net/was/tnk.php Down: NA LACNIC BR network at digirati.com.br 187.73.33.1 to 187.73.33.1 k8.com.br http://consorciomaravil.web69.f1.k8.com.br/teste/index.php Down: NA ARIN US domain at facebook.com 69.171.229.11 to 69.171.229.11 myftp.org http://cahtolife.myftp.org/was/tnk.php Down: NA RIPE DE abuse at hetzner.de 78.46.129.193 to 78.46.129.193 brandsons.net http://brandsons.net/snowtime/test.php?cname=COMPUTERNAME&str=&file=no Down: NA RIPE DE abuse at hetzner.de 78.46.129.193 to 78.46.129.193 brandsons.net http://brandsons.net/snowtime/COMPUTERNAME/ Down: NA ARIN US domain at facebook.com 69.171.229.11 to 69.171.229.11 mrbasic.com http://aonrifuket.mrbasic.com/was/tnk.php Down: NA ARIN CA turkers at softcom.biz 168.144.159.126 to 168.144.159.126 ipcheker.com http://9lx92rw184186v47ff15p7xxrgjk71.ipcheker.com/ Down: NA RIPE md suprunov at moldtelecom.md 92.115.226.48 to 92.115.226.48 92.115.226.48 http://92.115.226.48/VQXwYISJF9AuF1reh.htm Down: NA RIPE md suprunov at moldtelecom.md 92.115.226.48 to 92.115.226.48 92.115.226.48 http://92.115.226.48/FCgbKbGODaYkpTghnsw.htm Down: NA RIPE MD abuse at araxinfo.com 87.255.73.53 to 87.255.73.53 87.255.73.53 http://87.255.73.53/images.rar Down: NA RIPE NL abuse at leaseweb.com 82.192.87.164 to 82.192.87.164 82.192.87.164 http://82.192.87.164/od/link.php?data= Down: NA ARIN CA turkers at softcom.biz 168.144.159.126 to 168.144.159.126 ipcheker.com http://6r4eym2547ajo7frb5p2n54683z228.ipcheker.com/ Up(nil): unknown_html RIPE RU sf at clodo.ru 62.76.177.243 to 62.76.177.243 62.76.177.243 http://62.76.177.243/images.rar Up(nil): unknown_html RIPE EU abuse at laveconetworks.co.uk 31.44.184.232 to 31.44.184.232 31.44.184.232 http://31.44.184.232/spm/s_task.php?id=56546422341363024772161984045356&tid=46349 Up(nil): unknown_html RIPE EU abuse at laveconetworks.co.uk 31.44.184.232 to 31.44.184.232 31.44.184.232 http://31.44.184.232/spm/s_alive.php?id=56546422341363024772161984045356&tick=196531&ver=565&smtp=ok&sl=1&fw=0&pn=0&psr=0 Down: NA RIPE PL dawid.galezewski at serv-net.pl 213.92.172.86 to 213.92.172.86 213.92.172.86 http://213.92.172.86/pVU2wPFUMqNLGkZ.htm Down: unknown_html ARIN US abuse at rackspace.com 209.114.41.40 to 209.114.41.40 209.114.41.40 http://209.114.41.40/www/images/b5d47fbe9965dd27130c7c8bba7c69ab.png Down: NA RIPE GB abuse at burst.net 178.238.140.22 to 178.238.140.22 1poletaem003.in http://1poletaem003.in/image/gate.php?taskexec=1&task_id=1329929368228437 Up(nil): unknown_html RIPE UA abuse at server.ua 195.189.227.126 to 195.189.227.126 195.189.227.126 http://195.189.227.126/MSS1.rar Up(nil): JS/iFrame.cti RIPE PT abuse at nfsi.pt 81.92.203.2 to 81.92.203.2 mariajosemagalhaes.com http://mariajosemagalhaes.com Down: unknown_html_RFI_php APNIC ID hostmaster at big.net.id 124.158.158.1 to 124.158.158.1 wesmira.com http://picasa.com.wesmira.com/injekan.php Down: mdl_trojan RIPE RU abuse at awax.su 83.69.236.17 to 83.69.236.17 mnofopolki.in http://mnofopolki.in/w.php?f=97d19&e=2 Togglevirusname: mdl_Blackhole exploit kit to JS/DarDuk.IQ RIPE RU abuse at awax.su 83.69.236.17 to 83.69.236.17 mnofopolki.in http://mnofopolki.in/main.php?page=7d3248e7236658eb Up(nil): JS/DarDuk.IQ RIPE RU abuse at awax.su 83.69.236.17 to 83.69.236.17 mnofopolki.in http://mnofopolki.in/main.php?page=7d3248e7236658eb Down: mdl_trojan RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 valxxxpx.tk http://valxxxpx.tk/hot/animal-porn-movie.avi.exe Down: mdl_redirects to trojan RIPE NL info at dediserv.eu 212.7.194.214 to 212.7.194.214 myxxxhomevids.com http://myxxxhomevids.com/in.cgi?22 Down: mdl_trojan AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/w.php?f=23&e=2 Togglevirusname: mdl_Blackhole exploit kit to JS/DarDuk.IQ AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/main.php?page=37f8823448dd9e3a Up(nil): JS/DarDuk.IQ AFRINIC EU bitbucket at ripe.net 171.25.190.241 to 171.25.190.241 171.25.190.241 http://171.25.190.241/main.php?page=37f8823448dd9e3a Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 robust.ws http://www.robust.ws/download/rdp10017.exe Down: NA RIPE PL abuse at rdi.pl 109.199.6.224 to 109.199.6.224 ilovepc.pl http://sterowniki.ilovepc.pl/PC/HP/VECTRA/SIE?%86/Setup.exe Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.246.163 to 200.98.246.163 dominiincorporadora.com.br http://dominiincorporadora.com.br/ Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=75 Up(nil): TR/ATRAPS.Gen RIPE DE piotr at gmx.pl 88.198.224.154 to 88.198.224.154 yoyo.pl http://www.tibiaworld123.yoyo.pl/client.exe Up(nil): unknown_html_RFI_eval ARIN US noc at theplanet.com 174.120.194.2 to 174.120.194.2 dashtiq8.com http://www.dashtiq8.com/vb --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 10:33:47 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 10:33:47 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 10:31:27 CET Message-ID: <20120223093347.0FB231D68005@lists.clean-mx.com> Up(nil): unknown_html ARIN US abuse at lemuriaco.com 199.7.176.249 to 199.7.176.249 hotfile.com http://s533.hotfile.com/get/e2b7fb5c231db7905e589a6f593e1558968ebea5/4f45f5a6/2/c9281bd76d3ff089/8ca2b78/x6.exe Up(nil): TR/BitCoin.B ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147467128/d39ad5c/x6.exe Up(nil): TR/Downloader.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147171493/c6196f9/FuckUpiGw.exe Up(nil): TR/Crypt.XPACK.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147117570/df10b90/125.gif.exe Up(nil): unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147354564/f58fb52/jsp2-p3.exe Up(nil): unknown_html ARIN US abuse at lemuriaco.com 199.7.178.23 to 199.7.178.23 hotfile.com http://s648.hotfile.com/get/969de92c524dbf8f8585577418dd633ab000878a/4f45f5a8/2/62bd35cc69c35862/8c5a8a5/FuckUpiGw.exe Up(nil): unknown_html ARIN US abuse at lemuriaco.com 74.120.10.241 to 74.120.10.241 hotfile.com http://s375.hotfile.com/get/7f19104b8ef8048684e78aa5c546ce735e404d34/4f45f5ac/2/2fb5d9ed03aac8e1/8c4d602/125.gif.exe Up(nil): unknown_html ARIN US abuse at lemuriaco.com 74.120.8.219 to 74.120.8.219 hotfile.com http://s127.hotfile.com/get/ca3d0eafa6852942a73f772ded27e711b6cf1b80/4f45f5aa/2/16a2bd8b91928164/8c873c4/jsp2-p3.exe Down: unknown_html_google_malware ARIN US noc at networksolutions.com 205.178.137.100 to 205.178.137.100 parkercountyhd.org http://parkercountyhd.org/.sys/?action=ldgen&v=16&crc=669 Down: unknown_html_google_malware ARIN US abuse at affinity.com 64.71.33.65 to 64.71.33.65 whoffmanchiro.com http://whoffmanchiro.com/.sys/?action=ldgen&v=16&crc=669 Down: unknown_html_google_malware AFRINIC ZA abuse at hetzner.co.za 197.221.12.121 to 197.221.12.121 wff.co.za http://wff.co.za/.sys/?action=ldgen&v=16&crc=669 Up(nil): unknown_html_RFI_php RIPE IT abuse at bkom.it 95.171.36.172 to 95.171.36.172 hotelkreuzwirt.at http://www.hotelkreuzwirt.at/.sys/?action=ldgen&v=16&crc=669 Down: unknown_html_google_malware ARIN US abuse at affinity.com 207.150.212.89 to 207.150.212.89 derekmohr.com http://www.derekmohr.com/.sys/?action=ldgen&v=16&crc=669 Up(nil): unknown_html_google_malware ARIN US noc at blacklotus.net 208.64.124.162 to 208.64.124.162 humlumnet.dk http://www.humlumnet.dk/.sys/?action=ldgen&v=16&crc=669 Down: NA ARIN US abuse at southwebventures.com 216.139.213.144 to 216.139.213.144 bonniejacobsen.com http://bonniejacobsen.com/.sys/?action=ldgen&v=16&crc=669 Down: unknown_html_google_malware ARIN US abuse at suddenlink.net 66.76.35.75 to 66.76.35.75 cherokeerealestate.com http://cherokeerealestate.com/.sys/?action=ldgen&v=16&crc=669 Up(nil): unknown_html_RFI_shell ARIN US abuse at godaddy.com 208.109.181.115 to 208.109.181.115 galacticcenter.org http://galacticcenter.org/.sys/?action=ldgen&v=16&crc=669 Down: NA RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 pigskirkpa.tk http://pigskirkpa.tk/ Up(nil): unknown_exe RIPE UA abuse at uahoster.org 91.217.153.21 to 91.217.153.21 osa.pl http://photo-album-n3edn.osa.pl/photo.exe Down: NA RIPE RU noc at msk-adsl.ru 31.184.237.71 to 31.184.237.71 wimesardconmat.com http://wimesardconmat.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsbgzLvq1aG3F/29c5c kXU0meA0m4= Down: NA RIPE TR abuse at as42926.net 31.210.120.11 to 31.210.120.11 smaraqodreade.com http://smaraqodreade.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsbgzLvq1aG3F/29c5c kXU0meA0m4= Down: NA AFRINIC EU bitbucket at ripe.net 141.136.16.61 to 141.136.16.61 outandinowale.com http://outandinowale.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsbgzLvq1aG3F/29c5c kXU0meA0m4= Down: NA RIPE TR abuse at as42926.net 31.210.120.40 to 31.210.120.40 instrucforad.com http://instrucforad.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsbgzLvq1aG3F/29c5c kXU0meA0m4= Down: NA RIPE EU abuse at laveconetworks.co.uk 31.44.184.49 to 31.44.184.49 idenwardetip.com http://idenwardetip.com/up.php?0Q9oBPXEN0uECUgzEJ95RQsbgzLvq1aG3F/29c5c kXU0meA0m4= --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 11:11:35 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 11:11:35 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 11:02:38 CET Message-ID: <20120223101135.62FF31D68005@lists.clean-mx.com> Up(nil): unknown_html APNIC TW abuse at pccu.edu.tw 140.137.200.191 to 140.137.200.191 pccu.edu.tw http://mlc.sce.pccu.edu.tw/scripts/transform.js Up(nil): unknown_file_Jp2lt.exe ARIN US abuse at theplanet.com 74.52.220.106 to 74.52.220.106 lovebodylanguage.info http://www.lovebodylanguage.info/puzzles/tas3.exe Up(nil): TR/Crypt.XPACK.Gen LACNIC BR abuse at gvt.com.br 177.43.95.226 to 177.43.95.226 colegiowz.com.br http://www.colegiowz.com.br/download Up(nil): PHP/BackDoor.AR RIPE GB abuse at ukwebhosting.ltd.uk 195.62.28.79 to 195.62.28.79 dezinashop.co.uk http://dezinashop.co.uk/images/2.txt??? Up(nil): TR/Script.75 RIPE GB abuse at ukwebhosting.ltd.uk 195.62.28.79 to 195.62.28.79 dezinashop.co.uk http://dezinashop.co.uk/images/1.txt?? Up(nil): JS/Redirector.QA ARIN AR ivitor at towebs.com 200.62.54.122 to 200.62.54.122 xfer.com.ar http://xfer.com.ar/shop/ Up(nil): JS/Redirector.QA ARIN AR ivitor at towebs.com 200.62.54.122 to 200.62.54.122 xfer.com.ar http://shop.xfer.com.ar Up(nil): unknown_html ARIN US ipadmin at serverbeach.com 66.135.35.53 to 66.135.35.53 bernard-rives.com http://www.bernard-rives.com Up(nil): unknown_exe RIPE UA colocation at ukr.net 91.232.199.38 to 91.232.199.38 91.232.199.38 http://91.232.199.38/files/4a727 Up(nil): unknown_exe ARIN US abuse at servint.com 199.230.54.75 to 199.230.54.75 199.230.54.75 http://199.230.54.75/files/29651 Up(nil): unknown_exe ARIN US abuse at servint.com 199.230.54.75 to 199.230.54.75 199.230.54.75 http://199.230.54.75/files/162b6 Up(nil): unknown_exe ARIN US abuse at servint.com 199.230.54.75 to 199.230.54.75 199.230.54.75 http://199.230.54.75/files/9e50a Up(nil): unknown_exe APNIC IN abuse at webwerks.com 180.149.240.182 to 180.149.240.182 180.149.240.182 http://180.149.240.182/9H5k.exe Up(nil): unknown_exe RIPE US ripeadmin at cotendo.com 94.127.76.170 to 94.127.76.170 soft32.com http://audacity.soft32.com/get/file/id/792316 Down: NA RIPE DE admins at primacom.net 77.64.158.143 to 85.27.45.155 veswcerncsemi.com http://veswcerncsemi.com/w.php?f=26 Down: NA RIPE BA info at nsc.ba 188.124.193.202 to 81.81.2.137 sovririesh.com http://sovririesh.com/w.php?f=35 Down: NA RIPE PL abuse at vectranet.pl 78.88.31.220 to 82.77.62.29 rnpscolosegv.com http://rnpscolosegv.com/w.php?f=82 Down: NA RIPE RO abuse at rcs-rds.ro 82.77.62.29 to 178.157.214.126 eolhonmcrp.com http://eolhonmcrp.com/w.php?f=83 Down: NA LACNIC AR noc at fibertel.com.ar 190.245.88.228 to 67.182.184.104 eolhonmcrp.com http://eolhonmcrp.com/w.php?f=53 Down: NA RIPE ES abuse at euskaltel.com 85.86.1.151 to 87.97.166.140 eglrisleresh.com http://eglrisleresh.com/w.php?f=30 Down: NA RIPE PL abuse at upc.com.pl 89.72.168.110 to 151.45.198.95 clrneemgess.com http://clrneemgess.com/w.php?f=32 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?f=82 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?f=57 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?f=27 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?f=26 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=99 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=98 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=91 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=90 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=89 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=88 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=87 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=86 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=85 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=84 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=83 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=82 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=63 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=62 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=61 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=60 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=59 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=58 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=57 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=55 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=54 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=53 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=52 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=51 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=50 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=48 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=47 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=44 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=43 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=38 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=36 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=35 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=34 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=32 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=30 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=28 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=27 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=26 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=24 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=19 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=18 Down: NA ARIN US abuse at comcast.net 98.227.56.70 to 98.227.56.70 98.227.56.70 http://98.227.56.70/w.php?e=2&f=17 Down: NA ARIN US abuse at sbcglobal.net 75.23.133.60 to 75.23.133.60 75.23.133.60 http://75.23.133.60/w.php?f=82 Down: NA ARIN US abuse at sbcglobal.net 75.23.133.60 to 75.23.133.60 75.23.133.60 http://75.23.133.60/w.php?f=52 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=44 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=130 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=171 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=63 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=55 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=76 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=53 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=83 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=29 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=96 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=67 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=92 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=59 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=23 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=64 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=34 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=89 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=56 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=27 Up(nil): JS/iFrame.cti RIPE FR abuse at ovh.net 176.31.102.178 to 176.31.102.178 ebda3-m.com http://ebda3-m.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 11:35:58 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 11:35:58 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 11:31:10 CET Message-ID: <20120223103558.650301D68005@lists.clean-mx.com> Down: NA ARIN US abuse at theplanet.com 74.52.78.84 to 74.52.78.84 pottytrainingpuppies.org http://www.pottytrainingpuppies.org/software/pottytrainingpuppiespuzzle.exe Down: NA ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/AVVoice.exe Up(nil): TR/VB.Downloader.Gen LACNIC BR abuse at gvt.com.br 177.43.95.226 to 177.43.95.226 colegiowz.com.br http://colegiowz.com.br/download Down: NA RIPE RU advt at relcom.ru 194.135.22.233 to 194.135.22.233 batareek.net http://www.batareek.net/docs/envio/envio.php Up(nil): unknown_html_google_malware ARIN US network-abuse at cc.yahoo-inc.com 68.180.151.96 to 68.180.151.96 capitalpropertiesqatar.com http://capitalpropertiesqatar.com/aicp.html Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/msr.exe Down: NA ARIN US abuse at osogrande.com 129.121.66.179 to 129.121.66.179 articletrip.com http://www.articletrip.com/toolbar/articletrip_hotel_accomodation.exe Down: NA RIPE NL abuse at customerpanel.nl 109.236.81.135 to 109.236.81.135 nadnadzz2.info http://mx5.nadnadzz2.info/ Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 trishulsoft.com http://erasehistory.trishulsoft.com/reg/FixHomeWindows/Run-RegistryErrorFix.exe Up(nil): unknown_exe LACNIC BR regcom at locaweb.com.br 187.45.195.62 to 187.45.195.62 saudemultimed.com.br http://saudemultimed.com.br/cXWS4.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 74.52.140.10 to 74.52.140.10 pousadaharascoqueiroverde.com.br http://pousadaharascoqueiroverde.com.br/4h5cSuzD.exe Up(nil): unknown_exe RIPE TR huseyin.caymaz at cizgibilgisayar.com 94.73.146.130 to 94.73.146.130 guvenlik-sepeti.com http://guvenlik-sepeti.com/sHP9Ghd.exe Up(nil): unknown_exe RIPE BG abuse at spnet.net 212.91.170.135 to 212.91.170.135 geaevents.com http://ftp.geaevents.com/b5AZK.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 12:05:54 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 12:05:54 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 12:02:49 CET Message-ID: <20120223110554.468621D68005@lists.clean-mx.com> Up(nil): PHP/IRCBOT.21970 RIPE SE ripe at blixtvik.net 87.96.212.114 to 87.96.212.114 dualrange.net http://www.dualrange.net//wp-content/paste.jpg?? Up(nil): PHP/IRCBOT.21970 RIPE SE ripe at blixtvik.net 87.96.212.114 to 87.96.212.114 dualrange.net http://www.dualrange.net//wp-content/copy.jpg?? Down: mdl_trojan Cridex AFRINIC EG haitham.elgenedy at etisalatdata.net 41.64.21.71 to 41.64.21.71 housespect.net http://housespect.net/w.php?f=dd786&e=2 Togglevirusname: mdl_Blackhole exploit kit to unknown_html_RFI AFRINIC EG haitham.elgenedy at etisalatdata.net 41.64.21.71 to 41.64.21.71 housespect.net http://housespect.net/main.php?page=598991e7306ac07e Up(nil): unknown_html_RFI AFRINIC EG haitham.elgenedy at etisalatdata.net 41.64.21.71 to 41.64.21.71 housespect.net http://housespect.net/main.php?page=598991e7306ac07e Up(nil): unknown_file_$INSTDIR/SAManageDeployTool.exe ARIN US abuse at mediatemple.net 205.186.187.96 to 205.186.187.96 samanage.com http://www.samanage.com/app/SAManage_Deployment_Tool_Setup.exe Down: Trojan-Ransom.Win32.CardPay.lw APNIC IN abuse at webwerks.com 180.149.240.182 to 180.149.240.182 180.149.240.182 http://180.149.240.182/ Up(nil): unknown_html RIPE UA abuse at uahoster.org 91.217.153.21 to 91.217.153.21 osa.pl http://photo-album-n3edn.osa.pl/ Togglevirusname: Trojan.Win32.Jorik.Lethic.du to unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147354564/f58fb52/ Up(nil): unknown_exe ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147354564/f58fb52/ Togglevirusname: RiskTool.Win32.BitCoinMiner.bju to TR/Crypt.XPACK.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147117570/df10b90/ Up(nil): TR/Crypt.XPACK.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147117570/df10b90/ Togglevirusname: RiskTool.Win32.HideExec.r to TR/Downloader.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147171493/c6196f9/ Up(nil): TR/Downloader.Gen ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147171493/c6196f9/ Togglevirusname: Trojan.Agent/Gen-FraudPack to TR/BitCoin.B ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147467128/d39ad5c/ Up(nil): TR/BitCoin.B ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147467128/d39ad5c/ Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=27 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=199 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=89 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=35 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=77 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=53 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=89 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=60 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=70 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=34 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=82 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=55 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=33 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=98 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=72 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=48 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=86 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=56 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=99 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=76 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=48 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=28 Up(nil): JS/iFrame.cti ARIN US netops at singlehop.com 99.198.111.98 to 99.198.111.98 sapnis.com http://sapnis.com/blog/wp-content/plugins/is-human/ir.html Up(nil): JS/iFrame.cti LACNIC BR l-registrobr-uol at corp.uol.com.br 187.17.98.47 to 187.17.98.47 portalmogiguacu.com.br http://blog.portalmogiguacu.com.br/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html_RFI_shell ARIN US noc at theplanet.com 174.120.149.180 to 174.120.149.180 sweetbyholly.com http://mediaroom.sweetbyholly.com/wordpress/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at iphouse.net 209.240.81.155 to 209.240.81.155 terralingua.org http://terralingua.org/bcdconservation/wp-content/plugins/is-human/ir.html Down: NA LACNIC BR regcom at locaweb.com.br 187.45.240.65 to 187.45.240.65 portalphotoart.com.br http://portalphotoart.com.br/casamentoefotografia/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at godaddy.com 208.109.181.232 to 208.109.181.232 loanspeed.com http://loanspeed.com/wp-content/plugins/is-human/ir.html --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 12:33:26 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 12:33:26 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 12:31:05 CET Message-ID: <20120223113326.3085D1D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.133.165.246 to 174.133.165.246 systoolsdl.com http://www.systoolsdl.com/systools-sql-recovery.exe Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 jupitersoftwares.com http://www.registryrepair.jupitersoftwares.com/8/DownloadDriverHardwareUpdate/DownloadDriverHardwareUpdate.exe Up(nil): unknown_exe RIPE EU noc at edgecast.com 93.184.221.133 to 93.184.221.133 fileburstcdn.net http://stellar.fileburstcdn.net/stellar/StellarPhoenixMacintosh-for-windows.exe Up(nil): unknown_html ARIN US abuse at godaddy.com 72.167.1.59 to 72.167.1.59 chrisqueen.com http://chrisqueen.com/dp/distr/app-bvcures/site-00ab0c4cbcf/lng-eng/bvcures.exe Down: unknown_html_google_blacklist RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 runescapemmorpg260.tk http://runescapemmorpg260.tk/ Up(nil): unknown_file_mp3enc.exe RIPE DE abuse at netclusive.com 89.110.133.6 to 89.110.133.6 paehl-info.de http://paehl-info.de/cdr/mp3_encoder.zip Up(nil): JS/iFrame.cti RIPE FR abuse at ovh.net 176.31.102.178 to 176.31.102.178 tho8-des.com http://tho8-des.com Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/setupg.exe Down: NA ARIN US engineering at gnax.net 72.9.239.194 to 72.9.239.194 download3000.com http://www.download3000.com/downloads/freeflv2ipod.exe Up(nil): unknown_html_RFI_php RIPE IT ced at consultingweb.it 217.73.227.80 to 217.73.227.80 anprm.it http://www.anprm.it/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 13:31:02 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 13:31:02 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 13:23:41 CET Message-ID: <20120223123102.706461D68005@lists.clean-mx.com> Up(nil): unknown_html ARIN US abuse at godaddy.com 173.201.93.1 to 173.201.93.1 atsfilmworks.com http://atsfilmworks.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 66.147.244.238 to 66.147.244.238 aiesechanoi.org http://aiesechanoi.org/main/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 66.147.244.151 to 66.147.244.151 gamegravity.com http://gamegravity.com/actions/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE DK abuse at surftown.com 212.97.132.158 to 212.97.132.158 camillakongskov.dk http://camillakongskov.dk/wordpress/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 208.109.78.143 to 208.109.78.143 semodj.com http://semodj.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html_google_malware ARIN US arin at totalserversolutions.com 208.78.41.61 to 208.78.41.61 hbmusic.net http://hbmusic.net/gallery/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at liquidweb.com 67.227.218.147 to 67.227.218.147 iibm.in http://iibm.in/acpatna/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at godaddy.com 68.178.232.99 to 68.178.232.99 bostonpkdwalk.org http://bostonpkdwalk.org/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 69.89.27.243 to 69.89.27.243 livingwithumami.com http://livingwithumami.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at singlehop.com 184.154.231.5 to 184.154.231.5 cafeallegrobuffalo.com http://cafeallegrobuffalo.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE AT office at anw.at 195.234.101.236 to 195.234.101.236 dapfeiffer.at http://dapfeiffer.at/wp-content/uploads/fgallery/ir.html Up(nil): HTML/Crypted.Gen RIPE ro office at mxhost.ro 188.240.3.69 to 188.240.3.69 sunrisewatches.com http://www.sunrisewatches.com/ Up(nil): TR/SCKeylog.H ARIN CA abuse at noc.privatedns.com 70.38.113.158 to 70.38.113.158 110mb.com http://vlauto-volamtruyen.110mb.com/Auto-TDK-PK.com Up(nil): unknown_html RIPE FR abuse at ovh.net 213.186.33.19 to 213.186.33.19 lysianeclement.com http://lysianeclement.com/WordPress/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE RU abuse at sweb.ru 77.222.40.96 to 77.222.40.96 xn--p1acg.xn--p1ai http://xn--p1acg.xn--p1ai/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US administrator at mcoe.us 64.39.120.40 to 64.39.120.40 willitscharter.org http://willitscharter.org/wp-wcs/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US noc at theplanet.com 174.123.86.210 to 174.123.86.210 tierraviva.com.ar http://tierraviva.com.ar/2012/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html APNIC JP jpnictech at ocn.ad.jp 125.206.128.37 to 125.206.128.37 suri-emu.co.jp http://suri-emu.co.jp/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN CA abuse at noc.privatedns.com 174.142.183.252 to 174.142.183.252 sscope.ca http://sscope.ca/wp-content/uploads/fgallery/ir.html Down: NA APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 srsopen.net http://srsopen.net/main.php?page=3D710730c6e154dae7 Up(nil): unknown_html RIPE DE net-abuse at hosteurope.de 46.163.116.204 to 46.163.116.204 september-2001.net http://september-2001.net/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 208.109.78.143 to 208.109.78.143 semodj.com http://semodj.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at gigenet.com 69.65.49.238 to 69.65.49.238 seemovieforfree.net http://seemovieforfree.net/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US noc at godaddy.com 97.74.215.232 to 97.74.215.232 sacramentoflips.com http://sacramentoflips.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE ro abuse at dcn.ro 94.177.12.74 to 94.177.12.74 rjsp.eu http://rjsp.eu/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at rackspace.com 50.57.100.82 to 50.57.100.82 puntomio.com http://ofertas.puntomio.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html APNIC JP warita at gmo.jp 210.172.144.156 to 210.172.144.156 nidukuri.net http://nidukuri.net/wp/wp-content/uploads/fgallery/ir.html Down: NA RIPE IT support at kpnqwest.it 94.141.30.109 to 94.141.30.109 multikultifactory.com http://multikultifactory.com/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at godaddy.com 184.168.166.1 to 184.168.166.1 mooneydesign.net http://mooneydesign.net/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 50.63.47.1 to 50.63.47.1 mogadishupost.com http://mogadishupost.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 69.89.31.238 to 69.89.31.238 mia-mobi.com http://mia-mobi.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US support at bluehost.com 74.220.215.58 to 74.220.215.58 mashwani.org http://mashwani.org/sohail/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at twtelecom.net 207.71.31.131 to 207.71.31.131 makingstuffs.com http://makingstuffs.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 69.89.27.243 to 69.89.27.243 livingwithumami.com http://livingwithumami.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE GB abuse at names.co.uk 85.233.160.70 to 85.233.160.70 kompensacija-uk.com http://kompensacija-uk.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE UA rudenko at delta-x.ua 91.206.200.121 to 91.206.200.121 knlu.info http://knlu.info/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US bnbrock at maileig.com 66.96.133.19 to 66.96.133.19 katehenshaw.com http://katehenshaw.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE DE abuse at hetzner.de 176.9.2.234 to 176.9.2.234 altervista.org http://istitutocadeo.altervista.org/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 69.89.27.232 to 69.89.27.232 hildegard-society.org http://hildegard-society.org/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE RU abuse at surnet.ru 66.36.172.43 to 66.36.172.43 h2oonstone.com http://h2oonstone.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE DE abuse at hetzner.de 78.47.90.176 to 78.47.90.176 grafikey.com http://grafikey.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 66.147.244.151 to 66.147.244.151 gamegravity.com http://gamegravity.com/actions/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE TR ssguney at datatelekom.com 188.125.160.66 to 188.125.160.66 emrahcoskun.com http://emrahcoskun.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE SE ripe at ballou.se 91.189.42.43 to 91.189.42.43 edinim.se http://edinim.se/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN CA abuse at netelligent.ca 209.44.106.221 to 209.44.106.221 domainedelariviere.ca http://domainedelariviere.ca/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE AT office at anw.at 195.234.101.236 to 195.234.101.236 dapfeiffer.at http://dapfeiffer.at/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE DK abuse at surftown.com 212.97.132.158 to 212.97.132.158 camillakongskov.dk http://camillakongskov.dk/wordpress/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at singlehop.com 184.154.231.5 to 184.154.231.5 cafeallegrobuffalo.com http://cafeallegrobuffalo.com/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at godaddy.com 68.178.232.99 to 68.178.232.99 bostonpkdwalk.org http://bostonpkdwalk.org/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 67.222.63.111 to 67.222.63.111 kindercone.com http://blog.kindercone.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 173.201.93.1 to 173.201.93.1 atsfilmworks.com http://atsfilmworks.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 184.168.182.131 to 184.168.182.131 actionfx.info http://actionfx.info/wp-content/uploads/fgallery/ir.html Up(nil): HTML/Infected.WebPage.Gen2 ARIN US abuse at corp.web.com 209.237.150.20 to 209.237.150.20 anxiety-release-method.com http://www.anxiety-release-method.com/ Down: NA ARIN US abuse at softlayer.com 50.23.243.123 to 50.23.243.123 all-spy.com http://www.all-spy.com/setups/allspykeylogger.exe Up(nil): unknown_html ARIN US abuse at dreamhost.com 67.205.6.17 to 67.205.6.17 lukemundy.com http://lukemundy.com/ Up(nil): unknown_html ARIN US abuse at godaddy.com 50.63.51.1 to 50.63.51.1 mrdeckingsclass.com http://mrdeckingsclass.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html APNIC JP admin at paperboy.co.jp 112.78.219.145 to 112.78.219.145 hatakest.com http://hatakest.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_exe ARIN US abuse at mediatemple.net 64.13.192.180 to 64.13.192.180 snipfiles.com http://www.snipfiles.com/files/nold_screensaver.exe Down: NA ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/WSound/SoundTaxi.exe Up(nil): unknown_html ARIN CA noc at gtcomm.net 67.43.230.194 to 67.43.230.194 solidservices.ro http://solidservices.ro/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at dreamhost.com 69.163.138.106 to 69.163.138.106 sashacagen.com http://sashacagen.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at godaddy.com 50.63.51.1 to 50.63.51.1 mrdeckingsclass.com http://mrdeckingsclass.com/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE FR abuse at ovh.net 213.186.33.19 to 213.186.33.19 lysianeclement.com http://lysianeclement.com/WordPress/wp-content/uploads/fgallery/ir.html Down: NA ARIN US noc at godaddy.com 97.74.181.1 to 97.74.181.1 lscss.org http://lscss.org/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US netops at singlehop.com 69.175.88.26 to 69.175.88.26 kyleswarren.com http://kyleswarren.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at liquidweb.com 67.227.218.147 to 67.227.218.147 iibm.in http://iibm.in/acpatna/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US noc at theplanet.com 174.122.93.221 to 174.122.93.221 hicams.in http://hicams.in/thesite/wordpress/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html_google_malware ARIN US arin at totalserversolutions.com 208.78.41.61 to 208.78.41.61 hbmusic.net http://hbmusic.net/gallery/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html APNIC JP admin at paperboy.co.jp 112.78.219.145 to 112.78.219.145 hatakest.com http://hatakest.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE PL abuse at home.pl 62.129.210.80 to 62.129.210.80 freshweb.pl http://freshweb.pl/_strony/adam/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html LACNIC BR regcom at locaweb.com.br 187.45.193.214 to 187.45.193.214 conexaolivre.org http://conexaolivre.org/novo_site/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE IE abuse at blacknight.ie 78.153.221.12 to 78.153.221.12 ballymunmarket.ie http://ballymunmarket.ie/wp/wp-content/uploads/fgallery/ir.html Down: NA RIPE IT abuse at seflow.net 95.141.36.175 to 95.141.36.175 armoniecentroestetico.it http://armoniecentroestetico.it/wpita/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at bluehost.com 66.147.244.238 to 66.147.244.238 aiesechanoi.org http://aiesechanoi.org/main/wp-content/uploads/fgallery/ir.html Down: mdl_Zeus/ICE-IX trojan RIPE RU abuse at pinspb.ru 146.185.254.40 to 146.185.254.40 kjoan.info http://kjoan.info/w.php?f=63&e=2 Down: mdl_Blackhole exploit kit RIPE RU abuse at pinspb.ru 146.185.254.40 to 146.185.254.40 kjoan.info http://kjoan.info/check.php?id=8285beca8618f120 Down: NA ARIN US abuse at rackspace.com 108.166.71.37 to 108.166.71.37 zapto.org http://davidalberto.zapto.org:1604 Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/pdfpagenum.exe Up(nil): ADWARE/Agent.1863965 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/Addintools/cosecherocigars.exe Up(nil): unknown_html_RFI_shell ARIN US abuse at theplanet.com 70.86.2.170 to 70.86.2.170 punerealestate.com http://www.punerealestate.com/ Up(nil): unknown_html_RFI_eval ARIN CA abuse at noc.privatedns.com 174.142.215.122 to 174.142.215.122 egoimpressao.com http://egoimpressao.com/T/index.html Down: NA ARIN US abuse at webwerks.com 66.7.148.31 to 66.7.148.31 sagarexclusive.com http://sagarexclusive.com/images/aicp.html Up(nil): unknown_html ARIN US bnbrock at maileig.com 66.96.133.19 to 66.96.133.19 katehenshaw.com http://katehenshaw.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at dreamhost.com 69.163.138.106 to 69.163.138.106 sashacagen.com http://sashacagen.com/wp-content/uploads/fgallery/ir.html Down: Trojan-Spy.Win32.Zbot.dlib ARIN US abuse at mediatemple.net 205.186.187.96 to 205.186.187.96 samanage.com http://www.samanage.com/app/ Down: Trojan-Spy.Win32.Zbot.dlib RIPE BG abuse at spnet.net 212.91.170.135 to 212.91.170.135 geaevents.com http://ftp.geaevents.com/ Down: Trojan-Spy.Win32.Zbot.dlib ARIN US abuse at theplanet.com 74.52.140.10 to 74.52.140.10 pousadaharascoqueiroverde.com.br http://pousadaharascoqueiroverde.com.br/ Up(nil): unknown_exe APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 srsopen.net http://srsopen.net/files/dd786 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=176 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=87 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=59 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=80 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=57 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=22 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=84 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=49 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=26 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=36 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=100 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=50 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=78 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=27 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=77 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=45 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=25 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 14:06:58 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 14:06:58 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 14:02:55 CET Message-ID: <20120223130658.5A0C71D68005@lists.clean-mx.com> Up(nil): unknown_html ARIN US abuse at gigenet.com 69.65.49.238 to 69.65.49.238 seemovieforfree.net http://seemovieforfree.net/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN CA abuse at netelligent.ca 209.44.106.221 to 209.44.106.221 domainedelariviere.ca http://domainedelariviere.ca/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN CA noc at gtcomm.net 67.43.230.194 to 67.43.230.194 solidservices.ro http://solidservices.ro/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US administrator at mcoe.us 64.39.120.40 to 64.39.120.40 willitscharter.org http://willitscharter.org/wp-wcs/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html RIPE RU abuse at surnet.ru 66.36.172.43 to 66.36.172.43 h2oonstone.com http://h2oonstone.com/blog/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US noc at theplanet.com 174.123.86.210 to 174.123.86.210 tierraviva.com.ar http://tierraviva.com.ar/2012/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US noc at godaddy.com 97.74.181.1 to 97.74.181.1 lscss.org http://lscss.org/wp-content/uploads/fgallery/ir.html Up(nil): unknown_html ARIN US abuse at rackspace.com 72.32.187.62 to 72.32.187.62 faso.com.mx http://faso.com.mx/images/aicp.html Up(nil): unknown_html ARIN US abuse at rackspace.com 72.3.174.233 to 72.3.174.233 worldbarsupply.com http://worldbarsupply.com/images/aicp.html Up(nil): unknown_html_google_malware ARIN US abuse at godaddy.com 208.109.212.1 to 208.109.212.1 glastonburymusings.net http://glastonburymusings.net/store/images/aicp.html Up(nil): unknown_html RIPE TR abuse at cizgi.net.tr 89.19.24.211 to 89.19.24.211 tankaucuk.com.tr http://tankaucuk.com.tr/images/aicp.html Up(nil): unknown_html ARIN US abuse at rackspace.com 72.3.174.233 to 72.3.174.233 worldbarsupply.com http://www.worldbarsupply.com/images/aicp.html Up(nil): unknown_html RIPE NL abuse at denit.nl 81.26.213.24 to 81.26.213.24 xxxwebshop.net http://xxxwebshop.net/images/aicp.html Up(nil): unknown_html_google_malware RIPE IT abuse at bluesoft.it 88.81.189.117 to 88.81.189.117 ilmercatinodeisogni.it http://ilmercatinodeisogni.it/images/aicp.html Up(nil): unknown_html ARIN US abuse at mediatemple.net 205.186.173.47 to 205.186.173.47 sfrubberstamp.com http://sfrubberstamp.com/images/aicp.html Up(nil): unknown_html RIPE AT abuse at chello.at 213.47.222.70 to 213.47.222.70 inode.at http://st000730.host.inode.at/catalog/images/aicp.html Up(nil): unknown_html ARIN CA abuse at noc.privatedns.com 184.107.41.155 to 184.107.41.155 tabrizcarpets.net http://tabrizcarpets.net/images/aicp.html Up(nil): unknown_html RIPE BG support at evolink.com 85.14.38.251 to 85.14.38.251 erofarmacie.com http://erofarmacie.com/images/aicp.html Down: NA RIPE DE hostmaster at huynh.de 62.116.180.222 to 62.116.180.222 mac-service-frankfurt.de http://mac-service-frankfurt.de/shop/images/aicp.html Down: NA RIPE NL abuse at argeweb.nl 194.165.34.112 to 194.165.34.112 duurzame-kantoorartikelen.nl http://duurzame-kantoorartikelen.nl/catalog/images/aicp.html Up(nil): unknown_html ARIN US noc at theplanet.com 174.122.209.74 to 174.122.209.74 giropecas.com.br http://giropecas.com.br/images/aicp.html Down: NA RIPE NL abuse at argeweb.nl 194.165.34.112 to 194.165.34.112 duurzame-kantoorartikelen.nl http://www.duurzame-kantoorartikelen.nl/images/aicp.html Down: NA RIPE DE abuse at t-online.de 80.150.6.143 to 80.150.6.143 sri-ganesha-geldern.com http://sri-ganesha-geldern.com/grosshandel/images/aicp.html Down: NA RIPE FR abuse at ovh.net 213.186.33.17 to 213.186.33.17 eurodex.fr http://eurodex.fr/images/aicp.html Down: NA RIPE PL abuse at netart.pl 77.55.2.239 to 77.55.2.239 nazwa.pl http://sexownyszop.nazwa.pl/images/aicp.html Down: NA RIPE UA rudenko at delta-x.ua 91.206.200.121 to 91.206.200.121 knlu.info http://knlu.info/wp-content/uploads/fgallery/ir.html Down: mdl_trojan Sinowal RIPE RO abuse at upc.ro 78.97.112.250 to 93.105.57.96 eohvsosnricec.com http://eohvsosnricec.com/w.php?f=5a20e&e=2 Down: mdl_Blackhole exploit kit RIPE RO abuse at upc.ro 78.97.112.250 to 94.211.226.174 eohvsosnricec.com http://eohvsosnricec.com/index.php?tp=001e4bb7b4d7333d Down: NA ARIN US abuse at bluehost.com 67.222.63.111 to 67.222.63.111 kindercone.com http://blog.kindercone.com/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/recoverbfr.exe Up(nil): ADWARE/Agent.1864132 ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/Addintools/colts2010_ff.exe Down: unknown_html_google_malware ARIN US contact at dfw-datacenter.com 72.9.157.122 to 72.9.157.122 saverzz.com http://www.saverzz.com/download/carmen-electra-3.exe Down: NA ARIN US ipdept at servint.com 64.131.81.57 to 64.131.81.57 infocorn.com http://www.infocorn.com/acnefree/book.exe Up(nil): unknown_exe ARIN US hostmaster at reflected.net 66.254.123.32 to 66.254.123.32 sexy-screen-savers.com http://www.sexy-screen-savers.com/downloads/sexyss125.exe Down: NA RIPE FR abuse at ovh.net 176.31.15.20 to 176.31.15.20 176.31.15.20 http://176.31.15.20/pbots.txt? --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 14:33:27 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 14:33:27 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 14:31:02 CET Message-ID: <20120223133327.A8F7D1D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US noc at godaddy.com 72.167.131.58 to 72.167.131.58 ourscreensavers.com http://www.ourscreensavers.com/download/FreeButterflySS.exe Down: NA ARIN US nic at hostnoc.net 96.9.186.85 to 96.9.186.85 blackmagicvashikaranspecialist.com http://blackmagicvashikaranspecialist.com/ Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/ClassicStartMenu_Setup300884.exe Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 downloadupload.com http://www.downloadupload.com/download/duig.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 15:04:07 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 15:04:07 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 15:01:41 CET Message-ID: <20120223140407.1B9C01D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US netops at singlehop.com 173.236.33.106 to 173.236.33.106 immonitor.com http://www.immonitor.com/download/msnmonitor.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 steamcommuitiy.tk http://steamcommuitiy.tk/ Down: NA RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 bugwt.tk http://bugwt.tk/ Up(nil): unknown_html RIPE DE abuse at netfinish.de 80.86.174.226 to 80.86.174.226 financialpartner.de http://www.financialpartner.de/ Down: NA APNIC KR abuse at kornet.net 183.111.8.171 to 183.111.8.171 addendum.kr http://down.addendum.kr/down/1.1.1.1/addmsidebaragent.exe Up(nil): unknown_html ARIN CA registrar at magma.ca 206.191.18.243 to 206.191.18.243 auto-loan.ca http://auto-loan.ca/used/index.htm Up(nil): JS/iFrame.ATA ARIN US netops at singlehop.com 69.175.11.250 to 69.175.11.250 hunterxdeals.com http://hunterxdeals.com/?p=24 Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/familyspysoftware.exe Up(nil): unknown_exe ARIN US abuse at dreamhost.com 67.205.0.39 to 67.205.0.39 palsol.com http://www.palsol.com/downloads/RegistryCleaner1.exe Up(nil): unknown_exe ARIN US abuse at softlayer.com 174.37.242.101 to 174.37.242.101 avlandesign.com http://www.avlandesign.com/adgc.exe Down: unknown_html_google_malware ARIN US ec2-abuse at amazon.com 107.20.134.231 to 174.129.232.94 dropbox.com http://dl.dropbox.com/u/45968822/File.exe Down: NA RIPE NL abuse at serverboost.nl 188.95.54.8 to 188.95.54.8 gr8name.biz http://flash43-hosting.gr8name.biz/download-id77903/flash_player_installer.exe Up(nil): TR/Dropper.Gen RIPE UA abuse at justhost.in.ua 91.213.8.76 to 91.213.8.76 pxnet.to http://pxnet.to/l/data/update.dat Up(nil): unknown_exe APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 housespect.net http://housespect.net/files/dd786 Up(nil): unknown_exe APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 housespect.net http://housespect.net/files/cddc7 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 15:39:29 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 15:39:29 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 15:31:49 CET Message-ID: <20120223143930.1AFEC1D68005@lists.clean-mx.com> Up(nil): unknown_arch_zip RIPE RU abuse at specenergo2.ru 91.196.216.146 to 91.196.216.146 zuwejuk.in http://zuwejuk.in/content/jav.jar Down: unknown_html_google_malware ARIN US contact at dfw-datacenter.com 72.9.157.122 to 72.9.157.122 saverzz.com http://www.saverzz.com/download/amy-erbacher.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 welcometoebay40.tk http://welcometoebay40.tk/ Down: NA RIPE NL abuse at dot.tk 93.170.52.20 to 93.170.52.20 welcometoebay35.tk http://welcometoebay35.tk/ Up(nil): PHP/Small.C ARIN US abuse at dimenoc.com 64.37.48.241 to 64.37.48.241 klatenweb.com http://klatenweb.com/akademik/images/hsdvl.mp4? Up(nil): PHP/RemoteAdmi.5398 ARIN US abuse at dimenoc.com 64.37.48.241 to 64.37.48.241 klatenweb.com http://klatenweb.com/akademik/images/myid.flv? Down: unknown_html_google_malware ARIN US abuse at internap.com 64.74.223.46 to 64.74.223.46 18dd.net http://www.18dd.net/new/8.txt Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://soecel.mo.cx/khAjAQGgpZD7ncWWjK111IqgmXv3g8xi6eQdeUaJ2vdSZgysuhuKFLgTJTwKST/t81WwxqtKvRnUKSRqyRkSxHq3OGvuPTBf4ef8o4Rba4k= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://soecel.mo.cx/bCwAOFNZ6SkLlYQawWiOBxqvVVH0HU0TbfG XUyioVoXSzVonh1EkJ nfIo/zRgaQo1cMHkmlG2IDdOwF74hSdOlG17gePnSNNQcMVVdbqhWMEPwqT1E2r7nXtPZpY/ilI/7eSAGB8D7 fSgrFXcLXQRCZnvpumQrYLwhI5T2hI4BSzJLKTQftpuoxYR1tAV/bu1wdKR Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://shettleroe.mo.cx/qALotwYmG4dNNC8Akhs0zQKjBso0vol02iX spONLjNGmto6CDGp5VVTpphuy/ksu7pdErIuMouQyBS5manlxP4MhjIVaKcYFkPNfWWWVHx/oa2PAH0M0Pcbn6X2YeKq7Ykfo4es emUqZqpdzH8j5SwaiBbWC/gg3dyvtmtoUykiEh8mgCMSTashbJUR6P/jdkti/Va Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://shettleroe.mo.cx/PFnajVBNZTID92tBLqY6SMf0R6x /No2 YxL825OJRMCC78sFHYX8hfYeG48BYc9BaYgCfCcHpSlPYpYW9EfyEPj55legYDxuGRkfN/C0rc= Down: unknown_html_google_malware ARIN BS abuse at securehost.com 208.87.34.18 to 208.87.34.18 onlinenotifyq.net http://onlinenotifyq.net/loads.php?code=0000419 Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://momcs.mo.cx/yfdTzYMhwbRwmdNmUGDFlN2xiYlqhfToYRKRGhuAd4cw3c0VJkzHgH/fVBs95Arn0kGJmYYUSAdZUqWXl6vrujEQz7uO7u6AJd9m6I369Hw= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://momcs.mo.cx/dSjKQVVDRulgYZI bPvgmVV4ffV1aMhfnutJDwXlNobZ1aMGyLpKPL3TekG9tvlDZ2XAvKLxaGPRmCtH46jqvWAJTAlIwFst0qW UrOYzxKDRuUegIJlLgrf Wc Cn3XYV9BLZ/D3 FDv8P5dyNv7Bcz7WJd9 qudGpacLm MLQqY3KREesqLlkksy9ugqF13Yf2gfYI Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://moehrong.mo.cx/ZIkEOKLkHuibAZOcpY71ucHyMngHb0czUaZXkgAOcqA0RB iVfQO7B2EbhlXTWeu8JAV/3SC4Gq37RFvlu/s7YFleudB6N 6oPipvaB6Dfc= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://moehrong.mo.cx/cXgfKAzUPB2ikQOx8fWyR1l6ZjWZ5ZBCTBdehsnPsknLxL9oU27ZX8bI06BnVrbUcmh4DciuFkRbul/teLXK44auBVoWfo3C 29ick07mqLoO2xZdzG/W6CHHUz 3zVAkJeKSCwfUZzisb3StYAs J/Rz4sZ4c84APLPS9 iu5bDIdyDjTd6xCo7szLIw4WQRdDThoTF Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://mceson.mo.cx/PqasZngKmpD35Dh7/AvR83qxJenzWTHlokWYzCnck/0d2wBNqnXlTJBoduRZdWuMiGB1HyUa49JePNa/9X1zNK3FP6HwijBtmD2LX1jKHObNuUIo8L0dMH81lAhHrAsaD9wSSsJNohJWpychIRFiiA6IOksfOjMI2IcssqZyxvc5sceQwMEKaMyo1aTHR5NmMxFLe50p Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://mceson.mo.cx/JkJfoeKTbMhbQL7T1eA L2ghIQhxlXmFs47K/zGE9RNizbCAXDIZ1uJ2Mf/WxzOUj0C5CvkmwRNonidSAVDjdDilTw3LOO0FrZ/5rt86DTY= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://mceson.mo.cx/fiCQtCZpj1QitLbeWj89Gq509s3FcyFdCUhLRjjgX4ABsZggRuh3izjP02pubXUtsXFDT9xmeglNb03mCubUsl5Y6N7DVckWipmN2dK/U/s= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://mceson.mo.cx/CnwCiprYbMaOOWsxHn5XYlBsdSsMUUryhRj77M1I359mEEjSw4CWl5WuM38PveV6q5ML6Aru0eROyUmY2zu/UsUWSmKBvDSe zSOWdq mtdQoPT 9GpWbSenor8hz5UKkEpcoq25UmlGssgtbSlontpdRiNhkyMPddppDtd/fBI5G8rS4Ki2CinCTisi/NHKbZOzwJaT Up(nil): unknown_html RIPE DE abuse at attractsoft.com 83.125.22.186 to 83.125.22.186 linuxsecured.net http://ip.linuxsecured.net/ Up(nil): unknown_html_RFI_shell ARIN US abuse at inforelay.com 67.208.74.71 to 67.208.74.71 PassingGas.net http://dza.PassingGas.net/tj.js> http://www.domaincdn.com/DS_IMapplication_v1.php Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 nl.ai http://dfhdf.nl.ai/showthread.php?t=282270 Down: unknown_html_google_malware ARIN US noc at theplanet.com 174.120.206.3 to 174.120.206.3 businecessity.com http://businecessity.com/logo.gif?4a1ca=1821372 Down: unknown_html_google_malware ARIN US noc at theplanet.com 174.120.206.3 to 174.120.206.3 businecessity.com http://businecessity.com/logo.gif?47711=1755750 Down: unknown_html_google_malware ARIN US noc at theplanet.com 174.120.206.3 to 174.120.206.3 businecessity.com http://businecessity.com/logo.gif?411cf=2133624 Down: NA RIPE EU abuse at ripe.net 77.79.4.148 to 77.79.4.148 boss-search.com http://boss-search.com/adv.php?i=21&rnd=3664 Down: NA RIPE EU abuse at ripe.net 77.79.4.148 to 77.79.4.148 boss-search.com http://boss-search.com/adv.php?i=21&rnd=15476 Up(nil): TR/Dropper.Gen APNIC CN abuse at chinaunicom.cn 60.28.214.9 to 60.28.214.9 1024tb.com http://3s.1024tb.com/download/mu/2.4.5/8cf405e4a87d082d15f8516641d8b31d.gif Up(nil): unknown_html_google_malware ARIN US ipdept at servint.com 64.131.75.19 to 64.131.75.19 ce.ms http://vfsgdf.ce.ms/showthread.php?t=442351 Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/zs/ser3.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/zs/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/zs/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/zs/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/zs/chat.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/??????/today.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/??????/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/??????/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/??????/??????.txt Down: unknown_html_google_malware APNIC KR noc at hclc.co.kr 101.79.5.29 to 101.79.5.29 mireene.com http://sss7013.mireene.com/??????/chat.txt Up(nil): unknown_html LACNIC BR virtua at virtua.com.br 201.74.252.126 to 201.74.252.126 codisk.com http://server1.u147852369.codisk.com/newg/getUpdate.php?u=E879733E-1C3F3EF7&g=test44&o=XP Up(nil): unknown_html LACNIC BR virtua at virtua.com.br 201.74.252.126 to 201.74.252.126 codisk.com http://server1.u147852369.codisk.com/newg/getUpdate.php?u=18000087-1C3F3EF7&g=test40&o=XP Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://pgecert.mo.cx/QWaGSQQOxKjiDi/1oACPKSwux0bq8m7sxmJ3w/AiRjNtjdCqgSJve9epoxeoMoCKE3/NfDGFH7358mSiSewmKduuSLE16a2WJMlEDpB2uKU= Down: unknown_html_google_malware ARIN US internal at velocity-servers.net 206.217.141.176 to 206.217.141.176 mo.cx http://pgecert.mo.cx/OzwPZvgvYcRk3SjjVOksV0xq06obFeOxXzycIVwN k9V9TxgmNQp9MNzByvie9ePwNz4rX9/CjnsBgYqmAq/F5rVlmMoDa3UhasUITLlq/Eydwu4zyz7vzkVwW7WPjpAtL6DoUkCP8z2kv7xtvYS/OIKYnySSGIFMG8ihGRWOgTSYMGZKuI3VMvhzlIIqmXAOOzJJC/r Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 nl.ai http://nhgdhd.nl.ai/showthread.php?t=842577 Down: NA RIPE NL info at euroaccess.nl 85.12.33.171 to 85.12.33.171 nl-web.net http://ngfjg.nl-web.net/showthread.php?t=782586 Up(nil): unknown_html_google_malware APNIC KR abuse at skbroadband.com 116.127.121.38 to 116.127.121.38 ieshow.co.kr http://ieshow.co.kr/partner/counter/run.php?pid=vktest&cid=skylove4 Up(nil): unknown_html_google_malware APNIC KR abuse at skbroadband.com 116.127.121.38 to 116.127.121.38 ieshow.co.kr http://ieshow.co.kr/partner/counter/run.php?pid=vktest&cid=getrunbho Up(nil): unknown_html_google_malware APNIC KR abuse at skbroadband.com 116.127.121.38 to 116.127.121.38 ieshow.co.kr http://ieshow.co.kr/partner/counter/reinstall.php?pid=vktest&cid=skylove3 Up(nil): unknown_html_google_malware APNIC KR abuse at skbroadband.com 116.127.121.38 to 116.127.121.38 ieshow.co.kr http://ieshow.co.kr/partner/counter/reinstall.php?pid=vktest&cid=skylove2 Up(nil): unknown_html_google_malware APNIC KR abuse at skbroadband.com 116.127.121.38 to 116.127.121.38 ieshow.co.kr http://ieshow.co.kr/partner/counter/install.php?pid=vktest&cid=getrunbho Down: unknown_html_google_malware ARIN US khunt at huntbrothers.com 173.212.56.170 to 173.212.56.170 xe.cx http://hooverponic.xe.cx/showthread.php?t=322576 Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 c0m.li http://hdghdg.c0m.li/showthread.php?t=772240 Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 coom.in http://hdfhdg.coom.in/showthread.php?t=992368 Up(nil): unknown_html_google_malware ARIN US ipdept at servint.com 64.131.75.19 to 64.131.75.19 ce.ms http://gsdtgsdf.ce.ms/showthread.php?t=912559 Down: NA ARIN CA abuse at noc.privatedns.com 184.107.53.150 to 184.107.53.150 osa.pl http://gsdgsad.osa.pl/showthread.php?t=272419 Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 nl.ai http://gsafgs.nl.ai/showthread.php?t=382297 Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 nl.ai http://ghsdafg.nl.ai/showthread.php?t=482255 Down: NA ARIN CA abuse at noc.privatedns.com 184.107.53.150 to 184.107.53.150 osa.pl http://ghdafghsd.osa.pl/showthread.php?t=952890 Down: NA RIPE NL abuse at xl-is.net 178.18.87.141 to 178.18.87.141 nl.ai http://gfsghf.nl.ai/showthread.php?t=622686 Up(nil): unknown_html_google_malware ARIN US ipdept at servint.com 64.131.75.19 to 64.131.75.19 ce.ms http://fdafdas.ce.ms/showthread.php?t=462230 Up(nil): unknown_html_RFI_shell ARIN US abuse at inforelay.com 67.208.74.71 to 67.208.74.71 passinggas.net http://dtn.passinggas.net/tj.js Down: NA RIPE EU abuse at ripe.net 77.79.4.148 to 77.79.4.148 boss-search.com http://boss-search.com/adv.php?i=21&rnd=11150 Up(nil): unknown_html_google_malware APNIC CN keepie at 163.com 182.61.128.174 to 182.61.128.174 51edm.net http://a.release.51edm.net/geturl.php?q=FamWNHTEDv\GSvRKlW8a6nCrFaTWFjla6nGTSXQPN=dw6nCqy9fOy=\OCW\WgxdQcx\OCL\dy=8qRnyry9fqyIyqyv0qCZZqyIhqlJfaD28TNXl1DHtrbXFH8jbw6nrKsx80Rj0ry=8KRndTsncEFHMYDH40bXbTRHmKF9\ObXTH8jbw6nrKsx8HNpyryx8WFntry=8wFp4\Fjyryf55&m=a1201e9e89040108acfde8a208e4b8a9 Up(nil): unknown_html_google_malware APNIC KR kwlee at actela.com 121.78.59.2 to 121.78.59.2 joyfile.co.kr http://app.joyfile.co.kr/SiteShortcut/update.txt Up(nil): HTML/Drop.Agent.AB ARIN US abuse at softlayer.com 208.43.91.92 to 208.43.91.92 australiaimmigration.co.in http://www.australiaimmigration.co.in Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/TotalMailConverter.exe Up(nil): HTML/IFrame.inkb Ripe IT hostmaster at eurnetcity.net 80.68.199.253 to 80.68.199.253 centronauticalaziale.com http://www.centronauticalaziale.com Down: NA ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/tvsoftware.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/iPhoneVideoC/iPhoneConverter675.exe Up(nil): unknown_html ARIN US abuse at dreamhost.com 173.236.163.61 to 173.236.163.61 feeplay.com http://www.feeplay.com/download/internet-make-money.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 steampower.tk http://steampower.tk/ Up(nil): unknown_html RIPE ES nemesys at telefonica.es 213.96.15.148 to 213.96.15.148 aine.net http://tomtom.aine.net:9080/aitienda/aicp.html Down: NA RIPE IT ops at infracom.it 62.196.45.2 to 62.196.45.2 studiosbeautycare.it http://studiosbeautycare.it/ecommerce/catalogo/aicp.html Up(nil): unknown_html_google_malware RIPE DE abuse at hetzner.de 88.198.6.142 to 88.198.6.142 altervista.org http://negoziovirtuale.altervista.org/milestone/catalog/aicp.html Up(nil): unknown_html RIPE ro abuse at romarg.com 89.42.216.118 to 89.42.216.118 evergreennatural.ro http://evergreennatural.ro/aicp.html Up(nil): unknown_html RIPE RU abuse at avguro.com 81.177.139.73 to 81.177.139.73 ds-komfort.ru http://ds-komfort.ru/aicp.html Up(nil): unknown_html APNIC ID admin at jasatel.net.id 116.213.48.109 to 116.213.48.109 broskucantik.com http://broskucantik.com/aicp.html Up(nil): unknown_html RIPE ES nemesys at telefonica.es 213.96.15.148 to 213.96.15.148 aine.net http://aine.net:9080/aitienda/aicp.html Down: NA ARIN US admin at nobistech.net 174.34.131.82 to 174.34.131.82 freehostingcloud.com http://jaxbox.freehostingcloud.com/main/wp-content/uploads/fgallery/ir.html Down: NA LACNIC BR regcom at locaweb.com.br 187.45.195.183 to 187.45.195.183 bambue.com.br http://bambue.com.br/wp-content/uploads/fgallery/ir.html Down: NA LACNIC BR regcom at locaweb.com.br 201.76.59.58 to 201.76.59.58 americanidolbrasil.com http://americanidolbrasil.com/xfactor/wp-content/uploads/fgallery/ir.html Down: NA ARIN US abuse at bluehost.com 69.89.31.238 to 69.89.31.238 mia-mobi.com http://mia-mobi.com/wp-content/uploads/fgallery/ir.html Down: NA RIPE IT abuse at seflow.net 95.141.36.175 to 95.141.36.175 armoniecentroestetico.it http://armoniecentroestetico.it/wpita/wp-content/uploads/fgallery/ir.html Down: ARIN US abuse at godaddy.com actionfx.info http://actionfx.info/wp-content/uploads/fgallery/ir.html Up(nil): HTML/IFrame.inkb Ripe IT hostmaster at eurnetcity.net 80.68.199.253 to 80.68.199.253 ediliziabartuccelli.com http://www.ediliziabartuccelli.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 16:06:33 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 16:06:33 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 16:02:06 CET Message-ID: <20120223150633.E61201D68005@lists.clean-mx.com> Up(nil): unknown_html APNIC CN lhm at srt.com.cn 202.91.241.7 to 202.91.241.7 bearingbase.com http://bearingbase.com/ Down: NA ARIN US abuse at fortressitx.com 208.116.28.210 to 208.116.28.210 waresight.com http://www.waresight.com/download/sapcspy.exe Up(nil): unknown_file_$TEMP/$PLUGINSDIR/AskInstallChecker.exe ARIN US abuse at softlayer.com 67.228.50.216 to 67.228.50.216 thanksgivingreflections.com http://www.thanksgivingreflections.com/screensavers/exe/scenic-thanksgivingmoods-screensaver.exe Up(nil): unknown_html ARIN US abuse at godaddy.com 184.168.192.125 to 184.168.192.125 softwaregrabber.info http://www.softwaregrabber.info/InternetHistoryCleanerSetup.exe Up(nil): unknown_exe ARIN US hostmaster at reflected.net 66.254.123.32 to 66.254.123.32 sexy-screen-savers.com http://www.sexy-screen-savers.com/downloads/sexyss131.exe Down: NA RIPE HU abuse at iif.hu 193.225.15.254 to 193.225.15.254 gyogyinfok.hu http://www.gyogyinfok.hu/szp/tetfog/updater.exe Up(nil): unknown_html_google_malware ARIN US abuse at dimenoc.com 199.168.189.168 to 199.168.189.168 bestnzb.com http://www.bestnzb.com/download/freepcdownloadgames.exe Up(nil): JS/Dldr.Psyme.GX.3 APNIC CN lhm at srt.com.cn 202.91.241.7 to 202.91.241.7 bearingbase.com http://bearingbase.com/dvbbs/footbak4.htm Down: NA LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.162.108 to 200.98.162.108 200.98.162.108 http://200.98.162.108/2/index.html Up(nil): TR/Dldr.BonusCash APNIC KR ip at kidc.net 110.45.143.250 to 110.45.143.250 110.45.143.250 http://110.45.143.250/searchlite/searchlite__sl05.exe?13117&&&&quot;&&&&&&&&gt//;http Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=68 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=200 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=178 Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=148 Up(nil): EXP/Pidief.aud LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp1.php?f=145 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=96 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=64 Up(nil): EXP/Pidief.aob ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp2.php?f=39 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=79 Up(nil): EXP/Pidief.aou ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/fdp1.php?f=47 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=92 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=46 Up(nil): EXP/Pidief.aom ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp2.php?f=20 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=87 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adp1.php?f=22 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=66 Up(nil): EXP/Pidief.asz.2 ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp2.php?f=38 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=87 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=51 Up(nil): EXP/Pidief.aud ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/adfp1.php?f=28 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=71 Up(nil): EXP/Pdfka.QC ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/2ddfp.php?f=33 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=63 Up(nil): EXP/Pidief.amp ARIN US nic at hostnoc.net 173.212.218.124 to 173.212.218.124 173.212.218.124 http://173.212.218.124/content/1ddfp.php?f=36 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 16:31:30 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 16:31:30 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 16:30:59 CET Message-ID: <20120223153130.56D291D68005@lists.clean-mx.com> Down: NA RIPE DE abuse at ip-exchange.de 62.146.28.40 to 62.146.28.40 fittcom.de http://www.fittcom.de/download/poweralarm/PowerAlarm4Windows.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/pad34.exe Up(nil): unknown_html ARIN US abuse at servint.com 199.230.54.74 to 199.230.54.74 campingvault.com http://campingvault.com/ Down: NA RIPE DE abuse at telia.com 80.239.207.201 to 80.239.207.201 vshare.net.tc http://vshare.net.tc/cgi-sys/suspendedpage.cgi Down: NA ARIN US abuse at osogrande.com 129.121.93.254 to 129.121.93.254 129.121.93.254 http://129.121.93.254/Home/w.php Up(nil): JS/iFrame.cti ARIN US abuse at bluehost.com 66.147.244.217 to 66.147.244.217 timbertrailsmontana.com http://timbertrailsmontana.com --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 17:50:25 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 17:50:25 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 17:03:54 CET Message-ID: <20120223165025.AED411D68005@lists.clean-mx.com> Up(nil): HTML/Drop.Agent.AB APNIC BD bushra.tasnim at mango.com.bd 114.130.13.69 to 114.130.13.69 114.130.13.69 http://114.130.13.69/svchost.exe Up(nil): unknown_html ARIN US noc at mediafire.com 199.91.152.95 to 199.91.152.95 199.91.152.95 http://199.91.152.95/ya5q4audfwrg/tmb0zrhmfnn/zte_esn.exe Down: NA RIPE TR abuse at teknoas.com.tr 91.191.172.135 to 91.191.172.135 aksenmutfakdunyasi.com http://aksenmutfakdunyasi.com/i8z4oXkc/js.js Down: NA APNIC CN anti-spam at ns.chinanet.cn.net 122.224.103.254 to 122.224.103.254 3322.org http://bbsem.3322.org/1.exe Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.246.172 to 200.98.246.172 bemestarestanplaza.com.br http://bemestarestanplaza.com.br/sV7wfiZK/js.js Down: NA ARIN US abuse at theplanet.com 74.52.40.170 to 74.52.40.170 chromatographyworld.com http://chromatographyworld.com/XBVgjKwv/js.js Up(nil): TR/Dropper.Gen RIPE DE abuse at funpic.de 213.202.225.90 to 213.202.225.90 funpic.org http://clichere.cl.funpic.org/EpicBot/EpicBot.exe Down: NA LACNIC AR ipmaster at hostmar.com 200.58.114.44 to 200.58.114.44 clubgerencialsabilaymiel.com http://clubgerencialsabilaymiel.com/onNkC7gz/js.js Down: NA ARIN US hostmaster at lunarpages.com 74.50.13.2 to 74.50.13.2 dentalinsurance-tips.info http://dentalinsurance-tips.info/hWNU4Vpx/js.js Down: NA ARIN US abuse at gigenet.com 69.65.43.153 to 69.65.43.153 fortvel.com.br http://fortvel.com.br/X45Gmh0N/js.js Down: NA RIPE PL admin at lh.pl 89.146.199.169 to 89.146.199.169 lh.pl http://gornajeziorka.lh.pl/sxGNjL6c/js.js Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/buycommissionblueprinttwo.exe Down: NA ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commission_blueprint_2.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprint2.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprint2review.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commission_blueprint_two.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprinttwo.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprinttworeviews.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 174.132.193.190 to 174.132.193.190 idiscounts.info http://idiscounts.info/cb2/commissionblueprinttworeview.exe Down: NA RIPE DE abuse at 1and1.com 82.165.126.32 to 82.165.126.32 media5marketing.co.uk http://media5marketing.co.uk/zmLUqAA1/js.js Up(nil): unknown_html ARIN US abuse at gigenet.com 69.65.42.240 to 69.65.42.240 lntecnoinfo.com.br http://lntecnoinfo.com.br/b6MtNdEX/js.js Down: NA ARIN CA abuse at noc.privatedns.com 72.55.148.21 to 72.55.148.21 megabit.com.br http://megabit.com.br/setup.exe Down: NA RIPE RO 93.187.137.23 to 93.187.137.23 metin2lcs.eu http://metin2lcs.eu/metin2lcs/metin/unins000.exe Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/moredetail.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/kmrecordlist.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/counter/counter/images/CZUser/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/forums/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/includes/tiny_mce/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/form_expert.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmrecordlist.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/backend.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/counter/counter/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/backend.php Down: NA APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/kmdata/kmdata/kmdata/moredetail.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/backend.php Up(nil): unknown_html APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/index.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmdata/expertlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmdata/form_expert.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmdata/kmrecordlist.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmdata/memberzone.php Up(nil): JS/Remora.psa APNIC TH abuse at idc.cattelecom.com 61.19.247.254 to 61.19.247.254 phichit.net http://phichit.net/km/index.php/kmdata/kmdata/kmdata/kmdata/kmdata/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/counter/themes/Aphrodite/style/kmdata/kmdata/kmdata/moredetail.php Down: NA RIPE PL abuse at ovh.net 87.98.236.200 to 87.98.236.200 raciborowice.edu.pl http://raciborowice.edu.pl/8WV7FsVa/js.js Up(nil): unknown_html RIPE HU info at 1bhosting.hu 193.142.209.22 to 193.142.209.22 refsamson.hu http://refsamson.hu/hd3nHboz/js.js Down: NA ARIN US greg at jaguarpc.com 209.217.228.21 to 209.217.228.21 rscine.ro http://rscine.ro/NTG3rJMM/js.js Down: NA RIPE DE abuse at hetzner.de 178.63.171.37 to 178.63.171.37 piranho.de http://rssfeed.piranho.de/X9fghcVa/js.js Up(nil): TR/Offend.KD.529625 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/241.exe Up(nil): unknown_file_$PLUGINSDIR/MyBabylonTB.exe RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/gp.exe Up(nil): TR/StartPage.A.472 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/725.exe Up(nil): TR/StartPage.A.470 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/3.exe Up(nil): TR/StartPage.A.408 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/2.exe Up(nil): TR/Dldr.Delphi.Gen RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/p.exe Up(nil): TR/Kazy.55327.2 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/setup.exe Up(nil): unknown_html ARIN US noc at steadfast.net 69.162.137.166 to 69.162.137.166 ssltube.info http://ssltube.info/.i//includes//includes//includes//includes/js.js Down: NA ARIN CA abuse at noc.privatedns.com 184.107.239.122 to 184.107.239.122 sigro.cl http://sigro.cl/yjPuN28z/js.js Down: NA ARIN US noc at theplanet.com 174.122.209.183 to 174.122.209.183 sdpatrimonial.com.br http://sdpatrimonial.com.br/8S6GpzBx/js.js Up(nil): TR/Winwebsec.A.447 RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://rtyhu.alwaysdata.net/n/soft.exe Up(nil): unknown_html APNIC PH abuse at netplay.ph 202.81.162.38 to 202.81.162.38 sunjewel.com.ph http://sunjewel.com.ph/jwpceYRf/js.js Down: NA ARIN US support at bluehost.com 74.220.215.215 to 74.220.215.215 stufflans.com http://stufflans.com/5VupTFQM/js.js Down: NA ARIN US hostmaster at lunarpages.com 74.50.13.2 to 74.50.13.2 fastsecureservers.com http://techu1.theory.fastsecureservers.com/tjohCfKL/js.js Up(nil): unknown_exe RIPE CZ obchod at anoweb.cz 88.86.113.152 to 88.86.113.152 xf.cz http://videozone.xf.cz/daily/Play_Video3008_Click_Run.exe Down: NA ARIN US abuse at theplanet.com 64.246.32.70 to 64.246.32.70 thrillermpi.com http://thrillermpi.com/ZFHvVcoq/js.js Down: NA ARIN US abuse at softlayer.com 208.43.91.92 to 208.43.91.92 australiaimmigration.co.in http://www.australiaimmigration.co.in/svchost.exe Up(nil): TR/Dldr.Delf.61 ARIN US greg at jaguarpc.com 209.217.236.19 to 209.217.236.19 c-duke.com http://www.c-duke.com/contenidos/prod_cult/escuelas/ct/expo/Informe_Deuda_PDF.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//1rdfash.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//gmp7yg.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//dgshi.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//9934775.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//hprygold.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//mtw.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//labd.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//jikmu.exe Up(nil): unknown_exe RIPE DE net-abuse at hosteurope.de 80.237.246.189 to 80.237.246.189 hide-ip-browser.com http://www.hide-ip-browser.com/hide-ip-browser.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//wtna27ob.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//st21p8k.exe Down: NA APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//omsy.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//nqio.exe Up(nil): TR/ArchSMS.Pic.1 APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com//npcc7y.exe Up(nil): unknown_exe ARIN US noc at theplanet.com 174.121.151.218 to 174.121.151.218 incodesolutions.com http://www.incodesolutions.com/updr2/updaterv10ultra.exe Up(nil): TR/Agent.366592.4 ARIN US noc at theplanet.com 174.121.151.218 to 174.121.151.218 incodesolutions.com http://www.incodesolutions.com/updr2/updaterv9ent.exe Up(nil): unknown_exe ARIN US noc at theplanet.com 174.121.151.218 to 174.121.151.218 incodesolutions.com http://www.incodesolutions.com/updr2/updaterv9ultra.exe Down: NA APNIC AU abuse at onqnetworks.net 120.88.65.150 to 120.88.65.150 jamieparker.org.au http://www.jamieparker.org.au/qrMGma21/js.js Up(nil): unknown_html RIPE DE oberdorfer at hostprofis.com 85.158.181.14 to 85.158.181.14 kotlaba.com http://www.kotlaba.com/bZdicuid/js.js Up(nil): unknown_file_install.exe APNIC JP shin at clara.ad.jp 124.108.36.133 to 124.108.36.133 onlinecasino-center.com http://www.onlinecasino-center.com/downloads/intercasino.exe Up(nil): unknown_file_$INSTDIR/AntivirusDefender.exe ARIN US noc at godaddy.com 72.167.131.152 to 72.167.131.152 mysystemexpert.com http://www.mysystemexpert.com/AntiVirusDefenderSetupFull.exe Up(nil): PUA.Packed.PECompact-1 APNIC JP shin at clara.ad.jp 124.108.36.133 to 124.108.36.133 onlinecasino-center.com http://www.onlinecasino-center.com/downloads/swisscasino.exe Up(nil): unknown_exe RIPE FR abuse at ovh.net 213.186.33.4 to 213.186.33.4 uvnc.eu http://www.uvnc.eu/download/10962/UltraVNC_1.0.9.6.2_x64_Setup.exe Up(nil): unknown_exe RIPE FR abuse at ovh.net 213.186.33.4 to 213.186.33.4 uvnc.eu http://www.uvnc.eu/download/10962/UltraVNC_1.0.9.6.2_Setup.exe Up(nil): TR/Dldr.Delf.NH.30 RIPE IT abuse at ngi.it 88.149.174.74 to 88.149.174.74 volontarisanmartino.org http://www.volontarisanmartino.org/components/com_dor/janeiro2012.exe Down: NA RIPE PL biuro at nephax.com 188.116.20.77 to 188.116.20.77 wymianawalut.eu http://wymianawalut.eu/jstools.js Up(nil): unknown_html_google_malware LACNIC AR rfeijoo at gigared.com.ar 190.183.59.232 to 190.183.59.232 miradigital.com.ar http://www.miradigital.com.ar/scripts/validaciones.js Up(nil): unknown_html_google_malware LACNIC AR rfeijoo at gigared.com.ar 190.183.59.232 to 190.183.59.232 miradigital.com.ar http://www.miradigital.com.ar/scripts/showpopuppicture.js Up(nil): unknown_html_google_malware LACNIC AR rfeijoo at gigared.com.ar 190.183.59.232 to 190.183.59.232 miradigital.com.ar http://www.miradigital.com.ar/scripts/scripts2.js Up(nil): unknown_html_google_malware LACNIC AR rfeijoo at gigared.com.ar 190.183.59.232 to 190.183.59.232 miradigital.com.ar http://www.miradigital.com.ar/scripts/ajax.js Up(nil): unknown_html_RFI_eval LACNIC AR rfeijoo at gigared.com.ar 190.183.59.232 to 190.183.59.232 miradigital.com.ar http://www.miradigital.com.ar/calendario/calendario.js Down: unknown_html_google_malware APNIC JP hostmaster at nic.ad.jp 202.211.43.227 to 202.211.43.227 w-svc.co.jp http://w-svc.co.jp//google.com/aol.com/awempire.com.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/varie.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/rum.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/liquori.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/grappa.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/file_search.php Up(nil): unknown_html RIPE IT hostmaster at technorail.com 62.149.128.163 to 62.149.128.163 vinisepe.it http://vinisepe.it/champagne.php Up(nil): unknown_html LACNIC BR abuse at comdominio.com.br 200.219.245.253 to 200.219.245.253 tycoonestudios.com.br http://tycoonestudios.com.br/port/Scripts/AC_RunActiveContent.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./wb.slideshow.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jscookmenu.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.slide.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.scale.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.fold.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.drop.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.core.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.clip.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.bounce.min.js Up(nil): unknown_html_google_malware LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery.effects.blind.min.js Up(nil): unknown_html_RFI_eval LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.196.80 to 200.98.196.80 santacasacba.com.br http://santacasacba.com.br/./jquery-1.4.2.min.js Down: NA RIPE DE abuse at Level3.com 62.140.23.84 to 62.140.23.84 quick-textilverwertung.de http://quick-textilverwertung.de/index-Dateien/script.js Down: NA RIPE PL abuse at home.pl 89.161.236.160 to 89.161.236.160 pupilion.pl http://pupilion.pl//s/g.exec( Down: unknown_html_google_malware RIPE DE abuse at hetzner.de 188.40.77.144 to 188.40.77.144 liberkom.pl http://liberkom.pl/mltools.js Up(nil): unknown_html RIPE UA colocation at ukr.net 91.232.199.26 to 91.232.199.26 reddawndigital.net http://item.reddawndigital.net//s/g.exec( Up(nil): unknown_html RIPE UA colocation at ukr.net 91.232.199.26 to 91.232.199.26 reddawndigital.net http://item.reddawndigital.net/from Up(nil): unknown_html RIPE UA colocation at ukr.net 91.232.199.26 to 91.232.199.26 reddawndigital.net http://item.reddawndigital.net/12 Down: NA ARIN US abuse at godaddy.com 184.168.138.1 to 184.168.138.1 condemnedtohell.com http://condemnedtohell.com//s/g.exec( Up(nil): unknown_html ARIN US tech at nexcess.net 208.86.249.11 to 208.86.249.11 arqmedia.cl http://arqmedia.cl/hts-thw.js Down: NA ARIN US tech at nexcess.net 208.86.249.11 to 208.86.249.11 arqmedia.cl http://arqmedia.cl/concept_files/animatedcollapse.js Up(nil): unknown_html_google_malware RIPE UA abuse at ip.datagroup.ua 77.222.131.80 to 77.222.131.80 andres-glass.com.ua http://andres-glass.com.ua/Scripts/AC_RunActiveContent.js Up(nil): unknown_html_google_malware RIPE UA abuse at ip.datagroup.ua 77.222.131.80 to 77.222.131.80 andres-glass.com.ua http://andres-glass.com.ua/func.js Up(nil): unknown_html_RFI_shell LACNIC CL jolea at GTDINTERNET.COM 201.238.195.68 to 201.238.195.68 3av.cl http://3av.cl/ws.js Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/computerspysoftware.exe Up(nil): unknown_html ARIN US abuse at fdcservers.net 76.73.76.58 to 76.73.76.58 76.73.76.58 http://76.73.76.58/~darkson2/budala45346534/ Down: HEUR:Trojan.Win32.Generic APNIC KR abuse at kornet.net 222.122.19.238 to 119.206.194.106 rewardnetwork.net http://codebase.rewardnetwork.net/codebase/ Down: WebToolbar.Win32.RK.cb RIPE VG noc.akrino at gmail.com 91.202.63.176 to 91.202.63.176 downolloz.info http://soft.downolloz.info/a7/size3698688/??????ampampampampampltbr/ Up(nil): unknown_exe ARIN US Chavvon at yoggin.com 65.99.250.115 to 65.99.250.115 themexp.org http://themexp.org/site_tempfiles/04/184881.exe Up(nil): TR/Dldr.Delphi.Gen RIPE DE abuse at leaseweb.de 188.72.202.142 to 188.72.202.142 prostoudar.in http://prostoudar.in/saf32ddfds.exe Up(nil): TROJ_SPNR.0CJS11 RIPE CH abuse at infomaniak.ch 93.88.240.193 to 93.88.240.193 ord-ix.ch http://ord-ix.ch/PostintopInstall.exe Up(nil): unknown_exe RIPE ES administrador at axarnet.es 91.142.215.235 to 91.142.215.235 ibercanal.es http://ibercanal.es/ayuda.exe Up(nil): unknown_exe ARIN US abuse at limestonenetworks.com 216.245.194.82 to 216.245.194.82 burd.com.br http://burd.com.br/NJPG.exe Up(nil): BDS/Backdoor.Gen RIPE DE abuse at attractsoft.com 83.125.22.188 to 83.125.22.188 me.pn http://benerobo.me.pn/Webpanel/upload/conhost.exe Down: NA ARIN US abuse at bluehost.com 66.147.240.151 to 66.147.240.151 aldostools.org http://aldostools.org/igrabber.exe Up(nil): TR/Kazy.57476.1 RIPE NL abuse at denit.nl 81.26.216.23 to 81.26.216.23 accdenhartog.nl http://accdenhartog.nl/html/rapport.pdf.exe Up(nil): unknown_exe ARIN US nic at hostnoc.net 184.82.0.36 to 184.82.0.36 184.82.0.36 http://184.82.0.36/f/apache.exe Down: NA APNIC CN anti-spam at ns.chinanet.cn.net 180.114.245.251 to 180.114.245.251 180.114.245.251 http://180.114.245.251/Servic.exe Up(nil): TR/VB.orl RIPE GB abuse at dedicatedservercontact.com 176.227.199.26 to 176.227.199.26 176.227.199.26 http://176.227.199.26/cc.exe Up(nil): EXP/Pidief.auc.1 LACNIC PA mcordoba at hostingpanama.com 190.123.200.110 to 190.123.200.110 190.123.200.110 http://190.123.200.110/content/adp2.php?f=78 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 19:15:59 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 19:15:59 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 19:07:00 CET Message-ID: <20120223181559.618771D68005@lists.clean-mx.com> Up(nil): TR/Winwebsec.aqur RIPE HU abuse at t-online.hu 195.228.86.32 to 195.228.86.32 m-land.hu http://www.m-land.hu/images/1.exe Up(nil): TR/Crypt.ZPACK.Gen ARIN US network-abuse at cc.yahoo-inc.com 98.139.135.22 to 98.139.135.22 torreyhillstech.com http://www.torreyhillstech.com/images/1.exe Up(nil): TR/Winwebsec.aqur ARIN US admin at internetnamesforbusiness.com 69.49.101.51 to 69.49.101.51 mercierautos.ca http://www.mercierautos.ca/images/1.exe Up(nil): IRC_ZAPCHAST.NT ARIN US abuse at he.net 64.71.181.113 to 64.71.181.113 64.71.181.113 http://64.71.181.113/e-greetings.exe Up(nil): unknown_html RIPE GB noc at vi.net 212.78.92.5 to 212.78.92.5 hobbcreation.com http://hobbcreation.com/css/online.vodafone.co.uk/index2.html Down: Trojan-Spy.Win32.Zbot.dlii RIPE NL abuse at denit.nl 81.26.216.23 to 81.26.216.23 accdenhartog.nl http://accdenhartog.nl/html/ Down: RemoteAdmin.Win32.WinVNC-based.c ARIN US abuse at limestonenetworks.com 216.245.194.82 to 216.245.194.82 burd.com.br http://burd.com.br/ Down: HEUR:Trojan.Win32.Generic RIPE ES administrador at axarnet.es 91.142.215.235 to 91.142.215.235 ibercanal.es http://ibercanal.es/ Down: RemoteAccess:Win32/UltraVNC RIPE DE abuse at leaseweb.de 188.72.202.142 to 188.72.202.142 prostoudar.in http://prostoudar.in/ Up(nil): unknown_html APNIC SG gschwimer at godaddy.com 118.139.171.1 to 118.139.171.1 cywoxur.com http://www.cywoxur.com// Down: NA ARIN US arin-contact at hostingservicesinc.net 67.213.222.19 to 67.213.222.19 smartcheckerng.de.gg http://www2.smartcheckerng.de.gg/POjPHA.pdf Up(nil): EXP/Pidief.aud RIPE RU abuse at specenergo2.ru 91.196.216.146 to 91.196.216.146 ghiamld.in http://ghiamld.in/content/ap1.php?f=97d19 Down: NA RIPE RU abuse at pinspb.ru 146.185.249.139 to 146.185.249.139 amorellos.biz http://amorellos.biz/content/ap1.php?f=213 Up(nil): JS/Clicker.CA ARIN US noc at theplanet.com 174.123.53.146 to 174.123.53.146 maiseymaeaday.com http://maiseymaeaday.com/ Down: NA APNIC CN ipmgr at jltele.com 222.168.56.237 to 222.168.56.237 ccu.edu.cn http://nic.ccu.edu.cn/tool/?%9E%81?%93%81??%94??%940730.exe Down: unknown_html RIPE DE abuse at hetzner.de 78.46.63.86 to 78.46.63.86 tynipic.com http://tynipic.com/images/rgh1322581973l.jpg Down: NA ARIN US bnbrock at maileig.com 209.59.212.135 to 209.59.212.135 favoriteleague.com http://favoriteleague.com/pony/gate.php Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 trishulsoft.com http://www.trishulsoft.com/exe/sars/Spyware-Adware-Removal-Software.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/StaffLoggerDownloader6000.exe Down: unknown_html_google_malware ARIN US abuse at theplanet.com 64.246.3.226 to 64.246.3.226 desktop-xp.com http://www.desktop-xp.com/files/freenaruto.exe Down: unknown_html_google_malware RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 scaner-do.tk http://scaner-do.tk/ Up(nil): PHP/PBot.A.6 RIPE CZ lir at vshosting.cz 93.185.104.24 to 93.185.104.24 vlnka.net http://www.vlnka.net/eshop/images/readme.txt Up(nil): PHP/C99Shell.F APNIC TW network-adm at hinet.net 60.251.175.238 to 60.251.175.238 thpea.org.tw http://www.thpea.org.tw//modules/cjaycontent/content/cyber.txt Up(nil): unknown_html_RFI_php ARIN US abuse at softlayer.com 174.37.251.226 to 174.37.251.226 seranteshotel.com.br http://www.seranteshotel.com.br/cmd3.txt Up(nil): PHP/Shellbot.7642 APNIC HK admin-team at icdsoft.com 116.251.204.148 to 116.251.204.148 seenpm.org http://www.seenpm.org/new/members/files/20120221011043_pb1.txt Up(nil): unknown_html_RFI_php APNIC ID abuse at dtp.net.id 116.90.167.24 to 116.90.167.24 pt-atlantik.com http://www.pt-atlantik.com/yohanesdrm/wp-2.txt Up(nil): PHP_HTMAILHCK.SM RIPE PL abuse at ovh.net 87.98.239.19 to 87.98.239.19 przedszkole37.com.pl http://www.przedszkole37.com.pl/druga/inbox.txt Up(nil): PHP/Small.C ARIN US support at bluehost.com 74.220.219.75 to 74.220.219.75 lylygarden.com http://www.lylygarden.com/css/byz9991.jpg Up(nil): PHP/Small.C ARIN US support at bluehost.com 74.220.219.75 to 74.220.219.75 lylygarden.com http://www.lylygarden.com/css/9991.jpg Up(nil): PHP_HTMAILHCK.SM RIPE DE abuse at 1and1.com 213.165.82.38 to 213.165.82.38 gesfinco.es http://www.gesfinco.es//ecole/tmp/Untitled.txt Up(nil): PHP/Shell.CA.2 RIPE FR abuse at ovh.net 213.186.33.19 to 213.186.33.19 fxinformatique.be http://www.fxinformatique.be/upx.txt Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.182 to 98.142.215.182 fileden.com http://www.fileden.com/files/2012/2/4/3259779/kidjfisjsj5df.txt Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.182 to 98.142.215.182 fileden.com http://www.fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.182 to 98.142.215.182 fileden.com http://www.fileden.com/files/2012/2/11/3263486/cmavatarr.txt Up(nil): TR/Script.75 RIPE SE ripe at blixtvik.net 87.96.212.114 to 87.96.212.114 dualrange.net http://www.dualrange.net//wp-content/1.txt Down: PHP/Spy.Ettu.D ARIN US abuse at servint.com 216.22.26.29 to 216.22.26.29 browsewebmail.com http://wordpress.com.browsewebmail.com/...php Up(nil): PUA.HTML.Crypt-8 ARIN US sri at cloudflare.com 199.27.134.42 to 199.27.134.42 r57shell.tk http://r57shell.tk/r57.txt Down: PHP.Hide ARIN US abuse at comcast.net 173.10.84.21 to 173.10.84.21 hexaweb.com.ar http://picasa.com.hexaweb.com.ar/wp-content/uploads/2012/lovesick.php Down: PHP/Spy.Ettu.D ARIN US abuse at servint.com 216.22.26.29 to 216.22.26.29 curriculumfeedbackcentre.com http://picasa.com.curriculumfeedbackcentre.com/...php Up(nil): PHP/Shellbot.7642 ARIN US abuse at hostingsolutionsint.com 173.224.123.99 to 173.224.123.99 negociol.com http://negociol.com/file/f1912/pbot.txt. Up(nil): PHP/Small.C ARIN US abuse at dimenoc.com 64.37.48.241 to 64.37.48.241 klatenweb.com http://klatenweb.com/design/images/..jpg Up(nil): PHP/C99Shell.F ARIN US abuse at dimenoc.com 64.37.48.241 to 64.37.48.241 klatenweb.com http://klatenweb.com/design/images/air.txt Up(nil): PHP/RemoteAdmi.5398 ARIN US abuse at dimenoc.com 64.37.48.241 to 64.37.48.241 klatenweb.com http://klatenweb.com/akademik/images/myid.flv Up(nil): PHP/IRCBOT.67556 ARIN US security at verizon.net 108.27.33.19 to 108.27.33.19 kalyanpgcollege.org http://kalyanpgcollege.org/portal/images/core/define/php/spread.txt Up(nil): PHP/IRCBOT.A ARIN US security at verizon.net 108.27.33.19 to 108.27.33.19 kalyanpgcollege.org http://kalyanpgcollege.org/portal/images/core/define/php/pintery.txt Up(nil): PHP.Downloader APNIC JP warita at gmo.jp 210.157.5.15 to 210.157.5.15 gutchi.jp http://gutchi.jp/wp//wp-content/themes/delicate/cache/pani2.jpg Up(nil): PHP.Downloader APNIC JP warita at gmo.jp 210.157.5.15 to 210.157.5.15 gutchi.jp http://gutchi.jp/wp//wp-content/themes/delicate/cache/pani1.jpg Up(nil): unknown_html_RFI_php ARIN CA curtis at arima.ca 67.211.195.68 to 67.211.195.68 flickrocom.co.cc http://flickrocom.co.cc/img.php Down: unknown_html_RFI_php ARIN CA curtis at arima.ca 67.211.195.68 to 67.211.195.68 flickrocom.co.cc http://flickrocom.co.cc/1.php Down: NA ARIN US abuse at bluehost.com 74.220.207.66 to 74.220.207.66 emilyspromise.com http://emilyspromise.com/upx.txt Down: PHP/Spy.Ettu.D ARIN US abuse at servint.com 216.22.26.29 to 216.22.26.29 cherylbennewith.com http://blogger.com.cherylbennewith.com/...php Up(nil): unknown_html_RFI_php APNIC TW hostmaster at twnic.net.tw 61.66.228.55 to 61.66.228.55 ysl.net http://bbs.ysl.net/bbs/logs/Anjo_Loko.txt Up(nil): TR/Script.75 ARIN US abuse at rr.com 24.161.61.196 to 24.161.61.196 24.161.61.196 http://24.161.61.196/Hacker Tools and Exploits/zd1.txt Togglevirusname: mdl_trojan Sinowal to unknown_exe ARIN US abuse at wideopenwest.com 69.47.13.70 to 93.115.105.228 leoevmnrhgs.com http://leoevmnrhgs.com/w.php?f=5a20e&e=2 Up(nil): unknown_exe ARIN US abuse at wideopenwest.com 69.47.13.70 to 93.115.105.228 leoevmnrhgs.com http://leoevmnrhgs.com/w.php?f=5a20e&e=2 Down: mdl_Blackhole exploit kit ARIN US abuse at wideopenwest.com 69.47.13.70 to 84.114.26.86 leoevmnrhgs.com http://leoevmnrhgs.com/index.php?tp=001e4bb7b4d7333d Down: mdl_Zeus/ICE-IX trojan RIPE SE peter at serverconnect.se 95.143.193.183 to 95.143.193.183 epac.to http://nodos.epac.to/w.php?f=17&e=2 Togglevirusname: mdl_Blackhole exploit kit to JS/DarDuk.IO RIPE SE peter at serverconnect.se 95.143.193.183 to 95.143.193.183 epac.to http://nodos.epac.to/main.php?page=09a3b73246e05a43 Up(nil): JS/DarDuk.IO RIPE SE peter at serverconnect.se 95.143.193.183 to 95.143.193.183 epac.to http://nodos.epac.to/main.php?page=09a3b73246e05a43 Up(nil): unknown_html ARIN US admin-arin at vpls.net 174.139.51.147 to 174.139.51.147 174.139.51.147 http://174.139.51.147/ Togglevirusname: Trojan-Downloader.Win32.Agent.gybl to unknown_exe ARIN US noc at mediafire.com 199.91.153.20 to 199.91.153.20 199.91.153.20 http://199.91.153.20/10tagvnbcyig/886qc9ce890gi8f/ Up(nil): unknown_exe ARIN US noc at mediafire.com 199.91.153.20 to 199.91.153.20 199.91.153.20 http://199.91.153.20/10tagvnbcyig/886qc9ce890gi8f/ Up(nil): unknown_html RIPE PL abuse at ehost.pl 193.143.77.26 to 193.143.77.26 carexpertpolska.pl http://carexpertpolska.pl/test/ Down: Trojan.Win32.FakeAV.kxss RIPE AT michael.neumann-ripe at world4you.com 81.19.145.25 to 81.19.145.25 compmodedvd.at http://compmodedvd.at/xxxvideo/xvid/ Down: Trojan-Spy.Win32.Zbot.dlhq ARIN US abuse at charter.net 24.241.194.26 to 86.56.39.24 monedyg.eu http://monedyg.eu/ Down: Trojan.Win32.Buzus.atfv ARIN US supportamerica at sentris.com 76.191.115.2 to 76.191.115.2 stokweb.com.br http://stokweb.com.br/2xaXhyYb/ Down: WebToolbar.Win32.RK.cb RIPE HU abuse at gts.hu 195.56.193.97 to 195.56.193.97 mindenkilapja.hu http://users2.ml.mindenkilapja.hu/users/alap-clan/uploads/ Down: unknown_html_google_malware RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 scaner-figy.tk http://scaner-figy.tk/ Down: NA RIPE RU abuse at corbina.net 95.24.204.28 to 189.253.159.55 berrickconsulthierry.in http://gp69qbug.berrickconsulthierry.in/ Up(nil): unknown_html ARIN US arin-contact at google.com 173.194.70.101 to 173.194.70.102 goo.gl http://goo.gl/7bewG Down: NA ARIN US support at linode.com 173.255.246.42 to 173.255.246.42 173.255.246.42 http://173.255.246.42/stats/counter.php?id=3D7b106bf3362c8c45 Up(nil): unknown_html LACNIC BR abuse at comdominio.com.br 200.219.245.95 to 200.219.245.95 congraf.com.br http://www.congraf.com.br/modulo/carindexfi.html Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 antispywareconsumerreport.com http://driverbackup.antispywareconsumerreport.com/drv/UpdateDvdDrivers/Run-AllUpdateSoftware.exe Down: PHISH/TAM.A LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.201.40 to 200.98.201.40 200.98.201.40 http://200.98.201.40/fidelidade.com.br/tam.html Down: NA RIPE HU abuse at gts.hu 195.56.193.97 to 195.56.193.97 mindenkilapja.hu http://users2.ml.mindenkilapja.hu/users/alap-clan/uploads/Fraps2.9.8Build7777Setup.exe Down: NA RIPE VG noc.akrino at gmail.com 91.202.63.176 to 91.202.63.176 downolloz.info http://soft.downolloz.info/a7/size3698688/??????&&ampampampltbr/&&ampampampgt??????_2016494687-.zip.exe Up(nil): unknown_html ARIN US abuse at rackspace.com 173.203.98.33 to 173.203.98.33 oicdn.com http://market.oicdn.com/serve/dl.php?rebuild=y&&pid=6467 Down: NA APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 housespect.net http://housespect.net/w.php?f=cddc7&&e=2 Up(nil): TR/Offend.kdv.540271 ARIN US abuse at lemuriaco.com 199.7.177.226 to 199.7.177.226 hotfile.com http://hotfile.com/dl/147103842/56f6edd/index.html Down: NA APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 hapturing.net http://hapturing.net/w.php?f=cddc7&&e=2 Up(nil): unknown_exe RIPE DE abuse at hetzner.de 178.63.91.110 to 178.63.91.110 jdownloader.org http://download1.jdownloader.org/download.php?f=0&&o=0&&c=0&&i=1&&j=0 Up(nil): unknown_html RIPE RU noc at msm.ru 79.137.212.5 to 79.137.212.5 conceptrich.ru http://conceptrich.ru/in.cgi?4&&parameter=Opera Down: NA LACNIC VE ipadmin at cantv.net 190.199.139.107 to 190.199.139.107 clrneemgess.com http://clrneemgess.com/w.php?f=26&&e=2 Down: NA ARIN US abuse at servint.com 199.230.54.74 to 199.230.54.74 campingvault.com http://campingvault.com/d.php?f=9e50a&&e=2 Down: NA ARIN US abuse at servint.com 199.230.54.75 to 199.230.54.75 campingomotion.com http://campingomotion.com/d.php?f=9e50a&&e=2 Up(nil): unknown_exe APNIC CN abuse at cnc-noc.net 113.31.31.137 to 113.31.31.137 imobile.com.cn http://archive.imobile.com.cn/download/5488409/2/ImageToTool.exe Up(nil): unknown_exe ARIN US abuse at fdcservers.net 76.73.76.58 to 76.73.76.58 76.73.76.58 http://76.73.76.58/~darkson2/budala45346534/Photo5325-View.jpeg.exe Down: NA RIPE RU lir at di-net.ru 85.192.45.75 to 85.192.45.75 1sedobazole.info http://1sedobazole.info/w.php?f=17&&e=2 Down: NA ARIN US noc at mediafire.com 199.91.153.20 to 199.91.153.20 199.91.153.20 http://199.91.153.20/10tagvnbcyig/886qc9ce890gi8f/fix_it_silverlightES.exe Up(nil): unknown_exe APNIC kr abuse at skbroadband.com 218.38.15.92 to 218.38.15.92 pe.kr http://up.dom.pe.kr/okdoms.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/pcsurveillancepro.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/aatc.exe Up(nil): unknown_exe ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/fileunitel.exe Down: NA ARIN US abuse at theplanet.com 70.84.99.69 to 70.84.99.69 newqite.com http://www.newqite.com/coustavex/Downloadtrue.exe Down: NA ARIN US abuse at theplanet.com 174.132.144.7 to 174.132.144.7 zisportsmedicine.com http://www.zisportsmedicine.com/modules/mod_sistem/atualizacao.php Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 trishulsoft.com http://www.trishulsoft.com/exe/buymoviedownloads/buymoviedownloads.exe Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/sdownload/graphic.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/pad_file1.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/dupe_checker_pro.exe Up(nil): unknown_html ARIN US abuse at godaddy.com 184.168.192.125 to 184.168.192.125 softwaregrabber.info http://www.softwaregrabber.info/GoogleKeywordExpertSetup.exe Down: unknown_html_google_malware ARIN US abuse at theplanet.com 64.246.3.226 to 64.246.3.226 desktop-xp.com http://www.desktop-xp.com/files/funfood.exe Down: NA ARIN US netops at singlehop.com 69.175.66.250 to 69.175.66.250 trishulsoft.com http://erasehistory.trishulsoft.com/as/VirusSpywareRemoval/Run-SpywareEliminationSoftware.exe Up(nil): TR/Spy.Banker.F.11 APNIC KR luvyong at hclc.co.kr 113.30.103.248 to 113.30.103.248 113.30.103.248 http://113.30.103.248/images/condor2.gif Up(nil): unknown_html APNIC LK int at lankacom.net 203.143.20.4 to 203.143.20.4 unionb.com http://www.unionb.com/index.php Up(nil): HTML/Infected.WebPage.Gen2 APNIC VN vanht at ods.vn 112.78.8.153 to 112.78.8.153 khonggiancntt.com http://khonggiancntt.com/forum/archive/index.php/t-3.html Up(nil): JS/iFrame.cau.1 ARIN US abuse at hostingsolutionsint.com 69.64.36.78 to 69.64.36.78 7-furniture.com http://7-furniture.com/index.php/outdoor.html Up(nil): JS/iFrame.cau.1 ARIN US abuse at hostingsolutionsint.com 69.64.36.78 to 69.64.36.78 7-furniture.com http://7-furniture.com/index.php/bar.html --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 19:32:50 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 19:32:50 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 19:31:54 CET Message-ID: <20120223183250.729291D68005@lists.clean-mx.com> Down: NA APNIC kr abuse at skbroadband.com 218.38.15.92 to 218.38.15.92 pe.kr http://www.dom.pe.kr/update.php Up(nil): unknown_exe ARIN US noc at theplanet.com 174.121.151.218 to 174.121.151.218 incodesolutions.com http://www.incodesolutions.com/updr2/ver/removeitpro_2012ent.exe Up(nil): unknown_exe RIPE SI abuse at tusmobil.si 91.185.211.101 to 91.185.211.101 f1simulator.si http://f1simulator.si/media/system/js/txs.exe Down: NA RIPE DE abuse at 1and1.com 82.165.104.113 to 82.165.104.113 spaxalm.de http://www.spaxalm.de/impressum/logitech.exe Down: NA RIPE IT support at kpnqwest.it 109.168.107.17 to 109.168.107.17 senzabarriere.info http://www.senzabarriere.info/photo_gallery/logitech.exe Down: NA RIPE FR abuse at wistee.fr 94.124.84.12 to 94.124.84.12 bambous-pc.com http://www.bambous-pc.com/animages/logitech.exe Down: NA ARIN US abuse at datapipe.com 66.70.127.101 to 66.70.127.101 istockanalyst.com http://istockanalyst.com/12.jpg?sv=441&tq=gJ4WK/SUh7TFlUR8oY+QtMWTUj26kJH7yZJTNLqVybhqtUn5CGFATA== Up(nil): unknown_html RIPE RU alexp at lec.tel 80.87.199.15 to 80.87.199.15 extrafind.biz http://extrafind.biz/c0817f/installer.cfc?res=success&hwid=9219653aa0e0af322748c8c818996198ef67574d Down: NA RIPE FR abuse at ovh.net 178.32.28.118 to 178.32.28.118 alwaysdata.net http://bkav.alwaysdata.net/?id=18020633 Down: NA RIPE DE abuse at leaseweb.de 188.72.230.61 to 188.72.230.61 yourfreshstorage.com http://4rwo.yourfreshstorage.com/logo.png?sv=442&tq=gL5HtzoYwLzEpUb5fU3HxcW6Avc6EsazybMRtyFZ0umG8Ar0SsSA/gSoSEU= --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 20:07:59 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 20:07:59 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 20:03:56 CET Message-ID: <20120223190800.377071D68005@lists.clean-mx.com> Up(nil): unknown_exe RIPE PL abuse at superhost.pl 195.114.1.125 to 195.114.1.125 suppas.pl http://suppas.pl/g9kwPN.exe Up(nil): unknown_html RIPE FR abuse at ovh.net 213.186.33.4 to 213.186.33.4 terracites.fr http://www.blog.terracites.fr/wp-content/gallery/test/thumbs/x.html Up(nil): TR/Crypt.XPACK.Gen ARIN US abuse at fdcservers.net 76.73.40.206 to 76.73.40.206 back2009.info http://top.back2009.info/g.css Up(nil): unknown_html ARIN US cjones at quasardata.com 74.122.123.234 to 74.122.123.234 phpchatrooms.com http://chat.phpchatrooms.com/ Down: NA player.i1m2.com. to player.i1m2.com. i1m2.com http://player.i1m2.com.:1118/mediaplayer7.exe Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/ematrixsoft/pdf-to-word-converter.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/eout.exe Up(nil): unknown_html ARIN CA support at hostpapasupport.com 69.90.161.244 to 69.90.161.244 listenatkings.org http://listenatkings.org/ Down: NA ARIN US abuse at oversee.net 208.73.210.29 to 208.73.210.29 intermediacorp.org http://intermediacorp.org/cgi-bin/rokfeller3.cgi Up(nil): PUA.Packed.PECompact-1 RIPE IE degripeadmin at dataelec.com 87.252.210.19 to 87.252.210.19 casinodelrio.com http://banner.casinodelrio.com/installer/casino/SetupCasino.exe_238 Up(nil): TR/Crypt.XPACK.Gen3 APNIC KR abuse at kornet.net 125.141.243.156 to 125.141.243.165 ktics.co.kr http://game2-softnyx.ktics.co.kr/check/RIS//710/bin/rakion.bin Up(nil): unknown_exe RIPE DE abuse at plusserver.de 85.25.91.168 to 85.25.91.168 beepworld.it http://fotolog13.beepworld.it/files/slide-fotos20.exe Up(nil): TR/Downloader.Gen APNIC CN anti_spam at mail.nbptt.zj.cn 122.227.135.164 to 122.227.135.164 3322.org http://e6ek.3322.org/ad/9158chat_420555.exe Up(nil): unknown_html APNIC CN abuse at gddc.com.cn 125.91.8.206 to 125.91.8.206 apanda.com.cn http://apanda.com.cn/ads/zt/nb.html Up(nil): unknown_exe RIPE DE abuse at 1and1.com 82.165.25.48 to 82.165.25.48 82.165.25.48 http://82.165.25.48:81/.t/71.zip Up(nil): unknown_html APNIC CN ynipm at 126.com 61.159.225.18 to 61.159.225.18 bd12.in http://3g7.bd12.in/n/dd/md.html Up(nil): BDS/PHP.WebShell.AV APNIC KR zongik at gyo6.net 203.190.27.56 to 203.190.27.56 hs.kr http://www.gumi-ig.hs.kr/popup/id1.jpg? Down: unknown_html RIPE MK zoran at robi.com.mk 89.205.123.154 to 89.205.123.154 pic.mk http://pic.mk/images/E6pn1.png Down: unknown_html ARIN US netops at ezrinet.com 208.94.0.86 to 208.94.0.86 imageshack.us http://img812.imageshack.us/img812/4739/2752502f8356b25m3.jpg Down: unknown_html ARIN US netops at ezrinet.com 208.94.0.75 to 208.94.0.75 imageshack.us http://img543.imageshack.us/img543/677/28228861ddc537am3.jpg Down: unknown_html ARIN US netops at ezrinet.com 208.94.3.13 to 208.94.3.13 imageshack.us http://img163.imageshack.us/img163/1399/27278400524c904m3.jpg Up(nil): PERL/IrcBot.AX APNIC JP warita at gmo.jp 210.157.5.15 to 210.157.5.15 gutchi.jp http://gutchi.jp/wp//wp-content/themes/delicate/cache/unix.txt Up(nil): PERL/IrcBot.AJ APNIC JP warita at gmo.jp 210.157.5.15 to 210.157.5.15 gutchi.jp http://gutchi.jp/wp//wp-content/themes/delicate/cache/nyamuk.txt --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 20:33:29 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 20:33:29 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 20:31:19 CET Message-ID: <20120223193330.5AE8D1D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US abuse at dreamhost.com 208.113.230.96 to 208.113.230.96 diplomataweb.com http://diplomataweb.com/n480/1b67/g9g/fgh7/g7/18g/a9h/5rgh/9g/1vf7/69h/fv65/a9u/bbbvideo.scr Up(nil): unknown_exe ARIN US abuse at dreamhost.com 208.113.230.96 to 208.113.230.96 diplomataweb.com http://www.diplomataweb.com/n480/1b67/g9g/fgh7/g7/18g/a9h/5rgh/9g/1vf7/69h/fv65/a9u/bbbvideo.scr Up(nil): TR/ATRAPS.Gen APNIC CN abuse at gddc.com.cn 121.12.169.152 to 121.12.169.152 121.12.169.152 http://121.12.169.152:38/ny.exe Up(nil): TR/Siggen.O APNIC CN abuse at cnc-noc.net 118.72.254.219 to 118.72.254.219 118.72.254.219 http://118.72.254.219:82/down/USB_2_4.zip Down: NA ARIN CA support at hostpapasupport.com 69.90.161.244 to 69.90.161.244 listenatkings.org http://listenatkings.org/wp-content/themes/listen/images/favicon.ico Down: NA APNIC VN hm-changed at vnnic.net.vn 210.211.110.222 to 210.211.110.222 210.211.110.222 http://210.211.110.222/products.php Up(nil): ADSPY/NaviPromo.J ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/SecurityXploded/firepassword_padfile.exe Up(nil): ADWARE/Relevant.Q APNIC CN abuse at chinaunicom.cn 58.23.131.110 to 58.23.131.110 678soft.com http://www.678soft.com/software/ScreenPen_install.rar Down: NA APNIC IN antiabuse.support at relianceada.com 115.249.190.46 to 115.249.190.46 housespect.net http://housespect.net/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 21:08:07 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 21:08:07 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 21:04:21 CET Message-ID: <20120223200807.14B541D68005@lists.clean-mx.com> Up(nil): TR/Agent.363008.22 RIPE FR abuse at ovh.net 178.33.142.145 to 178.33.142.145 atubecatcher.es http://atubecatcher.es/downloads/installer_atube_catcher.exe Up(nil): TR/Offend.2.7907 RIPE SE noc at centralnetworks.se 79.175.165.31 to 79.175.165.31 alborz1.in http://alborz1.in/files/s.exe Up(nil): TR/Vundo.Gen2 RIPE UA abuse at uahoster.org 91.217.153.77 to 91.217.153.77 91.217.153.77 http://91.217.153.77/update/user_614.exe Up(nil): unknown_exe RIPE DE abuse at 1and1.com 82.165.25.48 to 82.165.25.48 82.165.25.48 http://82.165.25.48:85/.t/25.zip Up(nil): TR/Jorik.217088.18 RIPE DE abuse at 1and1.com 82.165.25.48 to 82.165.25.48 82.165.25.48 http://82.165.25.48:84/.t/18.zip Up(nil): WORM/Slenfbot.A.160 RIPE DE abuse at 1and1.com 82.165.151.190 to 82.165.151.190 82.165.151.190 http://82.165.151.190:86/.i/87.zip Up(nil): TR/Jorik.217088.49 RIPE DE abuse at 1and1.com 82.165.151.190 to 82.165.151.190 82.165.151.190 http://82.165.151.190:86/.c/49.zip Up(nil): unknown_exe RIPE DE abuse at 1and1.com 82.165.151.190 to 82.165.151.190 82.165.151.190 http://82.165.151.190:85/.i/25.zip Up(nil): TR/Injector.6.1 RIPE DE abuse at 1and1.com 82.165.151.190 to 82.165.151.190 82.165.151.190 http://82.165.151.190:85/.c/25.zip Up(nil): TR/Ramgad.B.6 RIPE DE abuse at leaseweb.de 78.159.112.208 to 78.159.112.208 78.159.112.208 http://78.159.112.208/Arm4.0.exe Up(nil): TR/Klovbot.B.20 ARIN US abuse at myvirpus.com 50.115.162.213 to 50.115.162.213 50.115.162.213 http://50.115.162.213/ver/postal_sanvalentin.exe Up(nil): TR/Comame.A.53 APNIC CN anti_spam at mail.jhptt.zj.cn 60.191.223.15 to 60.191.223.15 duote.com.cn http://48.duote.com.cn/luyinrj.exe Up(nil): TR/Dropper.Gen APNIC KR abuse at kornet.net 220.95.232.44 to 220.95.232.44 220.95.232.44 http://220.95.232.44/~serviceitem/keyfind/setup_kf003_m.exe Up(nil): unknown_exe APNIC KR ipmanager at samsung.com 211.45.30.136 to 211.45.30.136 211.45.30.136 http://211.45.30.136/updatefb/SFPrmVer.exe Up(nil): TR/ATRAPS.Gen LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/Win32/updat.exe Up(nil): unknown_exe LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/sys02/03.exe Up(nil): TR/Spy.Banker.Gen LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/sys02/02.exe Up(nil): unknown_exe RIPE PT abuse at isp.novis.pt 195.23.154.196 to 195.23.154.196 195.23.154.196 http://195.23.154.196/winwriter1.dll Up(nil): unknown_exe ARIN US abuse at cyberwurx.com 69.61.74.188 to 69.61.74.188 casinoschule.com http://www.casinoschule.com/downloads/betssoncasino.exe Down: NA ARIN US abuse at theplanet.com 74.52.127.34 to 74.52.127.34 gameszu.net http://gameszu.net/pads/Xbox 360 3 luces rojas_v3.0.exe Down: NA ARIN US abuse at data393.net 205.209.48.143 to 205.209.48.143 ba-rackobama.com http://ba-rackobama.com/wordpress.exe Up(nil): unknown_html APNIC CN anti_spam at mail.nbptt.zj.cn 122.227.135.164 to 122.227.135.164 3322.org http://e6ek.3322.org/ad/ Down: Trojan-Spy.Win32.Zbot.dlii player.i1m2.com. to player.i1m2.com. i1m2.com http://player.i1m2.com.:1118/ Up(nil): unknown_html RIPE PL abuse at superhost.pl 195.114.1.125 to 195.114.1.125 suppas.pl http://suppas.pl/ Up(nil): ADWARE/Agent.NHW.1 RIPE FR abuse at ovh.net 46.105.174.26 to 46.105.174.26 pctuto.com http://dlfr.pctuto.com/clib/pctuto/fr//tutodreamweaver001/pctuto.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 21:35:54 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 21:35:54 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 21:34:01 CET Message-ID: <20120223203554.EE5DA1D68005@lists.clean-mx.com> Up(nil): ADWARE/Agent.Klic.A APNIC KR abuse at skbroadband.com 116.127.121.27 to 116.127.121.26 countmoa.co.kr http://down.countmoa.co.kr/FirstClickInstaller.exe Up(nil): TR/Rootkit.Gen APNIC KR abuse at sejongtelecom.net 210.109.101.52 to 210.109.101.52 dnbooks.co.kr http://dnbooks.co.kr/down/m217.exe Up(nil): unknown_exe RIPE FR abuse at ovh.net 94.23.75.52 to 94.23.75.52 directx.es http://directx.es/downloads/installer_directx.exe Down: NA ARIN US abuse at godaddy.com 64.202.163.156 to 64.202.163.156 cevsl.org http://cevsl.org/tmp/Guardiao30hrs_v204.exe Up(nil): TR/Graftor.15855 ARIN US abuse at softlayer.com 208.43.101.160 to 208.43.101.160 bikinitempo.com.ec http://bikinitempo.com.ec/vs.exe Up(nil): unknown_html_google_malware RIPE NL abuse at uk.colt.net 212.78.185.210 to 212.78.185.210 klantenmonitor.nl http://klantenmonitor.nl/perplexing.html Up(nil): JS/Redirector.2304 RIPE RU abuse at agava.com 89.108.68.81 to 89.108.68.81 hut2.ru http://miniidp.hut2.ru/eBaySignin.htm Down: unknown_html_google_blacklist RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 componente-bradesco.tk http://componente-bradesco.tk/ Down: NA APNIC KR ip at kidc.net 114.108.128.47 to 114.108.128.47 torangcomz.com http://torangcomz.com/app_install.php?mac=000C297E8556&ver=&pid=kf003&insttype=keywordfind Up(nil): unknown_exe LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/sys02/01.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/nsftoex.exe Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/GPInstall.exe Down: unknown_html_google_malware ARIN US contact at dfw-datacenter.com 72.9.157.122 to 72.9.157.122 saverzz.com http://www.saverzz.com/download/carmen-electra-7.exe Up(nil): ADSPY/KuaisoToolb.3 ARIN US abuse at dimenoc.com 72.29.80.241 to 72.29.80.241 dreamjobcentral.com http://www.dreamjobcentral.com/toolbar/toolbar.exe Up(nil): BDS/Poison.M.46 ARIN US noc at nvc.net 66.35.110.82 to 66.35.110.82 hzlo.net http://jack.hzlo.net/download/antivirus.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 22:06:03 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 22:06:03 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 22:02:48 CET Message-ID: <20120223210603.6311D1D68005@lists.clean-mx.com> Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/emsn2p.exe Up(nil): BDS/Backdoor.Gen RIPE NL abuse at leaseweb.com 85.17.25.236 to 85.17.25.236 cba.pl http://fotomodelka.cba.pl/sylwia.exe Up(nil): ADWARE/FineTop.A.9 APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://finetop.topguide.co.kr/update/FT06/FTU1004.exe Up(nil): ADWARE/Sidetab.1.3 APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://file.topguide.co.kr/dst/FineTop_FT108.exe Up(nil): unknown_html RIPE GB sbonner at hostmaster.com 62.75.203.94 to 62.75.203.94 host.org http://www.verifygtb.host.org/ Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/download/pad-file-fv.exe Up(nil): JS/Redirector.2304 RIPE RU abuse at agava.com 89.108.68.81 to 89.108.68.81 hut2.ru http://itemebai99.hut2.ru/eBaySignin.htm Down: NA ARIN US abuse at osogrande.com 129.121.93.254 to 129.121.93.254 129.121.93.254 http://129.121.93.254/Home/w.php?f=16&e=0 Up(nil): unknown_exe RIPE PL admin at euro-net.pl 195.177.196.4 to 195.177.196.4 euro-net.pl http://euro-net.pl/~faguss/files/Installer.exe Up(nil): unknown_exe RIPE FR abuse at ovh.net 178.33.155.119 to 178.33.155.119 emule.es http://emule.es/downloads/installer_emule.exe Down: NA ARIN US DOMAIN-REQUEST at aims7.army.mil 6.0.0.0 to 6.0.0.0 6.0.0.0 http://6d691122b73d39b81411a7d39f9ec4b43209bb31644b5dbed4cc5e6791fd2109_upd.upd.pdf Down: Adware.Agent.NHW RIPE DE abuse at santrex.net 46.166.157.128 to 46.166.157.128 46.166.157.128 http://46.166.157.128/ Down: Trojan-Banker.Win32.Banker.sobs RIPE FR abuse at ovh.net 46.105.174.27 to 46.105.174.27 pctuto.com http://dlfr.pctuto.com/clib/pctuto/fr//tutodreamweaver001/ Up(nil): unknown_html ARIN US abuse at data393.net 205.209.48.143 to 205.209.48.143 ba-rackobama.com http://ba-rackobama.com/ Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/sys02/ Up(nil): unknown_html LACNIC BR l-registrobr-uol at corp.uol.com.br 200.98.135.144 to 200.98.135.144 200.98.135.144 http://200.98.135.144/Win32/ Down: HEUR:Trojan.Win32.Generic APNIC CN anti_spam at mail.jhptt.zj.cn 60.191.223.15 to 60.191.223.15 duote.com.cn http://48.duote.com.cn/ Up(nil): unknown_html ARIN US abuse at myvirpus.com 50.115.162.213 to 50.115.162.213 50.115.162.213 http://50.115.162.213/ver/ Up(nil): unknown_html RIPE DE abuse at leaseweb.de 78.159.112.208 to 78.159.112.208 78.159.112.208 http://78.159.112.208/ Down: Adware.Relevant.BA RIPE UA abuse at uahoster.org 91.217.153.77 to 91.217.153.77 91.217.153.77 http://91.217.153.77/update/ Down: WebToolbar.Win32.RK.cr APNIC CN abuse at chinaunicom.cn 58.23.131.110 to 58.23.131.110 678soft.com http://www.678soft.com/software/ Down: Trojan.Win32.Swisyn.cacm APNIC CN abuse at gddc.com.cn 121.12.169.152 to 121.12.169.152 121.12.169.152 http://121.12.169.152:38/ Down: NA LACNIC BR fapesp at corp.globo.com 201.7.184.2 to 201.7.184.2 kit.net http://eduloco.kit.net/r57.txt?http://176.31.15.20/pbots.txt? Up(nil): unknown_html RIPE TR ripe at sgstelecom.com 85.153.46.186 to 85.153.46.186 fatihkaya.com.tr http://fatihkaya.com.tr/_sysini/winlog.txt Up(nil): unknown_html RIPE IL abuse at smile.net.il 77.124.241.170 to 92.46.30.177 washingpointyincite.in http://jrlqx.washingpointyincite.in/ Up(nil): unknown_html ARIN US arin-contact at google.com 173.194.70.102 to 173.194.70.102 goo.gl http://goo.gl/rdvjb Up(nil): unknown_html ARIN US arin-contact at google.com 173.194.70.102 to 173.194.70.102 goo.gl http://goo.gl/MJL1x Up(nil): unknown_html ARIN US arin-contact at google.com 173.194.70.102 to 173.194.70.102 goo.gl http://goo.gl/Dshbd Up(nil): unknown_html ARIN US arin-contact at google.com 173.194.70.102 to 173.194.70.102 goo.gl http://goo.gl/64Ut0 Down: NA ARIN US arin-contact at google.com 173.194.70.102 to 173.194.70.102 goo.gl http://goo.gl/0vk27 Up(nil): unknown_html LACNIC AR ipadmin at telecentro.net.ar 186.18.57.189 to 186.186.43.121 squarestotallymarine.in http://7imnzcnm.squarestotallymarine.in/ Down: NA LACNIC VE iptelcel at telcel.net.ve 186.186.43.121 to 186.18.57.189 squarestotallymarine.in http://78xo5.squarestotallymarine.in/ Up(nil): unknown_html LACNIC MX abuse at UNINET.NET.MX 189.161.133.58 to 180.234.238.99 squarestotallymarine.in http://6o3q8plp.squarestotallymarine.in/ --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 22:39:24 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 22:39:24 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 22:37:12 CET Message-ID: <20120223213925.061E01D68005@lists.clean-mx.com> Up(nil): unknown_exe ARIN US noc at theplanet.com 174.122.175.93 to 174.122.175.93 antispywareonline.net http://www.antispywareonline.net/AODCP/AODCP.exe Up(nil): DR/Dldr.Dibs.A ARIN US nic at hostnoc.net 184.22.205.3 to 184.22.205.3 altarsoft.com http://www.altarsoft.com/downloads/AltarsoftPhotoEditor.exe Up(nil): TR/Offend.KD.538784 LACNIC BR l-registrobr-uol at corp.uol.com.br 187.17.98.44 to 187.17.98.44 prespor.com.br http://prespor.com.br/sv/lib.dll Up(nil): TR/Offend.KD.536567 LACNIC BR l-registrobr-uol at corp.uol.com.br 187.17.98.44 to 187.17.98.44 prespor.com.br http://prespor.com.br/sv/Inicialize.exe Up(nil): HEUR/Malware APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 PointWay.co.kr http://PointWay.co.kr/Info/Throat/throat.exe Up(nil): HEUR/Malware APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 PointWay.co.kr http://PointWay.co.kr/Info/Temptree/temptree.exe Up(nil): HEUR/Malware APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 PointWay.co.kr http://PointWay.co.kr/Info/Sysover/sysover.exe Up(nil): HEUR/Malware APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 PointWay.co.kr http://PointWay.co.kr/Info/Ones/ones.exe Up(nil): TR/Dldr.Troxen.1198 APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 PointWay.co.kr http://PointWay.co.kr/Info/Biodesk/biodesk.exe Up(nil): PFS/PCPlus.A APNIC KR support at kidc.net 222.231.31.88 to 222.231.31.88 pc-master.co.kr http://pc-master.co.kr/program/pcm.exe Up(nil): TR/Spy.ZBot.krylg ARIN US abuse at theplanet.com 74.54.206.232 to 74.54.206.232 msom.com.au http://msom.com.au/Eo1WZjw.exe Up(nil): TR/Crypt.ULPM.Gen RIPE GB abuse at burst.net 46.37.180.92 to 46.37.180.92 lertionk02.be http://lertionk02.be/upd/18.exe Up(nil): TR/Agent.532480.33 APNIC KR abuse at kornet.net 61.81.96.4 to 61.81.96.4 idfinder.co.kr http://idfinder.co.kr/updateapp/Desktop/IDUpdater.exe Up(nil): unknown_html APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://finetop.topguide.co.kr/update/FT108/FineTop.ini Down: NA APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://finetop.topguide.co.kr/install.asp?version=1.0.0.4&id=FT108&mac=000C297E8556 --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 23:10:35 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 23:10:35 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 23:07:23 CET Message-ID: <20120223221035.1AE201D68005@lists.clean-mx.com> Up(nil): TR/Dldr.Delphi.Gen RIPE RU abuse at hoster24.ru 92.241.187.2 to 92.241.187.2 unlimitedideas.info http://unlimitedideas.info/crashreporter.dll Up(nil): DR/MicroJoiner.Gen ARIN US admin-arin at vpls.net 98.126.110.60 to 98.126.110.60 2288.org http://sogouaa.2288.org:568/imagesq/zw.exe Up(nil): DR/MicroJoiner.Gen ARIN US admin-arin at vpls.net 98.126.110.60 to 98.126.110.60 2288.org http://sogouaa.2288.org:568/imagesq/zq.exe Up(nil): TR/Buzy.H ARIN US admin-arin at vpls.net 98.126.110.60 to 98.126.110.60 2288.org http://sogouaa.2288.org:568/imagesq/ze.exe Up(nil): TR/Agent.532480.33 APNIC KR abuse at kornet.net 61.81.96.4 to 61.81.96.4 idfinder.co.kr http://www.idfinder.co.kr/updateapp/Desktop/IDUpdater.exe Up(nil): unknown_html APNIC KR abuse at kornet.net 61.81.96.4 to 61.81.96.4 idfinder.co.kr http://www.idfinder.co.kr/updateapp/Desktop/IDUpdateInfo.inf Down: NA ARIN US abuse at softlayer.com 74.86.54.224 to 74.86.54.224 toptenreport.com http://www.toptenreport.com/SecurityXploded/hashgenerator_padfile.exe Down: NA RIPE NL abuse at dot.tk 93.170.52.30 to 93.170.52.30 secure-runescape-login-suggest-mod-player-log-ws.tk http://secure-runescape-login-suggest-mod-player-log-ws.tk/ Up(nil): HIDDENEXT/Worm.Gen ARIN US abuse at qwest.net 208.44.242.107 to 208.44.242.107 ddns.us http://conference.ddns.us/download/Report.zip Up(nil): unknown_html ARIN US abuse at osogrande.com 129.121.93.254 to 129.121.93.254 129.121.93.254 http://129.121.93.254/Home/org.class Togglevirusname: mdl_trojan Sinowal to TR/Crypt.XPACK.Gen2 RIPE NL abuse at as9143.net 84.27.184.129 to 98.245.77.222 egpncoloiswm.com http://egpncoloiswm.com/w.php?f=5a20e&e=2 Up(nil): TR/Crypt.XPACK.Gen2 RIPE NL abuse at as9143.net 84.27.184.129 to 98.245.77.222 egpncoloiswm.com http://egpncoloiswm.com/w.php?f=5a20e&e=2 Down: mdl_Blackhole exploit kit RIPE NL abuse at as9143.net 84.27.184.129 to 67.246.148.2 egpncoloiswm.com http://egpncoloiswm.com/index.php?tp=001e4bb7b4d7333d Down: Backdoor.Win32.Danton.43 APNIC KR abuse at skbroadband.com 180.71.56.240 to 180.71.56.240 topguide.co.kr http://finetop.topguide.co.kr/update/FT06/ Up(nil): unknown_html RIPE NL abuse at leaseweb.com 85.17.25.236 to 85.17.25.236 cba.pl http://fotomodelka.cba.pl/ Down: AdWare.Win32.Mostofate.cc ARIN US noc at nvc.net 66.35.110.82 to 66.35.110.82 hzlo.net http://jack.hzlo.net/download/ Togglevirusname: Trojan-Downloader.Win32.Delf.begm to unknown_html_RFI_eval ARIN US abuse at dimenoc.com 72.29.80.241 to 72.29.80.241 dreamjobcentral.com http://www.dreamjobcentral.com/toolbar/ Up(nil): unknown_html_RFI_eval ARIN US abuse at dimenoc.com 72.29.80.241 to 72.29.80.241 dreamjobcentral.com http://www.dreamjobcentral.com/toolbar/ Up(nil): unknown_html ARIN US abuse at softlayer.com 208.43.101.160 to 208.43.101.160 bikinitempo.com.ec http://bikinitempo.com.ec/ Down: Rootkit.Win32.Tiny.jg ARIN US abuse at godaddy.com 64.202.163.156 to 64.202.163.156 cevsl.org http://cevsl.org/tmp/ Down: WebToolbar.Win32.Agent.ak APNIC KR abuse at sejongtelecom.net 210.109.101.52 to 210.109.101.52 dnbooks.co.kr http://dnbooks.co.kr/down/ Down: NA APNIC KR hostmaster at kisa.or.kr 27.102.68.204 to 27.102.68.204 pointway.co.kr http://pointway.co.kr/Info/Throat/info.php Down: NA RIPE DE abuse-server at strato.de 85.214.204.32 to 211.44.250.173 hjpyvexsutdctjol.ru http://hjpyvexsutdctjol.ru Up(nil): PHP/Spy.Ettu.E ARIN US abuse at rr.com 97.79.239.29 to 97.79.239.29 projecthyperplugin.com http://projecthyperplugin.com/images/xpl/name.txt?? Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.184 to 98.142.215.184 fileden.com http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt? Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.184 to 98.142.215.184 fileden.com http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt? Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.184 to 98.142.215.184 fileden.com http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt Up(nil): PHP/Spy.Ettu.E ARIN US abuse at rr.com 97.79.239.29 to 97.79.239.29 projecthyperplugin.com http://projecthyperplugin.com/images/xpl/source.txt?? Down: unknown_html_google_malware ARIN US abuse at fortressitx.com 69.72.240.42 to 69.72.240.42 campani.net http://campani.net/tmp/c99.txthttp://176.31.15.20/pbots.txt? --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php --------------------- From root at dbserver.netpilot.net Thu Feb 23 23:39:07 2012 From: root at dbserver.netpilot.net (root) Date: Thu, 23 Feb 2012 23:39:07 +0100 Subject: [Viruswatch] Virus-sites with status changes: As of 2012-02-23 23:36:33 CET Message-ID: <20120223223907.865C31D68005@lists.clean-mx.com> Down: unknown_html_google_malware ARIN US abuse at fortressitx.com 69.72.240.42 to 69.72.240.42 campani.net http://campani.net/logs/c99.txt?? Down: unknown_html_google_malware ARIN US abuse at fortressitx.com 69.72.240.42 to 69.72.240.42 campani.net http://campani.net/logs/c99.txt?? Up(nil): PHP/Shellbot.7642 ARIN US wnoc at wiresix.com 98.142.215.184 to 98.142.215.184 fileden.com http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9fjds98jf9sdf98sdj.txt?http://fileden.com/files/2012/2/4/3259779/dfjd9f Up(nil): PHP/IRCBOT.21970 ARIN US abuse at mediatemple.net 205.186.179.185 to 205.186.179.185 feis.me http://feis.me/ontah/dev.jpg?? Up(nil): PHP/IRCBOT.EW ARIN US abuse at mediatemple.net 205.186.179.185 to 205.186.179.185 feis.me http://feis.me/ontah/env.jpg?? Up(nil): PHP/BackDoor.AR ARIN US abuse at mediatemple.net 205.186.179.185 to 205.186.179.185 feis.me http://feis.me/ontah/idxml.txt?? Up(nil): PHP/IRCBOT.21970 ARIN US abuse at mediatemple.net 205.186.179.185 to 205.186.179.185 feis.me http://feis.me/ontah//art.jpg?? Up(nil): PHP/IRCBOT.EW ARIN US abuse at mediatemple.net 205.186.179.185 to 205.186.179.185 feis.me http://feis.me/ontah//arc.jpg?? Up(nil): TR/Rootkit.Gen APNIC KR abuse at kornet.net 119.196.104.248 to 119.196.104.248 ndsgame.co.kr http://wii.ndsgame.co.kr/css/gg.exe Up(nil): unknown_exe ARIN US bnbrock at maileig.com 66.96.147.106 to 66.96.147.106 whitpage.info http://whitpage.info/sub/bfsvcu.exe Up(nil): unknown_exe RIPE TR abuse at as42926.net 46.45.164.162 to 46.45.164.162 46.45.164.162 http://46.45.164.162/mm.exe Up(nil): unknown_html ARIN US netops at dreamhost.com 69.163.248.205 to 69.163.248.205 mattfloreen.com http://mattfloreen.com/ Up(nil): unknown_html ARIN US abuse at softlayer.com 74.86.160.72 to 74.86.160.72 caselli.cl http://caselli.cl/ Down: NA APNIC KR network at smileserv.com 115.68.7.244 to 115.68.7.244 everyclear.co.kr http://update.everyclear.co.kr/set/everyclearsetup_top.exe --------------------- for online data visit http://support.clean-mx.de/clean-mx/viruses.php ---------------------