On 13 October 2007, The Washington Post published Brian Krebs' excellent articles on the Russian Business Network: http://blog.washingtonpost.com/securityfix/2007/10/mapping_the_russian_business_n.html http://blog.washingtonpost.com/securityfix/2007/10/taking_on_the_russian_business.html http://www.washingtonpost.com/wp-dyn/content/story/2007/10/12/ST2007101202661.html?hpid=moreheadlines http://www.washingtonpost.com/wp-dyn/content/article/2007/10/12/AR2007101201700.html?sub=new With respect to events since publication, note "The Russians Go Chinese": http://www.spamhaus.org/rokso/evidence.lasso?rokso_id=ROK7829 and "Russian Business Network: Down, But Not Out": http://blog.washingtonpost.com/securityfix/2007/11/russian_business_network_down.html In addition, RBNExploit has continued to provide timely information: http://rbnexploit.blogspot.com Utilize the Bleeding RBN Rules: http://docs.bleedingthreats.net/bin/view/Main/RussianBusinessNetwork In Honeywall, you add hostile IP addresses to your /etc/blacklist.txt file. This is a not a block list, this information will allow the construction of IP block lists and DNS blackholes. IP Address: Domains and Hosts: 8.15.231.110/32 cmjmachining.com (dnsstuff.com's entry) 58.65.232.0/21 hostfresh.com (Hong Kong) 58.65.233.0/24 hostfresh.com (Hong Kong) 58.65.233.25/32 mail.namesecured.info, namesecured.info and ns1.namesecured.info 58.65.233.185/32 mail.warez-bb.org, ns1.warez-bb.org, warez-bb.org and www.warez-bb.org 58.65.234.17/32 iframe.iframedollars.com and iframedollars.com 58.65.234.18/32 ns2.iframedollars.com 58.65.235.41/32 mail.mykissingteens.net, mykissingteens.net and ns1.greatfog.com 58.65.235.81/32 offshorearnings.com 58.65.235.177/32 floodbot.net, mail.floodbot.net and ns1.bondocom.biz 58.65.235.178/32 ns2.bondocom.biz 58.65.237.17/32 deutchbank.net, mail.deutchbank.net, ns1.supra-hosting.info, ns2.supra-hosting.info and traffnews.com 58.65.237.121/32 mail.mp3-go.net and mp3-go.net 58.65.238.18/32 westernunion.reg-login.com 58.65.238.59/32 hostfresh.com (Hong Kong) 58.65.238.66/32 mail.pimpmovie.net, ns1.pimpmovie.net, ns2.pimpmovie.net and pimpmovie.net 58.65.238.98/32 myrdns.com and us1core.hostfresh.com 58.65.238.100/32 ns1.hostfresh.com 58.65.238.101/32 ns2.hostfresh.com 58.65.239.27/32 hostfresh.com (Hong Kong) 58.65.239.66/31 hostfresh.com (Hong Kong) 62.140.208.131/32 mnet.net.uk 62.140.208.197/32 mnet.net.uk 62.154.15.154/32 dtag.de 63.243.188.2/32 ns1.hsprovider.net 63.243.188.3/32 ns2.hsprovider.net 63.243.188.82/32 antivir2007.com 64.28.176.0/20 AS27595 Intercage 64.28.177.74/32 ns3.dnsbakler.com 64.28.180.4/32 ns1.placespaces.net 64.28.180.5/32 mail.placespaces.net, ns.placespaces.net, ns1.g000gle.net, ns2.placespaces.net and placespaces.net 64.28.180.6/32 g000gle.net, mail.g000gle.net, ns.g000gle.net and ns2.g000gle.net 64.28.180.20/32 giga-movies.net, mail.giga-movies.net, ns.giga-movies.net and ns1.giga-movies.net 64.28.180.21/32 mail.toplistpro.net, ns.toplistpro.net, ns2.giga-movies.net and toplistpro.net 64.28.180.22/32 ns1.toplistpro.net 64.28.180.43/32 mail.accesssearch.net, mail.date-search.net, mail.devils-search.net, mail.devilssearch.net, mail.export-search.net, mail.extasy-search.net, mail.extasysearch.net, mail.fake-search.net, mail.fakesearch.net, mail.fan-search.net, mail.fansearch.net, mail.great-search.net, mail.hero-search.net, mail.incsearch.net, mail.join-search.net, mail.joinsearch.net, mail.naked-search.net, mail.nakedsearch.net, mail.pilot-search.net, mail.pop-search.net, mail.search-abc.net, mail.search-basic.net, mail.search-black.net, mail.search-custom.net, mail.search-date.net, mail.search-help.net, mail.search-micro.net, mail.search-other.net, mail.search-real.net, mail.search-related.net, mail.search-room.net, mail.search-virtual.net, mail.searchaccess.net, mail.searchbasic.net, mail.searchcustom.net, mail.searchdrive.net, mail.searchfun.net, mail.searchmicro.net, mail.searchother.net, mail.searchroom.net, mail.shtorm-search.net, mail.shtormsearch.net, mail.standard-search.net, mail.standardsearch.net, mail.virtual-search.net, mail.visitsearch.net, mail.viva-search.net, mail.young-search.net, mail.youngsearch.net, mail.zero-search.net, ns1.date-search.net, ns1.devils-search.net, ns1.devilssearch.net, ns1.export-search.net, ns1.extasy-search.net, ns1.extasysearch.net, ns1.fake-search.net, ns1.fakesearch.net, ns1.fan-search.net, ns1.fansearch.net, ns1.great-search.net, ns1.incsearch.net, ns1.join-search.net, ns1.joinsearch.net, ns1.naked-search.net, ns1.nakedsearch.net, ns1.pilot-search.net, ns1.pop-search.net, ns1.search-abc.net, ns1.search-basic.net, ns1.search-black.net, ns1.search-custom.net, ns1.search-date.net, ns1.search-help.net, ns1.search-micro.net, ns1.search-other.net, ns1.search-real.net, ns1.search-related.net, ns1.search-room.net, ns1.search-virtual.net, ns1.searchaccess.net, ns1.searchbasic.net, ns1.searchcustom.net, ns1.searchdrive.net, ns1.searchfun.net, ns1.searchmicro.net, ns1.searchother.net, ns1.searchroom.net, ns1.shtorm-search.net, ns1.shtormsearch.net, ns1.standard-search.net, ns1.standardsearch.net, ns1.virtual-search.net, ns1.visitsearch.net, ns1.viva-search.net, ns1.young-search.net, ns1.youngsearch.net and ns1.zero-search.net 64.111.192.0/19 ISPrime 64.111.196.198/32 ns1.altastat.com 64.111.196.199/32 ns2.altastat.com 64.111.197.200/32 webalta.net 64.28.180.44/32 ns2.date-search.net, ns2.devils-search.net, ns2.devilssearch.net, ns2.export-search.net, ns2.extasy-search.net, ns2.extasysearch.net, ns2.fake-search.net, ns2.fakesearch.net, ns2.fan-search.net, ns2.fansearch.net, ns2.great-search.net, ns2.incsearch.net, ns2.join-search.net, ns2.joinsearch.net, ns2.naked-search.net, ns2.nakedsearch.net, ns2.pilot-search.net, ns2.pop-search.net, ns2.search-abc.net, ns2.search-basic.net, ns2.search-black.net, ns2.search-custom.net, ns2.search-date.net, ns2.search-help.net, ns2.search-micro.net, ns2.search-other.net, ns2.search-real.net, ns2.search-related.net, ns2.search-room.net, ns2.search-virtual.net, ns2.searchaccess.net, ns2.searchbasic.net, ns2.searchcustom.net, ns2.searchdrive.net, ns2.searchfun.net, ns2.searchmicro.net, ns2.searchother.net, ns2.searchroom.net, ns2.shtorm-search.net, ns2.shtormsearch.net, ns2.standard-search.net, ns2.standardsearch.net, ns2.virtual-search.net, ns2.visitsearch.net, ns2.viva-search.net, ns2.young-search.net, ns2.youngsearch.net and ns2.zero-search.net 64.28.180.50/32 mail.devils-find.net, mail.devilsfind.net, mail.estatefind.net, mail.ex-find.net, mail.extra-find.net, mail.free-find.net, mail.hit-find.net, mail.naked-find.net, mail.nakedfind.net, mail.real-find.net, mail.search-cruise.net, mail.search-devils.net, mail.search-digital.net, mail.search-estate.net, mail.search-ex.net, mail.search-export.net, mail.search-extasy.net, mail.search-extra.net, mail.search-fake.net, mail.search-fan.net, mail.search-great.net, mail.search-hit.net, mail.search-host.net, mail.search-join.net, mail.search-just.net, mail.search-mega.net, mail.search-naked.net, mail.search-part.net, mail.search-pilot.net, mail.search-pop.net, mail.search-sea.net, mail.search-shtorm.net, mail.search-standard.net, mail.search-total.net, mail.search-viva.net, mail.search-young.net, mail.search-your.net, mail.searchdevils.net, mail.searchdigital.net, mail.searchexport.net, mail.searchextasy.net, mail.searchextra.net, mail.searchfake.net, mail.searchfan.net, mail.searchgreat.net, mail.searchhero.net, mail.searchjoin.net, mail.searchjust.net, mail.searchmega.net, mail.searchpart.net, mail.searchpop.net, mail.searchsea.net, mail.searchshtorm.net, mail.searchstandard.net, mail.searchtotal.net, mail.searchviva.net, mail.searchyoung.net, mail.searchyour.net, mail.searchzero.net, mail.servicefind.net, mail.young-find.net, mail.youngfind.net, ns1.devils-find.net, ns1.devilsfind.net, ns1.estatefind.net, ns1.ex-find.net, ns1.extra-find.net, ns1.free-find.net, ns1.hit-find.net, ns1.naked-find.net, ns1.nakedfind.net, ns1.real-find.net, ns1.search-cruise.net, ns1.search-devils.net, ns1.search-digital.net, ns1.search-estate.net, ns1.search-ex.net, ns1.search-export.net, ns1.search-extasy.net, ns1.search-extra.net, ns1.search-fake.net, ns1.search-fan.net, ns1.search-great.net, ns1.search-hit.net, ns1.search-join.net, ns1.search-just.net, ns1.search-mega.net, ns1.search-naked.net, ns1.search-part.net, ns1.search-pilot.net, ns1.search-pop.net, ns1.search-sea.net, ns1.search-shtorm.net, ns1.search-standard.net, ns1.search-total.net, ns1.search-viva.net, ns1.search-young.net, ns1.search-your.net, ns1.searchdevils.net, ns1.searchdigital.net, ns1.searchexport.net, ns1.searchextasy.net, ns1.searchextra.net, ns1.searchfake.net, ns1.searchfan.net, ns1.searchgreat.net, ns1.searchhero.net, ns1.searchjoin.net, ns1.searchmega.net, ns1.searchpart.net, ns1.searchpop.net, ns1.searchsea.net, ns1.searchshtorm.net, ns1.searchstandard.net, ns1.searchtotal.net, ns1.searchviva.net, ns1.searchyoung.net, ns1.searchyour.net, ns1.searchzero.net, ns1.servicefind.net, ns1.young-find.net and ns1.youngfind.net 64.28.180.51/32 ns2.devils-find.net, ns2.devilsfind.net, ns2.estatefind.net, ns2.ex-find.net, ns2.extra-find.net, ns2.free-find.net, ns2.hit-find.net, ns2.naked-find.net, ns2.nakedfind.net, ns2.real-find.net, ns2.search-cruise.net, ns2.search-devils.net, ns2.search-digital.net, ns2.search-estate.net, ns2.search-ex.net, ns2.search-export.net, ns2.search-extasy.net, ns2.search-extra.net, ns2.search-fake.net, ns2.search-fan.net, ns2.search-great.net, ns2.search-hit.net, ns2.search-join.net, ns2.search-just.net, ns2.search-mega.net, ns2.search-naked.net, ns2.search-part.net, ns2.search-pilot.net, ns2.search-pop.net, ns2.search-sea.net, ns2.search-shtorm.net, ns2.search-standard.net, ns2.search-total.net, ns2.search-viva.net, ns2.search-young.net, ns2.search-your.net, ns2.searchdevils.net, ns2.searchdigital.net, ns2.searchexport.net, ns2.searchextasy.net, ns2.searchextra.net, ns2.searchfake.net, ns2.searchfan.net, ns2.searchgreat.net, ns2.searchhero.net, ns2.searchjoin.net, ns2.searchmega.net, ns2.searchpart.net, ns2.searchpop.net, ns2.searchsea.net, ns2.searchshtorm.net, ns2.searchstandard.net, ns2.searchtotal.net, ns2.searchviva.net, ns2.searchyoung.net, ns2.searchyour.net, ns2.searchzero.net, ns2.servicefind.net, ns2.young-find.net and ns2.youngfind.net 64.28.180.58/32 mail.extasy-find.net, mail.extasyfind.net, mail.fake-find.net, mail.fakefind.net, mail.find-devils.net, mail.find-ex.net, mail.find-extasy.net, mail.find-extra.net, mail.find-fake.net, mail.find-hero.net, mail.find-hit.net, mail.find-join.net, mail.find-just.net, mail.find-naked.net, mail.find-pop.net, mail.find-room.net, mail.find-shtorm.net, mail.find-standard.net, mail.find-teen.net, mail.find-viva.net, mail.find-young.net, mail.find-zero.net, mail.findcontrol.net, mail.finddevils.net, mail.findextasy.net, mail.findextra.net, mail.findfake.net, mail.findhero.net, mail.findjoin.net, mail.findjust.net, mail.findnaked.net, mail.findshtorm.net, mail.findviva.net, mail.findyoung.net, mail.findzero.net, mail.hero-find.net, mail.herofind.net, mail.join-find.net, mail.joinfind.net, mail.pop-find.net, mail.shtorm-find.net, mail.shtormfind.net, mail.standard-find.net, mail.standardfind.net, mail.teen-find.net, mail.viva-find.net, mail.vivafind.net, mail.zero-find.net, mail.zerofind.net, ns1.extasy-find.net, ns1.extasyfind.net, ns1.fake-find.net, ns1.fakefind.net, ns1.find-devils.net, ns1.find-ex.net, ns1.find-extasy.net, ns1.find-extra.net, ns1.find-fake.net, ns1.find-hero.net, ns1.find-hit.net, ns1.find-join.net, ns1.find-just.net, ns1.find-naked.net, ns1.find-pop.net, ns1.find-room.net, ns1.find-shtorm.net, ns1.find-standard.net, ns1.find-teen.net, ns1.find-viva.net, ns1.find-young.net, ns1.find-zero.net, ns1.findcontrol.net, ns1.findextasy.net, ns1.findextra.net, ns1.findfake.net, ns1.findhero.net, ns1.findjoin.net, ns1.findjust.net, ns1.findnaked.net, ns1.findshtorm.net, ns1.findviva.net, ns1.findyoung.net, ns1.findzero.net, ns1.hero-find.net, ns1.herofind.net, ns1.join-find.net, ns1.joinfind.net, ns1.pop-find.net, ns1.shtorm-find.net, ns1.shtormfind.net, ns1.standard-find.net, ns1.standardfind.net, ns1.viva-find.net, ns1.vivafind.net, ns1.zero-find.net, ns1.zerofind.net 64.28.180.59/32 ns2.extasy-find.net, ns2.extasyfind.net, ns2.fake-find.net, ns2.fakefind.net, ns2.find-devils.net, ns2.find-ex.net, ns2.find-extasy.net, ns2.find-extra.net, ns2.find-fake.net, ns2.find-hero.net, ns2.find-hit.net, ns2.find-join.net, ns2.find-just.net, ns2.find-naked.net, ns2.find-pop.net, ns2.find-room.net, ns2.find-shtorm.net, ns2.find-standard.net, ns2.find-teen.net, ns2.find-viva.net, ns2.find-young.net, ns2.find-zero.net, ns2.findcontrol.net, ns2.findextasy.net, ns2.findextra.net, ns2.findfake.net, ns2.findhero.net, ns2.findjoin.net, ns2.findjust.net, ns2.findnaked.net, ns2.findshtorm.net, ns2.findviva.net, ns2.findyoung.net, ns2.findzero.net, ns2.hero-find.net, ns2.herofind.net, ns2.join-find.net, ns2.joinfind.net, ns2.pop-find.net, ns2.shtorm-find.net, ns2.shtormfind.net, ns2.standard-find.net, ns2.standardfind.net, ns2.viva-find.net, ns2.vivafind.net, ns2.zero-find.net and ns2.zerofind.net 64.28.180.82/32 mail.accessporno.net, mail.browse-sexy.net, mail.browseporno.net, mail.businessporno.net, mail.center-sexy.net, mail.comp-sexy.net, mail.driveporno.net, mail.engine-porno.net, mail.fun-porno.net, mail.fun-sexy.net, mail.global-porno.net, mail.groupporno.net, mail.helpporno.net, mail.incporno.net, mail.keysexy.net, mail.line-porno.net, mail.lineporno.net, mail.linesexy.net, mail.lookporno.net, mail.network-porno.net, mail.networkporno.net, mail.part-sexy.net, mail.playhardmovie.net, mail.playporno.net, mail.playxxxvideo.net, mail.plus-porno.net, mail.plus-sexy.net, mail.popularporno.net, mail.pornxvideo.net, mail.review-porno.net, mail.reviewsexy.net, mail.room-sexy.net, mail.scan-porno.net, mail.seek-porno.net, mail.seekporno.net, mail.serviceporno.net, mail.sexy-drive.net, mail.sexy-host.net, mail.sexy-network.net, mail.sexyestate.net, mail.sexyexport.net, mail.teenxvideo.net, mail.the-sexy.net, mail.total-sexy.net, mail.try-sexy.net, mail.tryporno.net, mail.useporno.net, mail.visit-sexy.net, mail.xxxvideoadult.net ns1.browse-sexy.net, ns1.browseporno.net, ns1.businessporno.net, ns1.comp-sexy.net, ns1.driveporno.net, ns1.engine-porno.net, ns1.fun-porno.net, ns1.fun-sexy.net, ns1.global-porno.net, ns1.groupporno.net, ns1.helpporno.net, ns1.incporno.net, ns1.keysexy.net, ns1.lineporno.net, ns1.linesexy.net, ns1.lookporno.net, ns1.network-porno.net, ns1.networkporno.net, ns1.part-sexy.net, ns1.playhardmovie.net, ns1.playporno.net, ns1.playxxxvideo.net, ns1.plus-porno.net, ns1.plus-sexy.net, ns1.popularporno.net, ns1.pornxvideo.net, ns1.review-porno.net, ns1.reviewsexy.net, ns1.room-sexy.net, ns1.scan-porno.net, ns1.seekporno.net, ns1.serviceporno.net, ns1.sexy-host.net, ns1.sexy-network.net, ns1.sexyestate.net, ns1.sexyexport.net, ns1.teenxvideo.net, ns1.total-sexy.net, ns1.try-sexy.net, ns1.tryporno.net, ns1.useporno.net, ns1.visit-sexy.net and ns1.xxxvideoadult.net 64.28.180.83/32 ns2.browse-sexy.net, ns2.browseporno.net, ns2.businessporno.net, ns2.comp-sexy.net, ns2.driveporno.net, ns2.engine-porno.net, ns2.fun-porno.net, ns2.fun-sexy.net, ns2.global-porno.net, ns2.groupporno.net, ns2.helpporno.net, ns2.incporno.net, ns2.keysexy.net, ns2.lineporno.net, ns2.linesexy.net, ns2.lookporno.net, ns2.network-porno.net, ns2.networkporno.net, ns2.part-sexy.net, ns2.playhardmovie.net, ns2.playporno.net, ns2.playxxxvideo.net, ns2.plus-porno.net, ns2.plus-sexy.net, ns2.popularporno.net, ns2.pornxvideo.net, ns2.review-porno.net, ns2.reviewsexy.net, ns2.room-sexy.net, ns2.scan-porno.net, ns2.seekporno.net, ns2.serviceporno.net, ns2.sexy-host.net, ns2.sexy-network.net, ns2.sexyestate.net, ns2.sexyexport.net, ns2.teenxvideo.net, ns2.total-sexy.net, ns2.try-sexy.net, ns2.tryporno.net, ns2.useporno.net, ns2.visit-sexy.net and ns2.xxxvideoadult.net, 64.28.180.147/32 ns1.ready2party.net and ns2.kicktheboss.net 64.28.180.170/32 mail.abc-porno.net, mail.basicporno.net, mail.businessporn.net, mail.clickporno.net, mail.club-adult.net, mail.cool-porn.net, mail.cool-porno.net, mail.cruise-porno.net, mail.custom-porno.net, mail.customporno.net, mail.date-porno.net, mail.dateporno.net, mail.drive-porn.net, mail.export-porno.net, mail.exportporn.net, mail.extasy-porn.net, mail.fun-porn.net, mail.galleryalbum.net, mail.galleryclick.net, mail.galleryhere.net, mail.gallerypictures.net, mail.galleryteen.net, mail.goadult.net, mail.home-porn.net, mail.home-porno.net, mail.hostporno.net, mail.hotel-porno.net, mail.hotelporno.net, mail.joinporn.net, mail.just-porn.net, mail.key-porno.net, mail.keyporno.net, mail.marketporn.net, mail.micro-porno.net, mail.microporno.net, mail.name-porno.net, mail.network-porn.net, mail.other-porn.net, mail.part-porno.net, mail.pilot-porno.net, mail.porn-contact.net, mail.porn-drive.net, mail.porn-inc.net, mail.porn-real.net, mail.pornpleasure.net, mail.portal-porn.net, mail.portal-porno.net, mail.powerporno.net, mail.roomporno.net, mail.serviceporn.net, mail.super-porno.net, mail.uh-porn.net, mail.virtual-porn.net, ns1.basicporno.net, ns1.club-adult.net, ns1.cool-porn.net, ns1.cool-porno.net, ns1.cruise-porno.net, ns1.custom-porno.net, ns1.customporno.net, ns1.date-porno.net, ns1.dateporno.net, ns1.drive-porn.net, ns1.export-porno.net, ns1.extasy-porn.net, ns1.fun-porn.net, ns1.galleryalbum.net, ns1.galleryclick.net, ns1.galleryhere.net, ns1.gallerypictures.net, ns1.galleryteen.net, ns1.goadult.net, ns1.home-porn.net, ns1.home-porno.net, ns1.hostporno.net, ns1.hotel-porno.net, ns1.hotelporno.net, ns1.joinporn.net, ns1.just-porn.net, ns1.key-porno.net, ns1.keyporno.net, ns1.marketporn.net, ns1.micro-porno.net, ns1.microporno.net, ns1.name-porno.net, ns1.network-porn.net, ns1.part-porno.net, ns1.porn-contact.net, ns1.porn-drive.net, ns1.porn-inc.net, ns1.porn-real.net, ns1.portal-porn.net, ns1.portal-porno.net, ns1.powerporno.net, ns1.roomporno.net, ns1.serviceporn.net, ns1.super-porno.net, ns1.uh-porn.net and ns1.virtual-porn.net 64.28.180.171/32 ns2.basicporno.net, ns2.club-adult.net, ns2.cool-porn.net, ns2.cool-porno.net, ns2.cruise-porno.net, ns2.custom-porno.net, ns2.customporno.net, ns2.date-porno.net, ns2.dateporno.net, ns2.drive-porn.net, ns2.export-porno.net, ns2.extasy-porn.net, ns2.fun-porn.net, ns2.galleryalbum.net, ns2.galleryclick.net, ns2.galleryhere.net, ns2.gallerypictures.net, ns2.galleryteen.net, ns2.goadult.net, ns2.home-porn.net, ns2.home-porno.net, ns2.hostporno.net, ns2.hotel-porno.net, ns2.hotelporno.net, ns2.joinporn.net, ns2.just-porn.net, ns2.key-porno.net, ns2.keyporno.net, ns2.marketporn.net, ns2.micro-porno.net, ns2.microporno.net, ns2.name-porno.net, ns2.network-porn.net, ns2.part-porno.net, ns2.porn-contact.net, ns2.porn-drive.net, ns2.porn-inc.net, ns2.porn-real.net, ns2.portal-porn.net, ns2.portal-porno.net, ns2.powerporno.net, ns2.roomporno.net, ns2.serviceporn.net, ns2.super-porno.net, ns2.uh-porn.net and ns2.virtual-porn.net 64.28.180.219/32 ns1.the-sexy.net 64.28.180.220/32 ns1.center-sexy.net, ns2.sexy-drive.net and ns2.the-sexy.net 64.28.180.221/32 ns2.center-sexy.net 64.28.180.222/32 ns1.sexy-drive.net 64.28.180.234/32 club-adult.net, galleryalbum.net, galleryclick.net, galleryhere.net gallerypictures.net and ns1.galleryhere.net 64.28.180.235/32 galleryteen.net, goadult.net and ns2.galleryhere.net 64.28.180.236/32 ns1.galleryclick.net 64.28.180.237/32 ns1.galleryalbum.net, ns1.galleryteen.net and ns2.galleryclick.net 64.28.180.238/32 ns2.galleryalbum.net and ns2.galleryteen.net 64.28.181.53/32 ns1.accesssearch.net 64.28.181.54/32 ns2.accesssearch.net 64.28.181.55/32 accesssearch.net, date-search.net, export-search.net, fan-search.net, fansearch.net, great-search.net, incsearch.net, ns1.hero-search.net, pilot-search.net, virtual-search.net and visitsearch.net 64.28.181.56/32 devils-search.net, devilssearch.net, extasysearch.net, naked-search.net, nakedsearch.net, ns2.hero-search.net, standard-search.net, standardsearch.net, viva-search.net, young-search.net and youngsearch.net 64.28.181.57/32 extasy-search.net, fake-search.net, fakesearch.net, hero-search.net, join-search.net, joinsearch.net, pop-search.net, shtorm-search.net, shtormsearch.net and zero-search.net 64.28.181.58/32 search-basic.net, search-help.net, search-other.net, search-real.net, search-related.net, searchaccess.net, searchbasic.net, searchdrive.net, searchfun.net and searchother.net 64.28.181.59/32 search-abc.net, search-black.net, search-custom.net, search-date.net, search-micro.net, search-room.net, search-virtual.net, searchcustom.net, searchmicro.net and searchroom.net 64.28.181.66/32 ns1.search-host.net, search-digital.net, search-great.net, search-host.net, search-mega.net, search-part.net, search-pilot.net, searchdigital.net, searchgreat.net, searchmega.net and searchpart.net 64.28.181.67/32 ns2.search-host.net, search-cruise.net, search-export.net, search-fan.net, search-total.net, search-your.net, searchexport.net, searchfan.net, searchsea.net, searchtotal.net and searchyour.net 64.28.181.68/32 ns1.searchjust.net, search-devils.net, search-estate.net, search-ex.net, search-hit.net, search-just.net, search-sea.net, search-young.net, searchdevils.net, searchjust.net and searchyoung.net 64.28.181.69/32 ns2.searchjust.net, search-extasy.net, search-extra.net, search-naked.net, search-standard.net, search-viva.net, searchextasy.net, searchextra.net, searchjoin.net, searchstandard.net and searchviva.net 64.28.181.70/32 ns1.elitefast.com, search-fake.net, search-join.net, search-pop.net, search-shtorm.net, searchfake.net, A searchhero.net, searchpop.net, searchshtorm.net and searchzero.net 64.28.181.71/32 ns2.elitefast.com 64.28.181.72/32 ns1.find-standard.com 64.28.181.73/32 ns2.find-standard.com 64.28.181.74/32 free-find.net, real-find.net and servicefind.net 64.28.181.75/32 devils-find.net, devilsfind.net, estatefind.net, ex-find.net, extra-find.net, hit-find.net, naked-find.net, nakedfind.net, young-find.net and youngfind.net 64.28.181.82/32 extasy-find.net, extasyfind.net, join-find.net, joinfind.net, ns1.teen-find.net, pop-find.net, standard-find.net, standardfind.net, teen-find.net, viva-find.net and vivafind.net 64.28.181.83/32 fake-find.net, fakefind.net, find-room.net, findcontrol.net, hero-find.net, herofind.net, ns2.teen-find.net, shtorm-find.net, shtormfind.net, zero-find.net and zerofind.net 64.28.181.84/32 find-devils.net, find-ex.net, find-extra.net, find-hit.net, find-just.net, find-young.net, finddevils.net, findextra.net, findjust.net, findyoung.net and ns1.finddevils.net 64.28.181.85/32 find-extasy.net, find-join.net, find-naked.net, find-standard.net, find-teen.net, find-viva.net, findextasy.net, findjoin.net, findnaked.net, findviva.net and ns2.finddevils.net 64.28.181.86/32 find-fake.net, find-hero.net, find-pop.net, find-shtorm.net, find-zero.net, findfake.net, findhero.net, findshtorm.net and findzero.net 64.28.181.146/32 ns1.kicktheboss.net 64.28.181.171/32 ns17.esthost.com 64.28.181.194/32 litefinder.net, mail.litefinder.net, mail.spywaresoftstop.net, ns.gigamega.net, ns1.young-galls.com and spywaresoftstop.net 64.28.181.195/32 ns1.young-shock.com 64.28.181.204/32 ns21.esthost.com 64.28.181.210/32 ns1.incguide.net and ns2.guide-cruise.net 64.28.181.211/32 ns1.devils-guide.net and ns2.incguide.net 64.28.181.212/32 ns2.devils-guide.net 64.28.181.215/32 ns1.guidetime.net 64.28.181.216/32 ns2.guidetime.net 64.28.181.217/32 ns1.guide-cruise.net 64.28.181.218/32 mail.ringotguide.net, ns1.ringotguide.net and ringotguide.net 64.28.181.219/32 ns2.ringotguide.net 64.28.181.220/32 ns1.guide-shtorm.net 64.28.181.221/32 ns2.guide-shtorm.net 64.28.181.226/32 mail.abccodec.com, mail.access-ticket.net, mail.blackcodec.net, mail.citycodec.com, mail.cleancodec.com, mail.codec-club.com, mail.codecbest.com, mail.codecdemo.com, mail.codecmega.com, mail.codecnitro.com, mail.codecred.net, mail.codecspace.com, mail.delficodec.com, mail.democodec.com, mail.endcodec.com, mail.gamecodec.com, mail.gigacodec.net, mail.hardcodec.com, mail.herocodec.com, mail.hotcodec.net, mail.hqcodec.net, mail.ixcodec.com, mail.jetcodec.com, mail.lightcodec.net, mail.mooncodec.com, mail.mpegcodec.net, mail.mpgcodec.net, mail.nicecodec.com, mail.nicecodec.net, mail.playcodec.net, mail.popcodec.net, mail.prettycodec.com, mail.qazcodec.com, mail.redcodec.net, mail.siteticket.net, mail.stormcodec.net, mail.turbocodec.net, mail.uincodec.com, mail.ultracodec.com, mail.whitecodec.com, mail.xerocodec.com, mail.xerocodec.net, mail.xhcodec.com, mail.zerocodec.com, ns1.abccodec.com, ns1.access-ticket.net, ns1.blackcodec.net, ns1.cleancodec.com, ns1.codec-club.com, ns1.codecbest.com, ns1.codecdemo.com, ns1.codecmega.com, ns1.codecnitro.com, ns1.codecred.net, ns1.codecspace.com, ns1.delficodec.com, ns1.democodec.com, ns1.endcodec.com, ns1.gamecodec.com, ns1.gigacodec.net, ns1.hardcodec.com, ns1.herocodec.com, ns1.hotcodec.net, ns1.hqcodec.net, ns1.ixcodec.com, ns1.jetcodec.com, ns1.lightcodec.net, ns1.mooncodec.com, ns1.mpegcodec.net, ns1.mpgcodec.net, ns1.nicecodec.com, ns1.nicecodec.net, ns1.playcodec.net, ns1.prettycodec.com, ns1.redcodec.net, ns1.siteticket.net, ns1.stormcodec.net, ns1.turbocodec.net, ns1.uincodec.com, ns1.ultracodec.com, ns1.whitecodec.com, ns1.xerocodec.com, ns1.xerocodec.net, ns1.xhcodec.com and ns1.zerocodec.com 64.28.181.227/32 ns2.abccodec.com, ns2.access-ticket.net, ns2.blackcodec.net, ns2.cleancodec.com, ns2.codec-club.com, ns2.codecbest.com, ns2.codecdemo.com, ns2.codecmega.com, ns2.codecnitro.com, ns2.codecred.net, ns2.codecspace.com, ns2.codectime.com, ns2.delficodec.com, ns2.democodec.com, ns2.endcodec.com, ns2.gamecodec.com, ns2.gigacodec.net, ns2.hardcodec.com, ns2.herocodec.com, ns2.hotcodec.net, ns2.hqcodec.net, ns2.ixcodec.com, ns2.jetcodec.com, ns2.lightcodec.net, ns2.mooncodec.com, ns2.mpegcodec.net, ns2.mpgcodec.net, ns2.nicecodec.com, ns2.nicecodec.net, ns2.playcodec.net, ns2.prettycodec.com, ns2.redcodec.net, ns2.siteticket.net, ns2.stormcodec.net, ns2.turbocodec.net, ns2.uincodec.com, ns2.ultracodec.com, ns2.whitecodec.com, ns2.xerocodec.com, ns2.xerocodec.net, ns2.xhcodec.com and ns2.zerocodec.com 64.28.181.252/32 siteticket.net 64.28.182.8/32 mail.movie-gallery.net, movie-gallery.net, ns1.movie-gallery.net and www.movie-gallery.net 64.28.182.66/32 100-stress.com and super-vpn.com 64.28.182.68/32 super-vpn.com 64.28.182.106/32 ns1.bigfatvideo.com and ns1.newgods.net 64.28.182.107/32 ns2.bigfatvideo.com an ns2.newgods.net 64.28.182.122/32 itzashowtime.net 64.28.182.146/32 mail.my-google-search.net, mail.results-from-google.net and my-google-search.net 64.28.182.151/32 ns18.esthost.com 64.28.182.163/32 besttickets4u.net and mail.besttickets4u.net 64.28.182.195/32 mail.teenfaq.net 64.28.182.196/32 ns.teenlib.com, ns1.teenlib.com and teenfaq.net 64.28.183.44/32 ns1.passtosites.net 64.28.183.45/32 ns2.passtosites.net 64.28.183.99/32 spysheriff.com 64.28.183.162/32 ns2.microsoftout.com 64.28.184.11/32 ns1.kickdaboss.net and ns2.ready2party.net 64.28.184.90/32 neopharmacy.net, realauto.net and surftrust.net 64.28.184.147/32 ahoist.net and mail.ahoist.net 64.28.184.152/32 bestseatsreserved.net and mail.bestseatsreserved.net 64.28.184.153/32 mail.seatreservation.net and seatreservation.net 64.28.184.156/32 mail.tickethaven.net and tickethaven.net 64.28.184.162/32 hqcodec.net, ns1.hqcodec.net, ns1.qazcodec.com and qazcodec.com 64.28.184.163/32 mooncodec.com, ns1.citycodec.com, ns2.hqcodec.net and ns2.qazcodec.com 64.28.184.164/32 hardcodec.com, lightcodec.net, ns1.popcodec.net and ns2.citycodec.com 64.28.184.165/32 hotcodec.net, ns2.popcodec.net and turbocodec.net 64.28.184.166/32 prettycodec.com and redcodec.net 64.28.184.167/32 blackcodec.net, nicecodec.net and ns1.mpegcodec.net 64.28.184.168/32 democodec.com and ns1.zerocodec.com 64.28.184.169/32 gigacodec.net, nicecodec.com and ns1.great-ticket.net 64.28.184.170/32 endcodec.com and mpegcodec.net 64.28.184.171/32 cleancodec.com, mpgcodec.net, ns1.hotcodec.net and ns2.hardcodec.com 64.28.184.172/32 citycodec.com and ns1.ultracodec.com 64.28.184.173/32 stormcodec.net and ultracodec.com 64.28.184.174/32 herocodec.com and ns2.hotcodec.net 64.28.184.175/32 jetcodec.com, ns1.access-ticket.net and ns1.gigacodec.net 64.28.184.176/32 ns2.mpegcodec.net, uincodec.com and xerocodec.net 64.28.184.177/32 ixcodec.com, ns1.prettycodec.com and zerocodec.com 64.28.184.178/32 codec-club.com, gamecodec.com, ns1.xerocodec.net, ns2.access-ticket.net and ns2.zerocodec.com 64.28.184.179/32 codecplus.com, ns1.nicecodec.net, playcodec.net and whitecodec.com 64.28.184.180/32 codecname.com, ns2.xerocodec.net and xerocodec.com 64.28.184.181/32 abccodec.com, ns2.gigacodec.net and ns2.nicecodec.net 64.28.184.182/32 ns2.great-ticket.net, ns2.prettycodec.com and popcodec.net 64.28.184.183/32 delficodec.com 64.28.184.184/32 xhcodec.com 64.28.184.185/32 codecspace.com and ns1.mpgcodec.net 64.28.184.186/32 codecnitro.com 64.28.184.187/32 codecred.net and ns2.ultracodec.com 64.28.184.188/32 codecmega.com and ns2.mpgcodec.net 64.28.184.189/32 codecdemo.com 64.28.184.190/32 codecbest.com and ns1.hardcodec.com 64.28.184.194/32 access-ticket.net 64.28.184.195/32 fun-ticket.net 64.28.184.210/32 anfosc.com, brainpuke.com, eeducationamerica.com, matlockrecords.com, miketheile.com and photolane.net 64.28.184.211/32 bioproductsinc.com, celiasalazar.com, naturabella.com, seutuverkot.net, streetbeatrecords.com and wci-adma.net 64.28.184.212/32 943extremeradio.com, al-andalus2000.com, christianteam.net, dorkside.net, dunnsriverja.com, feathers-n-fur.com, open-publish.com, pac-aggressor.com and www.feathers-n-fur.com 64.28.184.213/32 1045thebuzz.com, e-access.net, jkproperties.com, pullingwater.com and rocketdynesys.com 64.28.184.214/32 4sumltd.com, atomicdawg.com, augustereymond.com, chisoft.com, crackedfork.com, cygnus-technologies.com, kenbaker.net, pataweb.net, shannonexplosives.com, teachcrochet.com, waterboat.com and zsigray.com 64.28.184.236/32 mail.onlinebuyviagra.net, mail.rapmusicblog.net, mail.trancemafia.net, ns1.php-courses.com, ns2.php-courses.com, onlinebuyviagra.net, rapmusicblog.net and trancemafia.net 64.28.184.250/32 ns2.vidgals.info 64.111.192.0/19 ISPrime 64.111.196.198/32 ns1.webalta.com 64.111.196.200/32 ns1.u2max.com 64.111.197.200/32 u2max.com, ns2.u2max.com, webalta-team.com and ns2.webalta.com 65.99.192.0/20 hostfresh.com (No Whois Entry) 65.254.48.0/20 AS3595, AS16626 GNAXNET 65.254.54.178/32 anemia-working-group.net, charadziej.org, lysandrasoft.com, ns.coolservecorp.net and shemalesru.net 66.29.15.141/32 adwarebazooka.com, adwarepunisher.com, hitvirus.com, razespyware.net, remedyantispy.com, spycut.com and spyofficer.com 66.45.254.244/32 virushealer.com 66.45.254.245/32 virushealer.com 66.232.96.0/19 coolservecorp.net 66.244.254.0/24 AS33510 SETUPAHOST 66.244.254.8/32 computercleaner.com, ns1.setupahost.net, ns1.winantivirus.com, ns1.yyz1.setupahost.net, ns2.versatasoftware.com ns8.nscache.net 66.244.254.9/32 ns1.versatasoftware.com, ns2.setupahost.net, ns2.winantivirus.com, ns2.yyz1.setupahost.net ns9.nscache.net 66.244.254.18/32 mail.errorsafe.com, mail.gomyron.com, mail.versatasoftware.com, mx01.yyz1.setupahost.net mx1.sexprofit.com and mx1.softwareprofit.com 66.244.254.19/32 mail.errorsafe.com, mail.versatasoftware.com, mx02.yyz1.setupahost.net, mx2.sexprofit.com mx2.softwareprofit.com 66.244.254.20/32 mail01.yyz1.setupahost.net 66.244.254.34/32 mail.emailmedia.com 66.244.254.46/32 multimediafixer.com, winfirewall.com, winnanny.com and winsoftware.com 66.244.254.63/32 air-deals.net, amaena.com, onestoponlineshop.net, rr-grp1.yyz1.cl1.setupahost.net setupahost.net, versatasoftware.com, winantivirus.com and yyz1.cl1.setupahost.net 66.244.254.64/32 air-deals.net, onestoponlineshop.net, rr-grp1.yyz1.cl1.setupahost.net, setupahost.net versatasoftware.com, winantivirus.com, yyz1.cl1.setupahost.net 66.244.254.177/32 innovativemarketing.com, mp3asap.net and spamprotector.com 66.244.254.180/32 softwareprofit.com 66.244.254.200/32 wolfhome.com 66.252.0.0/19 GIGESERVERS 66.252.1.255/32 ns2.afraid.org 67.18.179.15/32 mail.g3nius.net and ns4.afraid.org 67.19.24.168/32 coolservecorp.net 67.19.24.169/32 coolservecorp.net 67.19.24.170/32 ns2.coolservecorp.net 67.19.24.171/32 coolservecorp.net 67.19.24.172/32 coolservecorp.net 67.19.24.173/32 coolservecorp.net 67.19.24.174/32 coolservecorp.net 67.19.24.175/32 coolservecorp.net 67.19.72.205/32 afraid.org, mail.strangled.net, microsoft.web.id and mail.zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz.info 67.19.72.206/32 ns1.afraid.org 67.137.217.219/32 russianmafia.ru 69.20.68.36/32 holeporn.com, ns1.dns-eye.com, ns.icelord.net and ns1.truerecords.biz 69.20.117.228/32 innovagest2000.com 69.22.162.0/23 AS27595 Intercage 69.22.168.0/21 AS27595 Intercage 69.22.184.0/22 AS27595 Intercage 69.31.40.0/21 Pilosoft 69.31.64.0/20 AS27595 Intercage 69.31.128.2/32 ns2.advancedhosters.com 69.39.224.27/32 a.ns.joker.com 69.42.216.122/32 botnet C&C 69.50.160.0/19 AS27595 Intercage 69.50.160.60/32 eprotectpage.com 69.50.160.61/32 thesafebar.com and ns1.sysupdatecenter.com 69.50.160.62/32 ns2.sysupdatecenter.com 69.50.166.196/32 spywareno.com 69.50.168.98/32 ns1.spysheriff.com 69.50.168.99/32 ns1.spytrooper.com 69.50.168.102/32 spywareno.com 69.50.170.82/32 spytrooper.com 69.50.170.174/32 ns1.dnsbakler.com 69.50.176.227/32 mail.cernel.net 69.50.176.228/32 ns1.cernel.net 69.50.176.229/32 ns2.cernel.net 69.50.188.3/32 spywareremove.biz, parked1.dnsbakler.com and parked2.dnsbakler.com 69.50.188.4/32 spyhazard.com and spyiblock.com 72.10.164.69/32 dns1.gtcomm.net 72.20.14.3/32 afraid.of.the.fbi.because.prison.will.break.in.my.bitch-ass.com 72.20.25.134/32 ns3.afraid.org 72.20.110.8/32 spyhealer.com 72.232.197.83/32 Anserin/Torpig/Sinowal hosts 74.54.31.196/32 charter97.org? 77.91.224.0/21 AS41947 WEBALTA 77.91.224.2/32 webalta.cz, webalta.fr and webalta.nl 77.91.224.22/32 webalta.by, webalta.com, webalta.ru and webalta.ua 77.91.224.252/32 relay.seo-one.ru 77.91.225.1/32 my-gw.webalta.ru 77.91.225.2/32 my.webalta.ru 77.91.225.3/32 mail.webalta.by, mail.webalta.ru, mx.webalta.by, mx.webalta.cz mx.webalta.fr, mx.webalta.nl, mx.webalta.ru and mx.webalta.ua 77.91.225.4/32 smtp.webalta.ru 77.91.225.5/32 parser.webalta.ru 77.91.225.6/32 pop3.webalta.ru 77.91.225.7/32 my.test.webalta.ru 77.91.225.8/32 mx.test.webalta.ru 77.91.225.9/32 smtp.test.webalta.ru 77.91.225.14/32 mail.wahome.ru 77.91.225.18/32 div.wahome.ru 77.91.225.20/32 count1.altastat.com 77.91.225.30/32 garret.ru and ns.garret.ru 77.91.226.5/32 ns1.webalta.net and ns2.webalta.net 77.91.226.6/32 hqmeds.net and pharmacy-for-u.net 77.91.226.7/32 rx-promotion.com 77.91.227.178/32 server.rnb-music.ru 77.91.227.202/32 lazhi.net, mail.lazhi.net, mail.vip-foto.net and vip-foto.net 77.91.227.203/32 active-video.net 77.91.227.208/32 fuck-hideout.com and fuckingfree.net 77.91.227.209/32 homesexxx.net 77.91.227.211/32 hard-teens.net 77.91.227.246/32 alcoworld.org 77.91.227.247/32 ns2.oyk.ru 77.91.227.253/32 joy-tours.ru 77.91.228.7/32 bee.fm, mail.bee.fm, ns1.beefm.com and ns2.beefm.com 77.91.228.44/32 icojoy.com, mail.oyk.ru, ns1.oyk.ru and oyk.ru 77.91.228.51/32 mp3sugar-news.com 77.91.228.53/32 secure.mp3sugar.com 77.91.228.106/32 e-blya.com, mx01.e-blya.com, ns0.e-blya.com and ns1.e-blya.com 77.91.228.110/32 bellax.net, mail.bellax.net and w00d.org 77.91.228.111/32 realnoebablo.ru 77.91.228.121/32 agava-dc3.ru 77.91.228.122/32 c3750-2.agava.net 77.91.228.125/32 global-hosting.ru 77.91.228.126/32 gi0-24.wb-rt02.wb.global-hosting.ru 77.91.228.130/32 freemailserv.net, gligmail.net, mail.freemailserv.net, mail.gligmail.net, mail.rusmailz.net, mail.rusreach.net, mail.yahex.net, rusmailz.net, rusreach.net and yahex.net 77.91.228.131/32 mail.mixy.ru 77.91.228.139/32 ns1.zml.com, www.zml.com and zml.com 77.91.228.140/32 ns1.coplace.com 77.91.228.141/32 coplace.com and ns2.coplace.com 77.91.228.142/32 kinovip.com and ns1.kinovip.com 77.91.228.155/32 n1.noside.ru 77.91.228.156/32 w1.noside.ru 77.91.228.180/32 ns1.thenetworkcom.com, ns1.virusprotectionproonline.com, ns2.thenetworkcom.com, ns2.virusprotectionproonline.com, thenetworkcom.com and virusprotectionproonline.com 77.91.229.103/32 malware-scan.com, ns1.malware-scan.com and ns2.malware-scan.com 77.91.229.106/32 malwarealarms.com, scanner.malwarealarms.com and xscanner.malwarealarms.com 77.91.229.107/32 mail.malware-scanner.com, malware-scanner.com and ns1.malware-scanner.com 80.70.224.0/20 AS20807 CREDOLINK 80.70.239.253/32 cat4500-239-253.mns.ru 81.29.241.9/32 mail.mailzervis.net 81.29.249.38/32 thecleanersystem.com 81.94.16.0/20 AS20807 CREDOLINK 81.95.128.0/19 rbnnetwork.com 81.95.144.0/20 rbnnetwork.com 81.95.144.3/32 rbnnetwork.com 81.95.144.182/32 rbnnetwork.com 81.95.145.186/32 ns3.antivermins.com, dragracers.biz and ns2.wildgadgets.biz 81.95.146.250/32 botnet C&C: proxima.ircgalaxy.pl 81.95.147.182/32 rbnnetwork.com 81.95.147.202/31 rbnnetwork.com 81.95.148.18/32 rbnnetwork.com 81.95.148.130/31 rbnnetwork.com 81.95.148.132/31 rbnnetwork.com 81.95.153.243/32 rbnnetwork.com 81.95.149.27/32 rbnnetwork.com 81.95.149.110/31 rbnnetwork.com 81.95.149.171/32 rbnnetwork.com 81.95.149.178/32 rbnnetwork.com 81.95.149.181/32 rbnnetwork.com 81.95.154.41/32 bravesentry.com (A record at ns2.bravesentry.com) 81.95.156.0/22 rbnnetwork.com 82.114.64.251/32 botnet C&C 82.146.56.140/32 bsdhacker.net 83.222.0.0/19 AS25532 MASTERHOST 83.222.9.9/32 icelord.net 84.45.24.53/32 c4l.co.uk (dropped RBN traffic on 10-17-2007) 84.45.47.130/32 c4l.co.uk (dropped RBN traffic on 10-17-2007) 84.45.90.141/32 c4l.co.uk (dropped RBN traffic on 10-17-2007) 85.17.173.219/32 104teacher.net, 17teens.net, 18xyz.net, 1stchoiceproducts.net, 2beecollaboration.net, 2nice4you.net, 317am.net, 3arabstar.net, 3dpartners.net, 5000won.net, 69sexkorea.net, 88-poker.net, 88224646ba.net, abbottmp.net, abcdkids.net, aboutdrugtests.net, accesshomeimprovement.net, accessorywholesale.net, accountnownow.net, accurateaccountingsvcs.net, acepestcontrol.net, acmaonline.net, acmefurniture.net, acrepox.net, adanakralfm.net, adanceamerica.net, adhm.net, adoptavet.net, adult-find.net, aflec.net, africandiamonds.net, agriculturexnet.net, agrocareindia.net, ahlyplayers.net, airdceccan.net, akkapoj.net, alatfal.net, albuquerque-homes.net, alejazeerasport.net, alikarakus.net, alimaleki.net, alkohol-test.net, allwaysmoving.net, alrbe3.net, alsharptonradio.net, altavistasearchengine.net, amateurhoney.com, amazing-formula.net, americaauto.net, americanpheromones.net, americareality.net, americawestvacations.net, amparanoia.net, anak-postoina.net, anduspropertiesadv.net, andymasa.net, andywinkler.net, anifilms.net, apparel-usa.net, apswreis.net, arabiay.net, arcelectronics.net, asapwholesale.net, ashleysfurniture.net, asiablowjob.net, aswat-islam.net, at-service.net, atlasholding.net, atm-mortgage.net, atmincome.net, atomicans.net, auctioncashflow.net, audiotreasure.net, av204.net, aynaning.net, b3tech.net, baamthai.net, badrbank.net, bailbondsinc.net, bargain-price-clocks.net, barganhunter.net, bassareggiana.net, bavuong.net, bbwow.net, beadsgallery.net, bebridge.net, beesonearth.net, belldsouth.net, bellsoufh.net, bellsoutjh.net, benchmarkbussiness.net, beninoise.net, bernardoelias.net, best-digital-camera.net, best-visionpr.net, bestfonerates.net, bestpresso.net, betoddessa.net, beydoun.net, bileportaali.net, bingjiu.net, bini99.net, biobuild.net, blackpussyvideo.net, blackteenchat.net, bladventuretravel.net, bleebostarz.net, blitz-date.net, bmw-verkopen.net, bockra.net, bodanaun.net, bogeberg.net, bokrh.net, bokva.net, brainbridge.net, branchcircuits.net, brightirisvitamins.net, browardpwa.net, brunswickbowling.net, bsllsouth.net, btdy.net, buildwithwood.net, cafdsfddfsfddsf.net, calabrone.net, californiamales.net, callevip.net, capital-cash.net, captal.net, carcatalog.net, carpenterclock.net, cars4youonline.net, cartunista.net, cas-int.net, cashflowtoday.net, cashrules.net, cc-credit.net, cellandsell.net, censorious.net, ceridiashare.net, cetigroup.net, cetinleras.net, cevapver.net, ceylangozlum.net, channelsurfers.net, chaseauthentics.net, cheap-deit-pills.net, checkeredflagracing.net, checkmeessenger.net, checkmessenfer.net, checkmsnmessenger.net, chinese-tatooo.net, chocolatecitynola.net, christianalanding.net, christianchavez.net, cializ1.net, cibec.net, circlelinesafaris.net, cityhunters.net, citymeet.net, cityofmacongeorgia.net, ciyofpasadena.net, clan-tsor.net, classiquecoach.net, clicc3.net, clinicas-dentales.net, clk3.net, club588.net, cmph.net, codacontrol.net, coksuper.net, collaborationtechnologies.net, collectcartridges4cash.net, collectcellphones4cash.net, collectcellphonesforcash.net, comfortable-liar.net, comsumerreports.net, congableat.net, conquesttitle.net, consultplan.net, consupan.net, coronasingles.net, corridorchurch.net, cosex21.net, craiglisterotic.net, creditcore.net, crossroadsentertainment.net, cruisemate.net, cs-04-0831.net, ct-design.net, cukrarstvi.net, customdreams.net, customizedfurniture.net, cyprus-escorts.net, dajinma.net, dataentryprogram.net, dates-n-mates.net, dealer-network.net, debtconsolidationloanblog.net, debtwizard.net, decks4u.net, deiasaddiction.net, delacruzproperties.net, delihane.net, dellhomepage.net, delpass.net, demunter.net, depdeli.net, derrumbapanama.net, dervermieter.net, designaday.net, designed2sellrealty.net, desktopgraphy.net, dewaltservices.net, diamana.net, dishnetworkinternet.net, disneychanell.net, diversified-electronics.net, divxizle.net, dizi-izle.net, diziizlesene.net, dl3yoyo.net, dlpreet.net, dmr-e85hs.net, dnsdesigns.net, dog-ear.net, dongyihotel.net, donnapearson.net, douay-online.net, doubleaapointcollection.net, downloadfulltiltpoker.net, dragon.6shells.net, dragonball-af.net, drukair.net, dsddd.net, duocminhmobile.net, duplirex.net, dynamic4financial.net, dynamiclifecoaching.net, e-articles.net, e-konsulosluk.net, e-mesinger.net, eagleviewmarketing.net, easymorning.net, ebayblogging.net, ebonymovs.net, ebuycity.net, ecarg.net, eclipse-studios.net, edeals4you.net, eduprofits.net, edyoungministries.net, eksay.net, eleanormurphy.net, electricbikekitscalifornia.net, elektro-projektiranje.net, eliandrews.com, epruxy.net, er-dogan.net, eroticliks.net, erotik-date.net, erozh.net, espalnds.net, estelle-model-online.net, estrenoswix.net, etelat.net, euphoriapheromone.net, europearena.net, everalpine.com, evilpink.net, ewhayun.net, ewid0.net, exepedia.net, extremenetdeals.com, extremenetdeals.extremenetdeals.com, fad8.net, farstreet.net, fast617.net, fastunblock.net, fedde.net, felicianolaw.net, firewallhole.net, fishak.net, fivestarvacation.net, floridaproperty4u.net, fltolog.net, flwm.net, flyrockets.net, fmov.net, fordemployees.net, fordpartsdirect.net, foreclourenet.net, formofgovernment.net, fortunaservices.net, fossilinfo.net, fracturedmusic.net, free-powerpoint-templates.net, freeslimslots.net, frei-fick.net, friendlycc.net, fromtheheartministries.net, fromtop2bottom.net, fulfilleddreams.net, fundamentalrecordings.net, furnitureraw.net, gag-box.net, gatorconst.net, gautos.net, gemair.net, gemeindearbeit.net, gemtv.net, geodales.net, gerila-onlinel.net, geriuf.net, getawayfever.net, ghhg.net, gicl.net, giftsbyjeff.net, giftsncrafts.net, globalstratagems.com, glycoinformation.net, goldcanyonmall.net, goodcleanfuninc.net, gospel-invitation.net, graduationbanners.net, granits.net, granttechnology.net, graphic-design-software.net, greatwesternlandscapes.net, gregorystar.net, grenobleanticpe.net, grtp.net, grupocorporativo.net, gsmoonengine.net, guardiangps.net, guialimeira.net, guild-d.net, guild-resurrection.net, gulfmaster.net, gwimail.net, gzalen.net, habbolehti.net, haila.net, hainrtvu.net, hardware-heaven.net, hartmanbooks.net, hayesshoes.net, hbien.net, hdproxy.net, healinghandsmassagetherapy.net, healthequipments.net, heavy-equipment-resource.net, heraklion-hotels-reservation.net, hi5webservices.com, hilltophealth.net, hokesoft.net, hollyandassociates.net, holtgrp.net, home-loan-connection.net, hometheateraccessories.net, hometownrealtygroup.net, homoboys.net, hopkinsvitamin.net, hotelcareersolutions.net, hottitties.net, houstonswppp.net, hpaudio.net, hqanmail.net, hud2powerauction.net, hydrocodonepharmacy.net, hyla-hyip.net, i-4-me.net, i-warranty.net, icebarter.net, icsmanagment.net, icwatert.net, ihtiras.net, ike970.net, imagesbylee.net, importacionesenzo.net, improvemygrades.net, income-explosion.net, indianangel.net, innovativemachine.net, inshokusuru.net, interacialsigles.net, investorgator.net, irasavings.net, iridium-electrical.net, islaacademy.net, italiadoc.net, itasystems.net, jacksonrealtyinc.net, jangleproxy.net, jazz-computers.net, jc66.net, je-recrute.net, jeansjewelry.net, jecommunique.net, jesus4today.net, jeuxgratuite.net, jewishlawyersguild.net, jknetworkgroup.net, johnhong.net, joiprom.net, joncurrie.net, jovin.net, jpkitchens.net, juliasvitastore.net, jzsellsaz.net, kalottlyrical.net, karriereinfo.net, kassalaonline.net, kaveira.net, kellygrant.net, kelmartool.net, kimcafe79travel.net, koang.net, kobe-bryant.net, kodclan.net, korat1.net, kosodate-seikatu.net, krinks.net, kvot.net, lacloseriedefronsac.net, large-breast.net, laser-com.net, lasik-center-directory.net, lasvegashomelistings.net, lasvegasrealestateinvestments.net, latribunedurottlof.net, ldsmingles.net, lebr.net, legaltown.net, lepointdafle.net, lhc168.net, libery-and-travel.net, lifetime-wellness.net, light-form.net, lighthousebaskoptonline.net, living-on-water.net, loannotary.net, loghomerealty.net, logrando.net, looking4info.net, looplists.net, loszand.net, louharrison.net, louievuitton.net, louisianapurchases.net, lovemyjob.net, lovezdete.net, lucier4chatham.net, luckyimportexport.net, lust-search.net, lyonbakery.net, magicisintheair.net, magyarfalvak.net, mail.zerg.wrebnext.com, mail2.xmilo.com, mailgenaker.net, mainan.net, maineidx.net, majestictransport.net, maku92.net, malaysia-kita.net, mamidade.net, manadetoxsystem.net, mangosteenleads247.net, many-rooms.net, marilynbrill.net, markiepost.net, marquettehomes.net, marriotscareers.net, massforeclosure.net, master-fitness.net, matches4u.net, mathisforeclosures.net, mazzehiroony.net, mceapps.net, mcenterprise.net, md-factory.net, mdhomesource.net, mdlrairlines.net, medi-carsafety.net, media-connect.net, mediation-eu.net, medicarerxvolunteer.net, medication4less.net, megawebproxy.net, melbournecyc.net, memberawards.net, memphiscondosforsale.net, menadi.net, mendrelogictesis.net, metrossexual.net, micapeak.net, microsysintl.net, midtownspa.net, mikeysmerchandise.net, milky-k.net, milsurf.net, minnesotaweddingdirectory.net, mirag.net, mixtones.net, mobilea2p.net, modenschool.net, momboy.net, monde-multimedia.net, moneyqueen.net, moneywins.net, moredomainmagic.net, moveisnova.net, mp3-ke-stazeni.net, mudedevida.net, mundobags.net, music-and-music.net, musicmatcher.net, mybusinessfriends.net, mymarketingcompany.net, mymothershouse.net, myultimatemail.net, mzpoprad.net, naccsussex.net, naill.net, naturalacnetreatments.net, natureboymusic.net, nba-fight.net, nefiron.net, nepaldirectory.net, nerax.net, net-crafter.net, net5scape.net, netimail.net, netscepe.net, neuromancers.net, newfriendsswingers.net, newjerseyweddingdirectory.net, nightvisiondepot.net, nobetterdeal.net, nokiazone.net, northsoundchristian.net, novindi.net, ns1.iconinteractive.net, ns2.iconinteractive.net, nudely.net, nutranch.net, offcampuslunch.net, oknoserwis.net, oktax.net, olivialeigh.net, omadamtv.net, onlinecasinosecrets.net, onlinesurfaces.net, onnurimbs.net, optechnology.net, optionsxpress.net, orion12.net, outreachamerica.net, over18host.net, pacbetl.net, pachinko-slot.net, pacorapanama.net, pajokintex.net, pandey-hoyle.net, paragoulddailypress.net, parosvilla.net, patagoniapretty.net, patoh.net, paulmartingroup.net, paxline.net, payment-protection.net, pcfreeks.com, pcpokerplayer.net, pearl-world.net, peosolutions.net, perfecttools.net, perfumemania.net, permatec.net, ph0rce22.net, pharmadepuqu.net, photofamily.net, phytoexchange.net, pickupcash.net, pilskog.net, pinoy-designs.net, pisseuses.net, pittsburghfuneral.net, pkillen.net, planoinn.net, plasticequipment.net, plobras.net, pncindia.net, pnstocking.net, poderdelabachata.net, pokemoncentral.net, pokemonmillenium.net, polesinetlc.net, polylinkplastics.net, portofnavarre.net, postnetburney.net, powerplayenergy.net, privateprox.net, professionalprints.net, progreenlawn.net, projetorenascer.net, promodental.net, propromo.net, proxy111.net, proxzilla.net, psc-corp.net, pscomm.net, psy-course-asu-alt.net, purple-star.net, qambling.net, qolop.net, qpin.net, quality-blinds.net, qualitytermpaper.net, rafal-szymanski.net, rainbowdisplays.net, rankun.net, ratbatspidernightmare.net, ratingtreadmillreview.net, realestateeducationcenter.net, recontres.net, recordbowl.net, redheartyarn.net, redsoxforum.net, regionbanks.net, remaxhomeandland.net, renocanada.net, reschina.net, resortac.net, resumenet.net, rexcellentvitamins.net, rhodeislandweddingdirectory.net, rimsamur.net, ripontrepreneurship.net, risb.net, riverglenn.net, robotforge.net, rocknf.net, roundtableonline.net, rugsofdistinction.net, runescapekeep.net, runswithscissors.net, rusacap.net, s333.net, sat-gps-locate.net, satellite-tech.net, sattechnology.net, scarletsails.net, schooldade.net, schoollibraryservices.net, scontionline.net, scootweb.net, scrapbooking-supplies.net, scrippsranchgirlscouts.net, search-engine-of-search-engines.net, secret-moon.net, seharnet.net, senorsmith.net, seoffice.net, serfnurd.net, serve-secure.net, sesso-matto.net, sexyte.net, shadow-factor.net, shamankingdvd.net, sharperdesigngroup.net, shopparades.net, showtvdizi.net, siblog.net, signonsigns.net, signsofthesavior.net, signswide.net, simetritanitim.net, sinceritydreams.net, sirius-group.net, sisyphusstar.net, siteonsite.net, sixieme-sens-voyance.net, slimritchie.net, smartyard.net, smoothirc.net, snselectronics.net, softpublishing.net, sogostoza.net, solidsecondincome.net, sonomacountyjobs.net, soundsonwheels.net, sp-500.net, sp-6.net, spider-boy.net, spotlightpress.net, sprezment.net, squarevoid.net, ssieng.net, ssl-fourth.net, stadsvertentie.net, stars-team.net, starsvacations.net, starwarszone.net, stockinvestingtips.net, stoianov.net, stopstart.net, strata-realestate.net, strictlycomputers.net, strictlygolf.net, super-nebenverdienst.net, superlifeliving.net, support-earthlink.net, supremeroofinginc.net, surefitwarehouse.net, surfsidetexas.net, suzukidealer.net, swissgorilla.net, swwholesale.net, sylle.net, t-s-t.net, tac-tik.net, taghajijt.net, taghauer.net, tamildrive.net, tao999.net, tarjetadirecta.net, task-media.net, teachthefacts.net, techhelperonthe.net, teiabrasil.net, tekrat.net, terbiyesisz.net, testchambers.net, testosterona.net, texastransport.net, textporn.net, thailandasmart.net, thaire.net, the-fencing-pages.net, thebookwarehouse.net, thechocolateguy.net, thediscountspot.net, theeleganttouch.net, thefragrance.net, thelogon.net, theonestopvitamin.net, thepanolian.net, theproductivelawyer.net, theroadhome.net, thewaterfalls.net, thomasfurniture.net, thwf.net, tidaltimes.net, tiltonheights.net, tirepressuregauge.net, tjblog.net, toddhall.net, tooth-whitenings.net, top-musica.net, tourmenu.net, townmart.net, traveltop.net, treadmillstxdallas.net, triplestrucking.net, tszyu.net, tu6666.net, tubola.net, turkish-carpets.net, tvbn.net, twistedpaintball.net, txdallasapartment.net, tymons.net, uae911.net, ukcorporatetelecom.net, ukebay.net, ultimate-chat.net, unbrokenchain.net, uni-jobboerse.net, unioncristalera.net, unisourcecap.net, valeycareers.net, vallesivincenzo.net, vanbaars.net, veerizon.net, velibor.net, velosolution.net, verason.net, vereizon.net, vergeblanca.net, verisononline.net, veriznon.net, verizson.net, verycoldweather.net, vewrizon.net, victoryfunding.net, videosix.net, viedamour.net, vincechau.net, vintageatlighthousepoint.net, vioxx-class-action-lawsuit.net, vioxxlawinfo.net, virginiacampbell.net, virtualbluelot.net, virzon.net, vision-travel.net, vitalwag.net, vitinfo.net, vocalteacher.net, vzwam.net, w-services.net, waarwaswout.net, wademall.net, warrencountyauditor.net, waythrough.net, wealthy-4life.net, webendirect.net, webrevenda.net, websiteforyourfamily.net, websiteone.net, weicherrealtor.net, wellek.net, westeraustralia.net, westernparts.net, wgsdepts.net, wheelsnut.net, white-gates.net, whitefish-realestate.net, whosyourdata.net, wigretailers.net, win6688.net, withfaith.net, wizardofrealestate.net, wonderful-electric.net, wrestlingr.net, www123fashion.net, wwwamateurcafe.net, wwwbanladesh.net, wwwtwelvefifteen.net, xtrsport.net, xxxarb.net, yatl.net, yourloanhelp.net, zajci.net, zeiljachtentekoop.net, zipbroadband.net, zirzamin.net, ziuziu.com, zoewell.net, 85.133.4.138/32 mnet.net.uk 85.249.23.0/24 valuedot.net 85.255.112.0/21 AS27595 Intercage 85.255.114.202/32 malwarewipe.com and ns3.wildgadgets.biz 85.255.114.206/32 85.255.114.206-xbox.dedi.inhoster.com 85.255.115.178/32 weeproject.com and ns1.weeproject.com 85.255.115.180/32 ns2.weeproject.com 85.255.116.0/24 Inhoster 85.255.117.60/32 ns2.spysheriff.com and ns2.spytrooper.com 85.255.117.62/32 ns2.bravesentry.com and ns4.bravesentry.com 85.255.117.202/32 ns3.sigmacode.biz 85.255.117.205/32 ns1.sigmacode.biz 85.255.118.0/24 AS27595 Intercage 85.255.118.58/32 spyheal.com 85.255.118.146/32 virusrescue.com 85.255.118.162/32 antispyzone.com 85.255.118.179/32 ns1.tsmfirm.com 85.255.118.180/32 ns2.tsmfirm.com 85.255.119.66/32 antivermins.com, antiverminser.net, antiverminspro.net and ns1.antivermins.com 85.255.119.67/32 ns2.antivermins.com 85.255.119.125/32 spydawn.com 85.255.119.126/32 mail.virusray.com 85.255.119.251/32 antivirusgolden.com 85.255.119.254/32 ns3.dragracers.biz 85.255.120.50/32 spylocked.com 85.255.120.106/32 ns1.somcompany.com 85.255.120.107/32 ns2.somcompany.com 85.255.121.0/24 Inhoster (bogus antispyware and antivirus) 85.255.121.37/32 botnet C&C 85.255.121.46/32 aeraf.info 85.255.121.66/32 spyhazard.com 85.255.121.70/32 antivirgear.com 85.255.121.76/32 mail.videomoviesonline.com, ns1.778host.net and ns2.778host.net 85.255.121.77/32 www.pissing-skills-avi.info 85.255.121.116/32 antispywareupdates.net 85.255.121.146/32 ns1.powermpeg.com and ns2.powermpeg.com 85.255.121.147/32 ns1.codecvids.com and ns2.codecvids.com 87.117.192.0/18 AS29131 RAPIDSWITCH 87.117.252.11/32 trustedprotection.com 87.117.255.20/32 ns1.trustedprotection.com and mail.trustedprotection.com 87.117.255.30/32 ns2.trustedprotection.com 88.201.208.0/20 AS35511 iWAN-Net 88.255.90.0/24 ttnet.net.tr 88.255.94.210/32 TTnet Autonomous System Turk Telekom A S Aydinlikevler ANKARA 89.149.186.77/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 89.149.186.81/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 89.149.186.89/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 89.208.19.194/32 ns3.webalta.com 91.192.106.0/23 Cronos 91.192.106.1/32 ns1.folkmahem.biz, ns2.sigmacode.biz and ns1.wildgadgets.biz 91.192.106.2/32 altercontrol.biz, folkmahem.biz, sigmacode.biz, virusprotectpro.biz and wildgadgets.biz 91.192.106.6/32 virusburst.com 91.193.40.0/22 AS42662 ISLNet-AS 91.193.56.0/22 AS42672 TWINNET-AS 91.194.140.0/23 AS43188 ECHONET-AS 91.195.116.0/23 AS43702 XTERRA-AS 91.196.232.0/22 AS43259 CXLNK-AS 91.198.71.0/24 AS43603 IGATELE-TW 91.198.71.26/32 ny1-border-1.g-1-0-3.us.igatele.com.tw (bad routing) 91.198.71.29/32 ny1-border-1.g-1-0-3.us.igatele.com.tw (bad routing) 91.198.71.30/32 taip1-border.g-1-1-1.tw1.igatele.com.tw (bad routing) 91.198.71.130/32 taip2-border.g-2-2-1.tw1.igatele.com.tw (bad routing) 91.198.71.131/32 beij1-border.g-1-0-5.cn1.igatele.com.tw (bad routing) 91.198.71.133/32 shang1-border.g-1-0-4.cn2.igatele.com.tw (bad routing) 91.198.71.134/32 taip1-border.g-1-1-1.tw1.igatele.com.tw (bad routing) 91.198.71.135/32 taic1-border.g-1-0-7.tw2.igatele.com.tw (bad routing) 91.198.71.138/32 ns1.igatele.com.tw 91.198.71.139/32 ns2.igatele.com.tw 159.25.97.69/32 159-25-97-69.dip.nrw.net and b.ns.joker.com 190.15.72.0/21 AS15146 CABLEBAHAMAS 190.15.73.221/32 mail.ad2cash.net, mail.adtraff.com, mail.deuscleanerpay.com mail.errordigger.com, mail.fileprotector.com, mail.freetvnow.net mail.netmediagroup.net, mail.newbieadguide.com, mail.unicsearch.com mail.uniqads.com, mail.windefender.com, mail.winfixer.com mx.cryptdrive.com, mx.netturbopro.com, mx.opensols.com mx.popupnukerpro.com, mx.sellmoresoft.net and mx.sellmysoft.net 190.15.73.222/32 ns1.deuscleanerpay.com, ns1.errorinspector.com, ns1.unicsearch.com ns1.winfixer.com and ns2.opensols.com 190.15.73.223/32 ns1.opensols.com, ns2.deuscleanerpay.com, ns2.errorinspector.com ns2.unicsearch.com and ns2.winfixer.com 190.15.73.251/32 mail.blessedads.com, mail.prevedmarketing.com, ns1.ad2cash.net ns1.adtraff.com, ns1.blessedads.com, ns1.cryptdrive.com ns1.fileprotector.com, ns1.freetvnow.net, ns1.netmediagroup.net ns1.netturbopro.com, ns1.newbieadguide.com, ns1.popupnukerpro.com ns1.prevedmarketing.com, ns1.sellmoresoft.net, ns1.sellmosoft.net ns1.sellmysoft.net, ns1.uniqads.com, ns1.upg-soft.net, ns1.windefender.com ns1.yourshopz.com 190.15.73.252/32 ns2.ad2cash.net, ns2.adtraff.com, ns2.blessedads.com, ns2.cryptdrive.com ns2.fileprotector.com, ns2.freetvnow.net, ns2.netmediagroup.net ns2.netturbopro.com, ns2.newbieadguide.com, ns2.popupnukerpro.com ns2.prevedmarketing.com, ns2.sellmoresoft.net, ns2.sellmosoft.net ns2.sellmysoft.net, ns2.uniqads.com, ns2.upg-soft.net, ns2.windefender.com ns2.yourshopz.com, adtraff.com, blessedads.com, cryptdrive.com, deuscleanerpay.com errorinspector.com, fileprotector.com, freetvnow.net, mail.errorinspector.com netmediagroup.net, netturbopro.com, opensols.com, popupnukerpro.com prevedmarketing.com, sellmosoft.net, unicsearch.com, uniqads.com windefender.com, www.unicsearch.com and yourshopz.com 193.33.128.0/23 AS42672 TWINNET-AS 193.39.113.2/32 mail.webalta.com and mail.webalta.ua 193.39.113.199/32 altastat.com 193.93.232.6/32 virusburst.com 193.93.235.5/32 rbnnetwork.com 194.67.0.0/18 SOVAM 194.67.27.115/32 ns1.mamba.ru 194.67.27.125/32 webalta.kz 194.67.28.62/32 ns2.mamba.ru 194.67.28.250/32 ns2.spylog.com 194.67.35.133/32 spylog.com 194.67.35.250/32 ns.spylog.com 194.110.69.0/24 AS42811 XINO-NET 194.126.174.124/32 ns1.softwebvideo.com and ns2.softwebvideo.com 194.146.204.0/22 Nevacon.net 194.226.64.0/20 RBNet.ru 194.226.96.0/24 relay4.ripn.net (RBNet) 195.3.144.30/32 ns4.antivermins.com and ns2.dragracers.biz 195.3.144.77/32 ns1.altercontrol.biz, ns4.sigmacode.biz and ns1.wildgadgets.biz 195.114.16.0/23 MICRONNET-NET 195.64.140.0/23 MEDIASTAR-NET 195.64.162.0/23 AS41108 OINVEST-AS 195.66.226.151/32 linx.net 195.225.176.68/32 spyaxe.biz 195.225.177.7/32 spywarequake.com 195.225.177.54/32 mail.virusburst.com 203.117.0.0/16 Starhub 203.117.175.116/32 adwareremover2007.com, ns1.drives-cleaner.com, ns1.magicantispy.com, windowsafesurf.com and ns1.xspy-shredder.com 203.121.0.0/17 timedotcom 203.121.79.55/32 adwareremover2007.com, drives-cleaner.com, magicantispy.com, ns2.windowsafesurf.com and xspy-shredder.com 203.121.79.58/32 bravesentry.com (A record at ns4.bravesentry.com) 204.251.15.190/32 cmjmachining.com (robtex.com's entry) 206.161.200.34/32 anti-virus-pro.com and ns1.yellow-bucks.com 206.161.200.36/32 ns0.yellow-bucks.com 207.44.185.10/32 c.ns.joker.com 207.226.173.67/32 antivirusgold.com and ns1.advancedhosters.com 207.226.173.114/32 ns2.adprotect.com and spywall.net 208.48.15.11/32 innovativeventures.net and systemshield.com 208.48.15.13/32 innovativeventures.net and systemshield.com 208.48.15.62/32 emailprotector.com 208.72.160.0/20 AS35902 BROADWEAVE-NETWORKS-TRAVERSE 208.72.170.189/32 back1.76team.com and bavk1.76team.com 209.8.30.2/32 ns0.innovagest2000.com and ns0.innovagest2000.com 209.85.84.199/32 malwarewipe.com and spyaxe.biz 212.24.53.0/24 loads network 212.24.53.3/32 loadsworld.com 212.24.53.4/32 loads.cc 212.24.53.7/32 loadsworld.com 212.24.53.8/32 loadsworld.com 213.99.178.180/32 infection source for proxima.ircgalaxy.pl 213.132.196.200/32 mail-eye.com 213.132.196.211/32 ns2.dns-eye.com and ns2.truerecords.biz 213.200.78.66/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 213.200.79.194/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 213.200.80.46/32 tiscali.co.uk (dropped RBN traffic on 10-14-2007) 216.7.89.12/32 adwareremovergold.com 216.8.177.26/32 adprotectplus.com 216.118.117.68/32 adwaredelete.com 216.180.244.179/32 ns3.coolservecorp.net 216.195.44.14/32 sys85.3fn.net 216.195.44.16/32 www.more-toons.com 216.195.44.17/32 shadow32.agava.net 216.195.44.58/32 mail.blackstaped.com 216.195.44.70/32 mail.steroidov.net and steroidov.net 216.195.44.71/32 famous-stars-and-straps.net and mail.famous-stars-and-straps.net 216.195.44.72/32 porno-hotel.net 216.195.44.73/32 linkslegal.com, mail.linkslegal.com, ruxxxvideos.net and xxx-sms.net 216.195.44.74/32 mail.myadultguide.net, mail.porn-sms.net, mail.savos.ru, myadultguide.net porn-sms.net 216.195.44.75/32 mail.soft2u.net and soft2u.net 216.195.44.76/32 mail.porno2u.net and porno2u.net 216.195.44.106/32 ns2.xmlscope.net, sys92.3fn.net and xmlscope.net 216.195.44.135/32 relay.sys88.3fn.net and sys88.3fn.net 216.195.44.168/32 theblogs.net 216.195.44.173/32 rapecollection.net and relay.rapecollection.net 216.195.44.174/32 alien-lair.net, ns1.alien-lair.net and relay.alien-lair.net 216.195.44.175/32 ns2.alien-lair.net 216.195.44.180/32 brutal-bdsm.net and relay.brutal-bdsm.net 216.195.44.181/32 dns111.3fn.net 216.195.44.185/32 badlesbiangirl.com and mail.badlesbiangirl.com 216.195.44.188/32 ns1.feedosns.net 216.195.44.189/32 ns2.feedosns.net 216.195.44.190/32 sys156.3fn.net 216.195.44.195/32 forcedfuck.net and rapehunter.net 216.195.44.197/32 freerapemovies.net 216.195.44.199/32 xrape.net 216.195.44.200/32 tgpteen.net 216.195.44.203/32 ass18.net, cruelforce.com, forcedteenagers.net, mail.ass18.net mail.cruelforce.com, mail.forcedteenagers.net, mail.movies18.net movies18.net, ns1.dns69.com and ns2.dns69.com 216.195.44.211/32 mail.minusovki.net 216.195.44.219/32 sys101.3fn.net 216.195.44.228/32 forced-fantasies.net 216.195.44.232/32 asianteenfuck.net 216.195.44.244/32 dns90.3fn.net, relay.dns90.3fn.net, sys90.3fn.net 216.195.44.245/32 extremecastings.net, konopli.net, mail.extremecastings.net mail.konopli.net, mail.medievalartwork.net, mail.pizdi.net mail.roomreview.net, mail.tutvse.ru, medievalartwork.net ns.extremecastings.net, ns.konopli.net, ns.medievalartwork.net ns.pizdi.net, ns.roomreview.net, pizdi.net, roomreview.net and tutvse.ru 216.195.44.246/32 brutalov.net, mail.brutalov.net, mail.netnaut.com, netnaut.com ns.brutalov.net and ns.netnaut.com 216.195.44.247/32 cherryhillaquatics.com, mail.cherryhillaquatics.com, mail.rapewebsites.net mail.taboo-porn.net, ns.cherryhillaquatics.com, ns.rapewebsites.net ns.taboo-porn.net, ns2.rapewebsites.net, rapewebsites.net and taboo-porn.net 216.195.44.248/32 doorbody.net, fwebhost.net, itop10.net, mail.doorbody.net mail.fwebhost.net, mail.itop10.net, ns.doorbody.net, ns.fwebhost.net ns.itop10.net 216.195.44.249/32 animerape.net, bewza.net, mail.animerape.net, mail.bewza.net mail.rapemovies.net, ns.bewza.net, ns.rapemovies.net and rapemovies.net 216.195.44.250/32 fuck-them.net, hentaicomix.net, mail.fuck-them.net, mail.hentaicomix.net mail.racing-performance.net, ns.fuck-them.net, ns.hentaicomix.net ns.racing-performance.net, ns2.fuck-them.net, ns2.hentaicomix.net racing-performance.net 216.195.49.88/32 3xniche.com, bestialitysecret.com, brutal-bondage.com, brutal-fetish.com, brutal-torture.com, fetishvids.net, hotsexweb.net, housewivesandpets.com, mail.3xniche.com, mail.bestialitysecret.com, mail.brutal-bondage.com, mail.brutal-fetish.com, mail.brutal-torture.com, mail.fetishvids.net, mail.hotsexweb.net, mail.housewivesandpets.com, mail.sinfulzoo.com, mail.zoofantasies.com, mail.zoopassions.com, sinfulzoo.com, zoofantasies.com and zoopassions.com 216.195.49.100/32 brutal-bdsm.com 216.195.49.159/32 ns3.dns-eye.com 216.195.50.51/32 rape-pictures.net 216.195.50.56/32 incest-video.net 216.195.50.81/32 fetishbunker.net 216.195.49.100/32 brutal-bdsm.com, brutal-domination.com, brutal-sadism.com, brutal-slave-torture.com mail.brutal-bdsm.com, mail.brutal-domination.com, mail.brutal-sadism.com mail.brutal-slave-torture.com 216.195.50.159/32 screamandcream.com 216.195.50.162/32 animerape.com 216.195.50.238/32 more-soundtracks.net 216.255.176.0/20 AS27595 Intercage 216.255.185.237/32 ns2.dnsbakler.com 216.255.190.74/32 adprotect.com 217.118.119.26/32 Interoute.net