Blog for hpHosts, and whatever else I feel like writing about ....

Sunday 10 January 2010

Crimeware friendly ISP's: RETN-AS (AS9002)

You may be asking yourself, why are RETN-AS being listed as crimeware friendly? Well, to keep this short and simple, I'll tell you - NET-UA-AS limited corp (AS40965 195.95.151.0/24) and SOFTNET (AS50073 193.104.110.0/24 SOFTNET Software Service Prague s.r.o.).

The SOFTNET range was first seen in November 2009, and ever since then, has served nothing but exploits, rogues, and other malicious goodness. As an example;

20091203144843        193.104.110.50        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get_exe.pl?adv=1090&p=3

20091203144849        193.104.110.50        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get_exe.pl?adv=1090&p=3

20091203144856        193.104.110.50        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get_exe.pl?adv=1090&p=3

20091203170625        193.104.110.50        Failed resolution        downloadavr11.com        http://downloadavr11.com/cgi-bin/download.pl?code=0001138

20091203170625        193.104.110.50        Failed resolution        downloadavr11.com        http://downloadavr11.com/cgi-bin/download.pl?code=0001138

20091203174552        193.104.110.50        Failed resolution        coolcount1.com        http://coolcount1.com/820/e1.html

20091203174559        193.104.110.50        Failed resolution        coolcount2.com        http://coolcount2.com/820/e1.html

20091203184004        193.104.110.50        Failed resolution        advancedvirusremover-2010.com        http://advancedvirusremover-2010.com/cgi-bin/setup.pl?code=00000000

20091203184035        193.104.110.50        Failed resolution        avrdownnew7.com        http://avrdownnew7.com/cgi-bin/setup.pl

20091203184043        193.104.110.50        Failed resolution        avrdownnew7.com        http://avrdownnew7.com/cgi-bin/setup.pl?adv=1233&p=9

20091203185116        193.104.110.50        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get_exe.pl?adv=1090&p=3

20091203185122        193.104.110.50        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get_exe.pl?adv=1090&p=3

20091216232337        193.104.110.50        Failed resolution        downloadavr13.com        http://downloadavr13.com/cgi-bin/download.pl

20091216232743        193.104.110.50        Failed resolution        pc-scanner-2012.com        http://pc-scanner-2012.com/?code=1122

20091216234048        193.104.110.50        Failed resolution        downloadavr11.com        http://downloadavr11.com/dfghfghgfj.dll

20091217162619        193.104.110.50        Failed resolution        advanced-virus-remover2011.com        http://advanced-virus-remover2011.com/cgi-bin/setup.pl??code=00000000

20091217162625        193.104.110.50        Failed resolution        advanced-virus-remover2011.com        http://advanced-virus-remover2011.com/cgi-bin/setup.pl?code=00000000

20091217172430        193.104.110.50        Failed resolution        pc-scanner2010.com        http://pc-scanner2010.com:80/cgi-bin/setup.pl?adv=944&p=5

20091217220200        193.104.110.50        Failed resolution        downloadavr15.com        http://downloadavr15.com/cgi-bin/download.pl?code=0001325

20091218204222        193.104.110.50        Failed resolution        buy-internetsecurity-2010.com        http://buy-internetsecurity-2010.com/

20091218204229        193.104.110.50        Failed resolution        buy-internetsecurity-2010.com        http://buy-internetsecurity-2010.com/cgi-bin/setup.pl?code=00000000

20091219223809        193.104.110.50        Failed resolution        pc-scanner-2010.biz        http://pc-scanner-2010.biz/cgi-bin/setup.pl?adv=1122

20091219230806        193.104.110.50        Failed resolution        pc-scanner-2011.net        http://pc-scanner-2011.net/?code=1122

20091219230813        193.104.110.50        Failed resolution        pc-scanner-2012.org        http://pc-scanner-2012.org/

20091219230820        193.104.110.50        Failed resolution        pc-scanner-2012.org        http://pc-scanner-2012.org/cgi-bin/setup.pl

20091220202254        193.104.110.50        Failed resolution        downloadavr20.com        http://downloadavr20.com/cgi-bin/download.pl?code=0000743

20091222194031        193.104.110.50        Failed resolution        downloadavr20.com        http://downloadavr20.com/cgi-bin/download.pl?code=0001302

20091226180004        193.104.110.50        Failed resolution        pc-scanner-2011.biz        http://pc-scanner-2011.biz/cgi-bin/setup.pl?adv=1122

20091226180011        193.104.110.50        Failed resolution        pc-scanner-2012.biz        http://pc-scanner-2012.biz/cgi-bin/setup.pl?adv=1122

20091226180017        193.104.110.50        Failed resolution        pc-scanner-2010.com        http://pc-scanner-2010.com/cgi-bin/setup.pl?adv=1122

20091226180024        193.104.110.50        Failed resolution        pc-scanner-2011.com        http://pc-scanner-2011.com/cgi-bin/setup.pl?adv=1122

20091226180031        193.104.110.50        Failed resolution        pc-scanner-2012.com        http://pc-scanner-2012.com/cgi-bin/setup.pl?adv=1122

20091226180038        193.104.110.50        Failed resolution        pc-scanner-2010.org        http://pc-scanner-2010.org/cgi-bin/setup.pl?adv=1122

20091226180045        193.104.110.50        Failed resolution        pc-scanner-2011.org        http://pc-scanner-2011.org/cgi-bin/setup.pl?adv=1122

20091226180052        193.104.110.50        Failed resolution        pc-scanner-2012.org        http://pc-scanner-2012.org/cgi-bin/setup.pl?adv=1122

20091226180059        193.104.110.50        Failed resolution        pc-scanner-2010.net        http://pc-scanner-2010.net/cgi-bin/setup.pl?adv=1122

20091226180106        193.104.110.50        Failed resolution        pc-scanner-2011.net        http://pc-scanner-2011.net/cgi-bin/setup.pl?adv=1122

20091226180113        193.104.110.50        Failed resolution        pc-scanner-2012.net        http://pc-scanner-2012.net/cgi-bin/setup.pl?adv=1122

20091229041225        193.104.110.50        Failed resolution        white-xxxx-tube.net        http://white-xxxx-tube.net/cgi-bin/setuppatch.pl?adv=876

20091229044150        193.104.110.50        Failed resolution        downloadavr21.com        http://downloadavr21.com/dfghfghgfj.dll

20091231003134        193.104.110.50        Failed resolution        downloadavr22.com        http://downloadavr22.com/cgi-bin/download.pl?code=0001290

20100106000146        193.104.110.50        Failed resolution        downloadavr25.com        http://downloadavr25.com/cgi-bin/download.pl?code=0001346

20100107013523        193.104.110.88        Failed resolution        googleservice.xxxliefx.in        http://googleservice.xxxliefx.in/

20100107014531        193.104.110.88        Failed resolution        boolred.in        http://boolred.in/fog/spl/pdf.pdf

20100107014903        193.104.110.88        Failed resolution        193.104.110.88        http://193.104.110.88

20100107015151        193.104.110.88        Failed resolution        googleservice.xxxliefx.in        http://googleservice.xxxliefx.in

20100107015325        193.104.110.88        Failed resolution        klitar.cn        http://klitar.cn/test47/1.pdf?id=1165

20100107015358        193.104.110.50        Failed resolution        pc-scanner2010.net        http://pc-scanner2010.net

20100107015952        193.104.110.88        Failed resolution        xxxliefx.in        http://xxxliefx.in

20100107020255        193.104.110.88        Failed resolution        boolred.in        http://boolred.in/fog/index.php

20100107023038        193.104.110.81        Failed resolution        spyeraser-trial.com        http://spyeraser-trial.com/SpyEraser_Install.exe

20100107023145        193.104.110.81        Failed resolution        vipimagine.cn        http://vipimagine.cn/spyeraser096.exe

20100107023351        193.104.110.81        Failed resolution        www.vipimagine.cn        http://www.vipimagine.cn/spyeraser096.exe

20100107024238        193.104.110.88        Failed resolution        www.boolred.in        http://www.boolred.in/fog/index.php

20100108140135        193.104.110.50        Failed resolution        scannerpc-2010.org        http://scannerpc-2010.org/cgi-bin/setup.pl?adv=944&p=5

20100109062406        193.104.110.50        Failed resolution        scannerpc-2010.org        http://scannerpc-2010.org/?code=1373


Fancy an example of the malicious goodness on the NET-UA-AS range? Ah, go on then;

20090724003339        195.95.151.174        Failed resolution        av-plus-pay-online.com        http://av-plus-pay-online.com

20090724004208        195.95.151.174        Failed resolution        searchrizotto.com        http://searchrizotto.com/cmd.php

20090724004214        195.95.151.174        Failed resolution        searchopt7.com        http://searchopt7.com/cmd.php

20090724004228        195.95.151.176        Failed resolution        realantivirusplus.com        http://realantivirusplus.com/se.exe

20090724004235        195.95.151.176        Failed resolution        realantivirusplus.com        http://realantivirusplus.com/install/AntivirusPlus_ba.exe

20090724190105        195.95.151.174        Failed resolution        baqcemy.cn        http://baqcemy.cn

20090724190230        195.95.151.174        Failed resolution        dajugif.cn        http://dajugif.cn

20090727102324        195.95.151.174        Failed resolution        bazyrpe.cn        http://bazyrpe.cn/installer_1.exe

20090729012523        195.95.151.174        Failed resolution        befovby.cn        http://befovby.cn/installer_1.exe

20090729190907        195.95.151.174        Failed resolution        ezuxevo.cn        http://ezuxevo.cn/installer_70309.exe

20090729192140        195.95.151.174        Failed resolution        befovby.cn        http://befovby.cn/installer_1.exe

20090801135738        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/setup.exe

20090802010328        195.95.151.184        Failed resolution        195.95.151.184        http://195.95.151.184/smrtprt/setup.php?track_id=10001

20090802010417        195.95.151.174        Failed resolution        betsuq.cn        http://betsuq.cn

20090802010506        195.95.151.174        Failed resolution        dakbesy.cn        http://dakbesy.cn

20090802010630        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/install/AntivirusPlus.exe

20090802010712        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/install/AntivirusPlus.exe

20090802010909        195.95.151.180        Failed resolution        www.smartprotectorpro.com        http://www.smartprotectorpro.com/download/?track_id=10001

20090802011108        195.95.151.174        Failed resolution        akoetly.cn        http://akoetly.cn/

20090802011201        195.95.151.174        Failed resolution        aveylpa.cn        http://aveylpa.cn/?wm=70141

20090802011303        195.95.151.174        Failed resolution        dahure.cn        http://dahure.cn/?wm=70159&l=1

20090802012441        195.95.151.174        Failed resolution        dahure.cn        http://dahure.cn/?wm=70001&l=1

20090802014108        195.95.151.174        Failed resolution        axiufow.cn        http://axiufow.cn/installer_70001.exe

20090802014142        195.95.151.174        Failed resolution        dahure.cn        http://dahure.cn/?wm=70106

20090802015755        195.95.151.174        Failed resolution        avyciso.cn        http://avyciso.cn/

20090802022755        195.95.151.174        Failed resolution        ateylqo.cn        http://ateylqo.cn

20090802022801        195.95.151.174        Failed resolution        axaonyc.cn        http://axaonyc.cn/installer_70106.exe

20090802022806        195.95.151.174        Failed resolution        axeonar.cn        http://axeonar.cn

20090802024138        195.95.151.174        Failed resolution        awupayk.cn        http://awupayk.cn

20090802024144        195.95.151.174        Failed resolution        awupayk.cn        http://awupayk.cn/installer_1.exe

20090802031326        195.95.151.174        Failed resolution        ateygi.cn        http://ateygi.cn

20090802035102        195.95.151.174        Failed resolution        awixys.cn        http://awixys.cn

20090802035108        195.95.151.174        Failed resolution        awoenpa.cn        http://awoenpa.cn

20090802035114        195.95.151.174        Failed resolution        awohebu.cn        http://awohebu.cn/installer_70159.exe

20090802035120        195.95.151.174        Failed resolution        awointa.cn        http://awointa.cn/?wm=70159&l=1

20090802035127        195.95.151.174        Failed resolution        awukoga.cn        http://awukoga.cn/installer_70159.exe

20090802035324        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/se.exe

20090802042445        195.95.151.174        Failed resolution        awakuvi.cn        http://awakuvi.cn

20090802043730        195.95.151.174        Failed resolution        awaviyh.cn        http://awaviyh.cn

20090802055341        195.95.151.174        Failed resolution        atuican.cn        http://atuican.cn

20090802055348        195.95.151.174        Failed resolution        aveylpa.cn        http://aveylpa.cn/

20090802055353        195.95.151.174        Failed resolution        avyciso.cn        http://avyciso.cn/?wm=70159&l=1

20090802055501        195.95.151.174        Failed resolution        dahure.cn        http://dahure.cn/?wm=

20090802055517        195.95.151.174        Failed resolution        fimcuoj.cn        http://fimcuoj.cn

20090802055523        195.95.151.174        Failed resolution        fisruba.cn        http://fisruba.cn

20090802055529        195.95.151.174        Failed resolution        focunqa.cn        http://focunqa.cn

20090802055535        195.95.151.174        Failed resolution        fogpak.cn        http://fogpak.cn

20090802064312        195.95.151.174        Failed resolution        avoapyt.cn        http://avoapyt.cn/installer_70084.exe

20090802074324        195.95.151.174        Failed resolution        ajufeiv.cn        http://ajufeiv.cn

20090802074330        195.95.151.174        Failed resolution        akeraoq.cn        http://akeraoq.cn

20090802074336        195.95.151.174        Failed resolution        akeraoq.cn        http://akeraoq.cn/installer_1.exe

20090802074356        195.95.151.174        Failed resolution        aniulu.cn        http://aniulu.cn

20090802074414        195.95.151.174        Failed resolution        atuypha.cn        http://atuypha.cn

20090802075818        195.95.151.174        Failed resolution        azaujyr.cn        http://azaujyr.cn/installer_70106.exe

20090802075824        195.95.151.174        Failed resolution        azeifko.cn        http://azeifko.cn

20090802132148        195.95.151.174        Failed resolution        bicqoej.cn        http://bicqoej.cn/installer_1.exe

20090803182114        195.95.151.174        Failed resolution        befvazi.cn        http://befvazi.cn/installer_1.exe

20090803182121        195.95.151.174        Failed resolution        betsuq.cn        http://betsuq.cn/?wm=70106

20090803182127        195.95.151.174        Failed resolution        bexazyj.cn        http://bexazyj.cn/installer_1.exe

20090804002137        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/install/AntivirusPlus.grn

20090806135925        195.95.151.174        Failed resolution        bizeda.cn        http://bizeda.cn/installer_1.exe

20090806205128        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/uninstaller.exe

20090810182304        195.95.151.174        Failed resolution        ajowah.cn        http://ajowah.cn/installer_1.exe

20090810182310        195.95.151.174        Failed resolution        akaysu.cn        http://akaysu.cn/installer_1.exe

20090811160630        195.95.151.174        Failed resolution        bocisak.cn        http://bocisak.cn/installer_1.exe

20090811164314        195.95.151.174        Failed resolution        bomkyvi.cn        http://bomkyvi.cn/installer_1.exe

20090811164608        195.95.151.174        Failed resolution        akaysu.cn        http://akaysu.cn/video.php?wm=70157&n=15

20090811164648        195.95.151.174        Failed resolution        boziqdu.cn        http://boziqdu.cn/installer_1.exe

20090811170333        195.95.151.174        Failed resolution        akaysu.cn        http://akaysu.cn/installer_70157.exe

20090811232842        195.95.151.174        Failed resolution        atiqad.cn        http://atiqad.cn/installer_70157.exe

20090812172835        195.95.151.174        Failed resolution        bozradi.cn        http://bozradi.cn/installer_1.exe

20090812190313        195.95.151.174        Failed resolution        atiqad.cn        http://atiqad.cn/installer_70157.exe

20090813122310        195.95.151.174        Failed resolution        yourcheckpoisonpro.cn        http://yourcheckpoisonpro.cn/installer_1.exe

20090813122316        195.95.151.174        Failed resolution        yourfriskdisease.cn        http://yourfriskdisease.cn/installer_1.exe

20090813122322        195.95.151.174        Failed resolution        yourguardpro.cn        http://yourguardpro.cn/installer_90001.exe

20090813124050        195.95.151.174        Failed resolution        adayby.cn        http://adayby.cn/installer_70100.exe

20090813124055        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/se.exe

20090813124104        195.95.151.176        Failed resolution        bestcountedantivirus.com        http://bestcountedantivirus.com/

20090813135519        195.95.151.174        Failed resolution        yourfriskviruspro.cn        http://yourfriskviruspro.cn/installer_70127.exe

20090813140957        195.95.151.174        Failed resolution        adayby.cn        http://adayby.cn/installer_70172.exe

20090813150613        195.95.151.174        Failed resolution        adiuqga.cn        http://adiuqga.cn/installer_70127.exe

20090815190141        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/buy.php?id=

20090818201700        195.95.151.184        Failed resolution        195.95.151.184        http://195.95.151.184/smrtprt/install.php?

20090819063120        195.95.151.174        Failed resolution        ezuxevo.cn        http://ezuxevo.cn/10/video.php?Author=Daniel&Length=54:44&Rating=5&Views=45263&thumbn=/10/img/thumbs/tvo024.jpg&wm=70309

20090819063336        195.95.151.185        Failed resolution        scan.thehyperpcsecurity2.com        http://scan.thehyperpcsecurity2.com/smrtprt_2/6/40013/

20090823174614        195.95.151.174        Failed resolution        aguraot.cn        http://aguraot.cn/installer_70307.exe

20090823174704        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/AntivirusPlus.exe

20090823174709        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/AntivirusPlus.grn

20090823174715        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/AntivirusPlus_ba.exe

20090823174720        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/avplus.exe

20090823174726        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/InternetExplorer.dll

20090823174732        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/se.exe

20090823230052        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/

20090823230058        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/

20090823230104        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/

20090823230109        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/

20090823230115        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/

20090823230121        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/

20090823230127        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/

20090823230132        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/

20090823230138        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/

20090823230144        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/

20090823230149        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/

20090823230155        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/

20090823230201        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/

20090823230207        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/

20090823230212        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/

20090823230218        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/

20090823230224        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/

20090823230229        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/

20090823230235        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/

20090823230241        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/

20090823230246        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/

20090823230252        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/

20090823230258        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/

20090823231013        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/cfg/dmns.cfg

20090823231019        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/AntivirusPlus_ba.exe

20090823231024        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/install/AntivirusPlus.exe

20090823231030        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/buy.php

20090823231035        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/redirect.php

20090826170607        195.95.151.176        Failed resolution        realantivirusplus.com        http://realantivirusplus.com/se.exe

20090826170839        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/install/InternetExplorer.dll

20090828060028        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/order.php

20090828060034        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/order.php

20090828060041        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/order.php

20090828060047        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/order.php

20090828060106        195.95.151.174        Failed resolution        akaysu.cn        http://akaysu.cn/cvi_busy_lib.js

20090828060158        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/order.php

20090828060204        195.95.151.176        Failed resolution        antivirusplus2010.com        http://antivirusplus2010.com/order.php

20090828060210        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/order.php

20090828060217        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/order.php

20090828060223        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/order.php

20090828060252        195.95.151.174        Failed resolution        aziduon.cn        http://aziduon.cn/cvi_busy_lib.js

20090828060702        195.95.151.174        Failed resolution        dajugif.cn        http://dajugif.cn/cvi_busy_lib.js

20090828060911        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/order.php

20090828061049        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/order.php

20090828061128        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/order.php

20090828061134        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/order.php

20090828061148        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/order.php

20090828061240        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/order.php

20090828061305        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/order.php

20090828061405        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/order.php

20090828061423        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/order.php

20090828061447        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/order.php

20090828061619        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/order.php

20090828062354        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/order.php

20090828062400        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/order.php

20090829001049        195.95.151.176        Failed resolution        antivirplus2009.com        http://antivirplus2009.com/setup.exe

20090830023412        195.95.151.174        Failed resolution        ijisuho.cn        http://ijisuho.cn/installer_1.exe

20090831175124        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/install/InternetExplorer.dll

20090831175130        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/se.exe

20090831175136        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/setup.exe

20090831175143        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/install/AntivirusPlus_ba.exe

20090831175149        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/setup.exe

20090831182337        195.95.151.174        Failed resolution        ascertaindiseasepro.cn        http://ascertaindiseasepro.cn/installer_70100.exe

20090831184412        195.95.151.174        Failed resolution        bestcover4u.cn        http://bestcover4u.cn/installer_1.exe

20090831184418        195.95.151.174        Failed resolution        bestdefenselive.cn        http://bestdefenselive.cn/installer_1.exe

20090831184424        195.95.151.174        Failed resolution        bestexaminedisease.cn        http://bestexaminedisease.cn/installer_1.exe

20090831184430        195.95.151.174        Failed resolution        bestfriskviruslive.cn        http://bestfriskviruslive.cn/installer_1.exe

20090831184541        195.95.151.174        Failed resolution        bestprotectiononline.cn        http://bestprotectiononline.cn/installer_1.exe

20090831185520        195.95.151.174        Failed resolution        bigprotectionlive.cn        http://bigprotectionlive.cn/installer.exe

20090831204333        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/setup.exe

20090831204339        195.95.151.174        Failed resolution        easybestprotection.cn        http://easybestprotection.cn/installer.exe

20090831204345        195.95.151.174        Failed resolution        easypersonalprotection.cn        http://easypersonalprotection.cn/installer_1.exe

20090831204410        195.95.151.174        Failed resolution        easyserviceprotection.cn        http://easyserviceprotection.cn/installer_1.exe

20090831204845        195.95.151.174        Failed resolution        examinepoisonstore.cn        http://examinepoisonstore.cn/installer_1.exe

20090831210431        195.95.151.174        Failed resolution        freecoverstore.cn        http://freecoverstore.cn/installer_1.exe

20090831210437        195.95.151.174        Failed resolution        freedefenseforyou.cn        http://freedefenseforyou.cn/installer_1.exe

20090831210602        195.95.151.174        Failed resolution        friskdiseaselive.cn        http://friskdiseaselive.cn/installer_1.exe

20090901001525        195.95.151.174        Failed resolution        myascertainpoison.cn        http://myascertainpoison.cn/installer_70101.exe

20090901001551        195.95.151.174        Failed resolution        mycheckdiseasestore.cn        http://mycheckdiseasestore.cn/installer_1.exe

20090901001617        195.95.151.174        Failed resolution        myexaminevirusstore.cn        http://myexaminevirusstore.cn/installer_1.exe

20090901023211        195.95.151.176        Failed resolution        searchopt7.com        http://searchopt7.com/cmd.php

20090901023220        195.95.151.176        Failed resolution        searchrizotto.com        http://searchrizotto.com/cmd.php

20090902033417        195.95.151.176        Failed resolution        bestcountedantivirus.com        http://bestcountedantivirus.com

20090902114515        195.95.151.176        Failed resolution        195.95.151.176        http://195.95.151.176/

20090902114521        195.95.151.174        Failed resolution        195.95.151.174        http://195.95.151.174/

20090902114823        195.95.151.174        Failed resolution        yourfriskviruspro.cn        http://yourfriskviruspro.cn/installer.1.exe

20090902114829        195.95.151.174        Failed resolution        befynru.cn        http://befynru.cn/installer.1.exe

20090902114835        195.95.151.174        Failed resolution        adoimi.cn        http://adoimi.cn/installer.1.exe

20090902114906        195.95.151.174        Failed resolution        yourfriskviruspro.cn        http://yourfriskviruspro.cn

20090902114912        195.95.151.174        Failed resolution        befynru.cn        http://befynru.cn

20090902114918        195.95.151.174        Failed resolution        adoimi.cn        http://adoimi.cn

20090902115224        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/buy.php?id

20090903151514        195.95.151.174        Failed resolution        fitnyze.cn        http://fitnyze.cn/installer_1.exe

20090909020308        195.95.151.174        Failed resolution        easypersonalprotection.cn        http://easypersonalprotection.cn/installer.70084.exe

20090909020325        195.95.151.174        Failed resolution        friskdiseaselive.cn        http://friskdiseaselive.cn/installer.70131.exe

20090909020331        195.95.151.174        Failed resolution        atioqe.cn        http://atioqe.cn/installer.70141.exe

20090909040833        195.95.151.174        Failed resolution        atioqe.cn        http://atioqe.cn/installer.70141.exe

20090909040839        195.95.151.174        Failed resolution        friskdiseaselive.cn        http://friskdiseaselive.cn/installer.70131.exe

20090909040858        195.95.151.174        Failed resolution        easypersonalprotection.cn        http://easypersonalprotection.cn/installer.70084.exe

20090909040904        195.95.151.174        Failed resolution        bomkyvi.cn        http://bomkyvi.cn/installer.1.exe

20090910191743        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/AntivirusPlus.exe

20090910191749        195.95.151.176        Failed resolution        antivirplus2009.com        http://antivirplus2009.com/install/avplus.exe

20090910191755        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/se.exe

20090910191801        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/InternetExplorer.dll

20090910191806        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/AntivirusPlus_ba.exese.exe

20090910191813        195.95.151.176        Failed resolution        antivirplus2009.com        http://antivirplus2009.com/install/InternetExplorer.dll

20090910191820        195.95.151.176        Failed resolution        antivirplus2009.com        http://antivirplus2009.com/install/AntivirusPlus.exe

20090910191826        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/AntivirusPlus_ba.exe

20090910191832        195.95.151.176        Failed resolution        antivirplus2009.com        http://antivirplus2009.com/install/AntivirusPlus_ba.exe

20090910191839        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/install/InternetExplorer.dll

20090910191845        195.95.151.176        Failed resolution        addedantiviruspro.com        http://addedantiviruspro.com/install/avplus.exe

20090910191854        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/install/avplus.exe

20090910191901        195.95.151.176        Failed resolution        addedantiviruslive.com        http://addedantiviruslive.com/install/AntivirusPlus_ba.exe

20090910191907        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/se.exe

20090910191914        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/install/InternetExplorer.dll

20090910191920        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/install/avplus.exe

20090910191927        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/install/AntivirusPlus.exe

20090910191933        195.95.151.176        Failed resolution        yourcountedantivirus.com        http://yourcountedantivirus.com/install/AntivirusPlus_ba.exe

20090910191939        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/se.exe

20090910191945        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/install/InternetExplorer.dll

20090910191951        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/install/avplus.exe

20090910191959        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/install/AntivirusPlus.exe

20090910192005        195.95.151.176        Failed resolution        easyaddedantivirus.com        http://easyaddedantivirus.com/install/AntivirusPlus_ba.exe

20090910192011        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/se.exe

20090910192017        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/install/InternetExplorer.dll

20090910192023        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/install/avplus.exe

20090910192029        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/install/AntivirusPlus.exe

20090910192035        195.95.151.176        Failed resolution        myplusantiviruspro.com        http://myplusantiviruspro.com/install/AntivirusPlus_ba.exe

20090910192043        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/se.exe

20090910192049        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/install/InternetExplorer.dll

20090910192055        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/install/avplus.exe

20090910192102        195.95.151.176        Failed resolution        addedantivirusonline.com        http://addedantivirusonline.com/install/AntivirusPlus_ba.exe

20090910192108        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/se.exe

20090910192114        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/install/InternetExplorer.dll

20090910192119        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/install/avplus.exe

20090910192125        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/install/AntivirusPlus.exe

20090910192131        195.95.151.176        Failed resolution        addedantivirusstore.com        http://addedantivirusstore.com/install/AntivirusPlus_ba.exe

20090910192137        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/se.exe

20090910192143        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/install/InternetExplorer.dll

20090910192149        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/install/avplus.exe

20090910192155        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/install/AntivirusPlus.exe

20090910192201        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/install/AntivirusPlus_ba.exe

20090910192207        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/se.exe

20090910192213        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/install/InternetExplorer.dll

20090910192221        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/install/avplus.exe

20090910192227        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/install/AntivirusPlus.exe

20090910192233        195.95.151.176        Failed resolution        freeantivirusplus09.com        http://freeantivirusplus09.com/install/AntivirusPlus_ba.exe

20090910192239        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/se.exe

20090910192247        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/install/InternetExplorer.dll

20090910192253        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/install/avplus.exe

20090910192259        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/install/AntivirusPlus.exe

20090910192305        195.95.151.176        Failed resolution        getantivirusplusnow.com        http://getantivirusplusnow.com/install/AntivirusPlus_ba.exe

20090910192311        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/se.exe

20090910192317        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/install/InternetExplorer.dll

20090910192324        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/install/avplus.exe

20090910192330        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/install/AntivirusPlus.exe

20090910192336        195.95.151.176        Failed resolution        antivirusplusnow.com        http://antivirusplusnow.com/install/AntivirusPlus_ba.exe

20090910192342        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/se.exe

20090910192348        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/install/InternetExplorer.dll

20090910192354        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/install/avplus.exe

20090910192400        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/install/AntivirusPlus.exe

20090910192407        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/install/AntivirusPlus_ba.exe

20090910192413        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/se.exe

20090910192419        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/install/InternetExplorer.dll

20090910192425        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/install/avplus.exe

20090910192431        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/install/AntivirusPlus.exe

20090910192437        195.95.151.176        Failed resolution        getavplusnow.com        http://getavplusnow.com/install/AntivirusPlus_ba.exe

20090910192443        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/se.exe

20090910192449        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/install/InternetExplorer.dll

20090910192455        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/install/avplus.exe

20090910192501        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/install/AntivirusPlus.exe

20090910192507        195.95.151.176        Failed resolution        antivirusplus-ok.com        http://antivirusplus-ok.com/install/AntivirusPlus_ba.exe

20090910192514        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/se.exe

20090910192521        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/install/InternetExplorer.dll

20090910192527        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/install/avplus.exe

20090910192532        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/nstall/AntivirusPlus.exe

20090910192538        195.95.151.176        Failed resolution        nextantivirusplus.com        http://nextantivirusplus.com/install/AntivirusPlus_ba.exe

20090910192544        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/se.exe

20090910192550        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/install/InternetExplorer.dll

20090910192556        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/install/avplus.exe

20090910192602        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/install/AntivirusPlus.exe

20090910192608        195.95.151.176        Failed resolution        i-antivirusplus.com        http://i-antivirusplus.com/install/AntivirusPlus_ba.exe

20090910192615        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/install/InternetExplorer.dll

20090910192621        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/install/avplus.exe

20090910192627        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/install/AntivirusPlus.exe

20090910192633        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/install/AntivirusPlus_ba.exe

20090910192639        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/se.exe

20090910192646        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/install/avplus.exe

20090910192652        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/install/AntivirusPlus.exe

20090910192659        195.95.151.176        Failed resolution        yesantivirusplus.com        http://yesantivirusplus.com/inse.exestall/AntivirusPlus_ba.exe

20090910192705        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/install/InternetExplorer.dll

20090910192711        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/se.exe

20090910192717        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/install/avplus.exe

20090910192723        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/install/AntivirusPlus.exe

20090910192729        195.95.151.176        Failed resolution        antivirus-plus-now.com        http://antivirus-plus-now.com/install/AntivirusPlus_ba.exe

20090910192735        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/se.exe

20090910192741        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/install/InternetExplorer.dll

20090910192747        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/install/avplus.exe

20090910192753        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/install/AntivirusPlus.exe

20090910192759        195.95.151.176        Failed resolution        antivirusplus09.com        http://antivirusplus09.com/install/AntivirusPlus_ba.exe

20090910192805        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/se.exe

20090910192811        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/install/InternetExplorer.dll

20090910192816        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/install/avplus.exe

20090910192823        195.95.151.176        Failed resolution        internetantivirusplus.com        http://internetantivirusplus.com/install/AntivirusPlus_ba.exe

20090910192829        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/se.exe

20090910192835        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/install/InternetExplorer.dll

20090910192841        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/install/avplus.exe

20090910192848        195.95.151.176        Failed resolution        mybestantivirusplus.com        http://mybestantivirusplus.com/install/AntivirusPlus_ba.exe

20090910220405        195.95.151.176        Failed resolution        antivirusplus1.com        http://antivirusplus1.com/cfg/dmns.cfg

20090910223610        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/AntivirusPlus.grn

20090910223619        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/install/avplus.exe

20090910223625        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/buy.php

20090910223630        195.95.151.176        Failed resolution        avplus2010.com        http://avplus2010.com/redirect.php

20090910224418        195.95.151.176        Failed resolution        antivirusplus1.com        http://antivirusplus1.com/cfg/dmns.cfg

20090912015912        195.95.151.174        Failed resolution        easyincomeprotection.cn        http://easyincomeprotection.cn/installer_90001.exe

20090912015922        195.95.151.174        Failed resolution        gilugmo.cn        http://gilugmo.cn/installer_70172.exe

20090912020121        195.95.151.174        Failed resolution        acajelu.cn        http://acajelu.cn/installer_1.exe

20090912020130        195.95.151.174        Failed resolution        akipahu.cn        http://akipahu.cn/installer_1.exe

20090912020140        195.95.151.174        Failed resolution        atoylev.cn        http://atoylev.cn/installer_70087.exe

20090912020145        195.95.151.174        Failed resolution        atuyfe.cn        http://atuyfe.cn/installer_70126.exe

20090912020212        195.95.151.174        Failed resolution        fexonhu.cn        http://fexonhu.cn/installer_1.exe

20090912020222        195.95.151.174        Failed resolution        gihugyx.cn        http://gihugyx.cn/installer_1.exe

20090912020231        195.95.151.174        Failed resolution        giwgeam.cn        http://giwgeam.cn/installer_1.exe

20090912020248        195.95.151.174        Failed resolution        gojaxty.cn        http://gojaxty.cn/installer_1.exe

20090912020300        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/cb/installs.php?id=1

20090912020306        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/cb/real.php?id=1

20090912020313        195.95.151.176        Failed resolution        megaantivirusplus.com        http://megaantivirusplus.com/redirect.php

20090912020458        195.95.151.174        Failed resolution        atuican.cn        http://atuican.cn/

20090912020506        195.95.151.174        Failed resolution        aveylpa.cn        http://aveylpa.cn/installer_70141.exe

20090912020513        195.95.151.174        Failed resolution        avyewi.cn        http://avyewi.cn/installer_1.exe

20090912020520        195.95.151.174        Failed resolution        awakuvi.cn        http://awakuvi.cn/

20090912020527        195.95.151.174        Failed resolution        awaviyh.cn        http://awaviyh.cn/

20090912020532        195.95.151.174        Failed resolution        awixys.cn        http://awixys.cn/

20090912020538        195.95.151.174        Failed resolution        awoenpa.cn        http://awoenpa.cn/

20090912020548        195.95.151.174        Failed resolution        axevoq.cn        http://axevoq.cn/installer_70159.exe

20090912020555        195.95.151.174        Failed resolution        axominy.cn        http://axominy.cn/installer_1.exe

20090912020627        195.95.151.174        Failed resolution        fimcuoj.cn        http://fimcuoj.cn/

20090912020634        195.95.151.174        Failed resolution        fisruba.cn        http://fisruba.cn/

20090912020641        195.95.151.174        Failed resolution        focunqa.cn        http://focunqa.cn/

20090912020648        195.95.151.174        Failed resolution        fogpak.cn        http://fogpak.cn/

20090912020658        195.95.151.176        Failed resolution        goodantivirusplus.com        http://goodantivirusplus.com/install/AntivirusPlus.grn

20090912020842        195.95.151.174        Failed resolution        bexazyj.cn        http://bexazyj.cn/installer_70159.exe

20090912024107        195.95.151.174        Failed resolution        azecuid.cn        http://azecuid.cn/installer_1.exe

20090912024153        195.95.151.174        Failed resolution        fidyqxo.cn        http://fidyqxo.cn/installer_1.exe

20090912024202        195.95.151.174        Failed resolution        gecyte.cn        http://gecyte.cn/installer_1.exe

20090920200647        195.95.151.176        Failed resolution        antivirus-plus09.com        http://antivirus-plus09.com/install/AntivirusPlus.exe

20090920200653        195.95.151.176        Failed resolution        antivirus-plus09.com        http://antivirus-plus09.com/install/avplus.exe

20090920200658        195.95.151.176        Failed resolution        antivirus-plus09.com        http://antivirus-plus09.com/install/InternetExplorer.dll

20090920200704        195.95.151.176        Failed resolution        antivirus-plus09.com        http://antivirus-plus09.com/se.exe

20090929015616        195.95.151.185        Failed resolution        scan.join2secureplace.com        http://scan.join2secureplace.com/download/smrtprt/install.php

20090929032538        195.95.151.185        Failed resolution        scan.helpyourpcsecuritynow.com        http://scan.helpyourpcsecuritynow.com:80/download/smrtprt/install.php?track_id=40039

20090929032543        195.95.151.185        Failed resolution        scan.helpyourpcsecuritynow.com        http://scan.helpyourpcsecuritynow.com:80/smrtprt_3/6/40039/

20090929203012        195.95.151.185        Failed resolution        195.95.151.185        http://195.95.151.185/download/smrtprt/install.php

20090929204317        195.95.151.185        Failed resolution        scan.join2secureplace.com        http://scan.join2secureplace.com:80/download/smrtprt/install.php?track_id=40039

20090930141221        195.95.151.180        Failed resolution        smartprotectpro.com        http://smartprotectpro.com/install/?track_id=10001

20090930141305        195.95.151.181        Failed resolution        gosmrtprt3.com        http://gosmrtprt3.com/install/?track_id=10001

20090930141920        195.95.151.176        Failed resolution        coolantivirusplus09.com        http://coolantivirusplus09.com/cfg/dmns.cfg

20090930141925        195.95.151.176        Failed resolution        coolantivirusplus09.com        http://coolantivirusplus09.com/buy.php

20090930141931        195.95.151.176        Failed resolution        coolantivirusplus09.com        http://coolantivirusplus09.com/se.exe

20090930141937        195.95.151.176        Failed resolution        coolantivirusplus09.com        http://coolantivirusplus09.com/redirect.php

20090930142059        195.95.151.185        Failed resolution        scan.helpyourpcsecuritynow.com        http://scan.helpyourpcsecuritynow.com/download/smrtprt/install.php

20090930142849        195.95.151.176        Failed resolution        coolantivirusplus09.com        http://coolantivirusplus09.com/install/avplus.exe

20090930165802        195.95.151.185        Failed resolution        scan.helpyourpcsecuritynow.com        http://scan.helpyourpcsecuritynow.com

20090930165808        195.95.151.185        Failed resolution        scan.helpyourpcsecuritynow.com        http://scan.helpyourpcsecuritynow.com/download/smrtprt/install.php?track_id=10001

20091001165819        195.95.151.185        Failed resolution        scan.todaybestpcscnas.com        http://scan.todaybestpcscnas.com/download/smrtprt/install.php

20091002170409        195.95.151.176        Failed resolution        realantivirusplus09.com        http://realantivirusplus09.com/redirect.php

20091002170416        195.95.151.185        Failed resolution        scan.webscantodaypc.com        http://scan.webscantodaypc.com/download/smrtprt/install.php?track_id=40014

20091003180400        195.95.151.185        Failed resolution        scan.unitedsecurityscans.com        http://scan.unitedsecurityscans.com/smrtprt_3/6/40033/

20091003180406        195.95.151.185        Failed resolution        scan.webscantodaypc.com        http://scan.webscantodaypc.com/download/smrtprt/install.php?track_id=40042

20091003180412        195.95.151.185        Failed resolution        scan.webscantodaypc.com        http://scan.webscantodaypc.com/smrtprt_3/6/40039/

20091010212343        195.95.151.185        Failed resolution        195.95.151.185        http://195.95.151.185

20091014001840        195.95.151.185        Failed resolution        scan.how2scanyourpcs.com        http://scan.how2scanyourpcs.com/smrtprt_3/6/40014/

20091014183446        195.95.151.176        Failed resolution        av-plus-2009.com        http://av-plus-2009.com/install/avplus.exe

20091014210133        195.95.151.185        Failed resolution        scan.how2scanyourpcs.com        http://scan.how2scanyourpcs.com/smrtprt_3/6/40033/

20091101131708        195.95.151.185        Failed resolution        scan.scanpcalertstoday.com        http://scan.scanpcalertstoday.com/smrtprt_3/6/40017/

20091101131722        195.95.151.185        Failed resolution        scan.securitymilescan.com        http://scan.securitymilescan.com/smrtprt_3/6/40033/

20091105131909        195.95.151.185        Failed resolution        scan.scanlookpcnow.com        http://scan.scanlookpcnow.com/download/smrtprt/install.php


We're not done however, NET-UA-AS also have ties to other well known malicious networks, such as;

AS24826 KHARKOV-TERMINALS-AS PE Viktor Nastechenko (81.25.128.0/21, 91.213.121.0/24)

Who house (amongst others) this lovely lot;

20091108003231        91.213.121.42        Failed resolution        www.windesktopdefender.com        http://www.windesktopdefender.com/DefenderInstall.exe

20091120105541        91.213.121.180        Failed resolution        personalprotector.net        http://personalprotector.net/download/?

20091203154847        91.213.121.180        Failed resolution        personalprotector.net        http://personalprotector.net/dl/setup.exe

20091203173009        91.213.121.185        Failed resolution        scan.lssecuritywebscan.com        http://scan.lssecuritywebscan.com/smrtprt_3/6/40017/

20091203183153        91.213.121.185        Failed resolution        scan.2009securitycenter.in        http://scan.2009securitycenter.in/download/smrtprt/install.php

20091203212829        91.213.121.220        Failed resolution        ihaerxi.cn        http://ihaerxi.cn/installer.70148.exe

20091203212849        91.213.121.220        Failed resolution        iqoysab.cn        http://iqoysab.cn/installer.70155.exe

20091203212855        91.213.121.220        Failed resolution        isyoti.cn        http://isyoti.cn/installer.70155.exe

20091203212902        91.213.121.220        Failed resolution        iveigyr.cn        http://iveigyr.cn/installer.70155.exe

20091203212915        91.213.121.220        Failed resolution        julxyaf.cn        http://julxyaf.cn/10/video.php?Author=Hugo&Length=49:16&Rating=5&Views=45890&thumbn=/10/img/thumbs/tvo041.jpg&wm=70394

20091203212928        91.213.121.220        Failed resolution        latgeuv.cn        http://latgeuv.cn/installer.1.exe

20091216200944        91.213.121.176        Failed resolution        1stantivirusplus.com        http://1stantivirusplus.com/install/avplus.exe

20091216225125        91.213.121.220        Failed resolution        ilipyw.cn        http://ilipyw.cn

20091216225137        91.213.121.220        Failed resolution        iniwuv.cn        http://iniwuv.cn

20091216230047        91.213.121.220        Failed resolution        www.komcyax.cn        http://www.komcyax.cn

20091218230707        91.213.121.86        Failed resolution        qzeo-ad.info        http://qzeo-ad.info/cgi-bin/gjj/eH891dd8d9V0100f060006R8f341c38102Tc23621f0203l0409317P000000080

20091218230714        91.213.121.86        Failed resolution        qzeo-ad.info        http://qzeo-ad.info/cgi-bin/gjj/eH891dd8d9V0100f060006R8f341c38102Tc23621f0203l0409317P000000081

20091218230720        91.213.121.86        Failed resolution        qzeo-ad.info        http://qzeo-ad.info/cgi-bin/gjj/eH891dd8d9V0100f060006R8f341c38102Tc23621f0203l0409317P000000082

20091219221451        91.213.121.176        Failed resolution        antivirusplus7.com        http://antivirusplus7.com/install/avplus.dll

20091219230615        91.213.121.19        Failed resolution        fastdownloadprotocol.org        http://fastdownloadprotocol.org/setup.exe

20091220001155        91.213.121.220        Failed resolution        ihagoin.cn        http://ihagoin.cn/load.exe

20091220001202        91.213.121.220        Failed resolution        ijobuaw.cn        http://ijobuaw.cn/load.exe

20091220001211        91.213.121.220        Failed resolution        ileufby.cn        http://ileufby.cn/load.exe

20091220001318        91.213.121.220        Failed resolution        iveigyr.cn        http://iveigyr.cn/load.exe

20091220002410        91.213.121.185        Failed resolution        scan.2009securitycenter.in        http://scan.2009securitycenter.in/download/smrtprt2/install.php?track_id=10001

20091222194806        91.213.121.88        Failed resolution        www.pelmeshko.cn        http://www.pelmeshko.cn/ketchup/trava.exe

20091230150650        91.213.121.220        Failed resolution        mofadic.cn        http://mofadic.cn/load.exe

20100107013408        91.213.121.176        Failed resolution        anti-virus-plus2011.com        http://anti-virus-plus2011.com/install/avplus.dll


AS49536 DENTA-AS DENTAGLOBAL SYS (91.207.116.0/23)

20090803185100        91.207.116.22        Failed resolution        kervinly.com        http://kervinly.com/bs2/file.exe

20090808063743        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/ikl.exe

20090808064306        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/238.exe

20090808065605        91.207.116.22        Failed resolution        kvgrtt.com        http://kvgrtt.com/r/mail.exe

20090808071254        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/install_126.exe

20090808071300        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/lich.exe

20090808071306        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/ml.exe

20090808082827        91.207.116.22        Failed resolution        hellnax.com        http://hellnax.com/e/eg.exe

20090820175828        91.207.116.22        Failed resolution        shipal.eu        http://shipal.eu/z/win.exe

20090820175835        91.207.116.22        Failed resolution        shipal.eu        http://shipal.eu/iereg.exe

20090823184023        91.207.116.22        Failed resolution        tralalzlocc.com        http://tralalzlocc.com/ee/238.exe

20090823184029        91.207.116.22        Failed resolution        tralalzlocc.com        http://tralalzlocc.com/ee/cb.exe

20090823184034        91.207.116.22        Failed resolution        tralalzlocc.com        http://tralalzlocc.com/ee/ear.exe

20090823184040        91.207.116.22        Failed resolution        tralalzlocc.com        http://tralalzlocc.com/ee/mp.exe

20090914174808        91.207.116.11        Failed resolution        wwwaaa101.com        http://wwwaaa101.com/work/money.exe

20091001164708        91.207.116.55        Failed resolution        best-scanpc.org        http://best-scanpc.org/cgi-bin/load.pl

20091002184731        91.207.116.55        Failed resolution        onlinescanxppro.com        http://onlinescanxppro.com/cgi-bin/download.pl?code=0000920

20091002184737        91.207.116.55        Failed resolution        onlinescanxppro.com        http://onlinescanxppro.com/cgi-bin/get.pl?l=0000920

20091002184743        91.207.116.55        Failed resolution        onlinescanxppro.com        http://onlinescanxppro.com/dfghfghgfj.dll

20091002184749        91.207.116.55        Failed resolution        onlinescanxppro.com        http://onlinescanxppro.com/loads.php?code=0000920

20091003025943        91.207.116.44        Failed resolution        aahsdvsynrrmwnbmpklb.cn        http://aahsdvsynrrmwnbmpklb.cn/259b4c25aa08557e7c8892c5d64253db.exe

20091003175954        91.207.116.44        Failed resolution        91.207.116.44        http://91.207.116.44/u5.exe

20091004183057        91.207.116.44        Failed resolution        barykcpveiwsgexkitsg.cn        http://barykcpveiwsgexkitsg.cn/get.php?id=crossales

20091004183119        91.207.116.44        Failed resolution        bfichgfqjqrtkwrsegoj.cn        http://bfichgfqjqrtkwrsegoj.cn/get.php?id=crossales

20091004231259        91.207.116.44        Failed resolution        91.207.116.44        http://91.207.116.44/1.dll

20091004231305        91.207.116.44        Failed resolution        barykcpveiwsgexkitsg.cn        http://barykcpveiwsgexkitsg.cn/88354926d0f0a49fc589ac0a7ccd4d4f.exe

20091004231351        91.207.116.44        Failed resolution        barykcpveiwsgexkitsg.cn        http://barykcpveiwsgexkitsg.cn/u5.exe

20091004231357        91.207.116.44        Failed resolution        barykcpveiwsgexkitsg.cn        http://barykcpveiwsgexkitsg.cn/crossales.exe

20091004231708        91.207.116.55        Failed resolution        downloadavr5.com        http://downloadavr5.com/dfghfghgfj.dll

20091004231714        91.207.116.55        Failed resolution        downloadavr5.com        http://downloadavr5.com/cgi-bin/download.pl?

20091004231838        91.207.116.44        Failed resolution        91.207.116.44        http://91.207.116.44/crossales.exe

20091004235932        91.207.116.55        Failed resolution        hard-xxx-tube.com        http://hard-xxx-tube.com/cgi-bin/flashpatch.pl?adv=820

20091007205011        91.207.116.44        Failed resolution        bfichgfqjqrtkwrsegoj.cn        http://bfichgfqjqrtkwrsegoj.cn/get.php?id=02979

20091007205216        91.207.116.44        Failed resolution        dhbomnljzgiardzlzvkp.cn        http://dhbomnljzgiardzlzvkp.cn/crossales.exe

20091007205224        91.207.116.44        Failed resolution        dhbomnljzgiardzlzvkp.cn        http://dhbomnljzgiardzlzvkp.cn/f4d3450bed777852be000d9ee1f4498e.exe

20091007205229        91.207.116.44        Failed resolution        dhbomnljzgiardzlzvkp.cn        http://dhbomnljzgiardzlzvkp.cn/get.php?id=f4d3450bed777852be000d9ee1f4498e

20091007205235        91.207.116.44        Failed resolution        dhbomnljzgiardzlzvkp.cn        http://dhbomnljzgiardzlzvkp.cn/u5.exe

20091007205241        91.207.116.44        Failed resolution        dlukhonqzidfpphkbjpb.cn        http://dlukhonqzidfpphkbjpb.cn/get.php?id=f4d3450bed777852be000d9ee1f4498e

20091007210403        91.207.116.44        Failed resolution        dlukhonqzidfpphkbjpb.cn        http://dlukhonqzidfpphkbjpb.cn/get.php?id=02979

20091007210409        91.207.116.44        Failed resolution        dlukhonqzidfpphkbjpb.cn        http://dlukhonqzidfpphkbjpb.cn/get.php?id=88354926d0f0a49fc589ac0a7ccd4d4f

20091010022315        91.207.116.55        Failed resolution        best-scan-pc.com        http://best-scan-pc.com/cgi-bin/load.pl

20091014184020        91.207.116.44        Failed resolution        downloadmasters.org        http://downloadmasters.org/get.php?id=crossales

20091014184829        91.207.116.44        Failed resolution        xmiueftbmemblatlwsrj.cn        http://xmiueftbmemblatlwsrj.cn:80/get.php?id=02979

20091014194646        91.207.116.55        Failed resolution        testavrdown.com        http://testavrdown.com/cgi-bin/get.pl?l=0001124

20091014194652        91.207.116.55        Failed resolution        downloadavr6.com        http://downloadavr6.com/cgi-bin/download.pl?code=0001124

20091014194755        91.207.116.44        Failed resolution        downloadmasters.org        http://downloadmasters.org/crossales.exe

20091014194802        91.207.116.44        Failed resolution        downloadmasters.org        http://downloadmasters.org/u5.exe

20091014200903        91.207.116.44        Failed resolution        xmiueftbmemblatlwsrj.cn        http://xmiueftbmemblatlwsrj.cn/1.dll

20091014201006        91.207.116.44        Failed resolution        xmiueftbmemblatlwsrj.cn        http://xmiueftbmemblatlwsrj.cn/crossales.exe

20091014201015        91.207.116.44        Failed resolution        xmiueftbmemblatlwsrj.cn        http://xmiueftbmemblatlwsrj.cn/u5.exe

20091014201026        91.207.116.44        Failed resolution        xmiueftbmemblatlwsrj.cn        http://xmiueftbmemblatlwsrj.cn/get.php?id=02910

20091014210807        91.213.94.130        Failed resolution        91.213.94.130        http://91.213.94.130/cgi-bin/options.cgi?user_id=1087349536&version_id=3&passphrase=fkjvhsdvlksdhvlsd&socks=28102&version=130&crc=00000000

20091015224214        91.207.116.44        Failed resolution        downloadmasters.org        http://downloadmasters.org/get.php?id=02979

20091015225545        91.207.116.55        Failed resolution        xxx-white-tube.net        http://xxx-white-tube.net/cgi-bin/flashpatch.pl?adv=1166&p=9

20091020011220        91.207.116.55        Failed resolution        best-scan-pc.net        http://best-scan-pc.net/cgi-bin/load.pl

20091020011939        91.207.116.55        Failed resolution        xxx-white-tube.net        http://xxx-white-tube.net/cgi-bin/flashpatch.pl

20091021232805        91.207.117.220        Failed resolution        iqoysab.cn        http://iqoysab.cn

20091021232831        91.207.117.220        Failed resolution        kinyfy.cn        http://kinyfy.cn

20091021232837        91.207.117.220        Failed resolution        komcyax.cn        http://komcyax.cn

20091023003118        91.207.117.220        Failed resolution        kotehiz.cn        http://kotehiz.cn

20091023003124        91.207.117.220        Failed resolution        kotehiz.cn        http://kotehiz.cn/installer.1.exe

20091024015233        91.207.116.55        Failed resolution        downloadavr6.com        http://downloadavr6.com/cgi-bin/download.pl?code=0001186

20091024015240        91.207.116.55        Failed resolution        downloadavr6.com        http://downloadavr6.com/dfghfghgfj.dll

20091024015607        91.207.117.220        Failed resolution        kotehiz.cn        http://kotehiz.cn/?wm=90001

20091024020151        91.207.117.220        Failed resolution        www.ijeife.cn        http://www.ijeife.cn

20091024020159        91.207.117.220        Failed resolution        www.ixohiyr.cn        http://www.ixohiyr.cn

20091026180701        91.207.116.44        Failed resolution        zcjsyrjiasdkohwgbpfs.cn        http://zcjsyrjiasdkohwgbpfs.cn/get.php?id=crossales

20091026181540        91.207.116.55        Failed resolution        downloadavr7.com        http://downloadavr7.com/cgi-bin/download.pl

20091026195438        91.207.116.55        Failed resolution        xxx-white-tube.org        http://xxx-white-tube.org/cgi-bin/flashpatch.pl

20091028023459        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/1198/e1.html

20091028023852        91.207.117.220        Failed resolution        latgeuv.cn        http://latgeuv.cn/?wm=7036701054

20091101130036        91.207.116.55        Failed resolution        best-scan.com        http://best-scan.com/?code=1205

20091101130926        91.207.117.220        Failed resolution        iwagily.cn        http://iwagily.cn/?wm=70349

20091101130933        91.207.117.220        Failed resolution        iwagily.cn        http://iwagily.cn/video.php

20091101130942        91.207.117.220        Failed resolution        jatokfi.cn        http://jatokfi.cn/video.php

20091101131439        91.207.117.220
91.207.117.220        Failed resolution
Failed resolution        ns1.ns-free-acc7.com        http://ns1.ns-free-acc7.com

20091101131446        91.207.117.220        Failed resolution        ns2.ns-free-acc7.com        http://ns2.ns-free-acc7.com

20091101133854        91.207.117.220        Failed resolution        lesrynu.cn        http://lesrynu.cn/?wm=7036701059

20091105131234        91.207.116.55        Failed resolution        downloadavr8.com        http://downloadavr8.com/cgi-bin/download.pl

20091105131241        91.207.116.55        Failed resolution        downloadavr8.com        http://downloadavr8.com/dfghfghgfj.dll

20091108003134        91.207.117.176        Failed resolution        avirplus2009.com        http://avirplus2009.com/install/avplus.exe

20091115160033        91.207.117.176        Failed resolution        antiivirusplus.com        http://antiivirusplus.com/install/avplus.exe

20091115160739        91.207.116.55        Failed resolution        malware-scan.biz        http://malware-scan.biz/cgi-bin/get_exe.pl?adv=1100&p=9

20091115161816        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/1097/e1.html

20091115162135        91.207.116.55        Failed resolution        malware-scan.biz        http://malware-scan.biz

20091115162408        91.207.116.55        Failed resolution        testavrdownnew.com        http://testavrdownnew.com/cgi-bin/get_exe.pl

20091115162934        91.207.116.55        Failed resolution        best-scan.com        http://best-scan.com

20091120101346        91.207.116.55        Failed resolution        downloadavr9.com        http://downloadavr9.com/cgi-bin/download.pl?code=0000058

20091120101354        91.207.116.55        Failed resolution        downloadavr9.com        http://downloadavr9.com/dfghfghgfj.dll

20091120101834        91.207.116.55        Failed resolution        malware-scaner.org        http://malware-scaner.org:80/cgi-bin/setup.pl?adv=1097&p=5

20091120104445        91.207.116.55        Failed resolution        downloadavr10.com        http://downloadavr10.com/cgi-bin/download.pl

20091120105143        91.207.117.220        Failed resolution        lisukaj.cn        http://lisukaj.cn/?wm=70352&st=of

20091120105204        91.207.116.55        Failed resolution        malware-scaner.biz        http://malware-scaner.biz/?code=1243

20091120110245        91.207.116.55        Failed resolution        white-xxx-tube.com        http://white-xxx-tube.com/cgi-bin/setuppatch.pl

20091120112820        91.207.117.176        Failed resolution        aviirusplus.com        http://aviirusplus.com/install/avplus.dll

20091120112823        91.207.117.176        Failed resolution        aviirusplus.com        http://aviirusplus.com/install/avplus.exe

20091120112850        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/1138/e1.html

20091120113157        91.207.117.220        Failed resolution        iqoysab.cn        http://iqoysab.cn/

20091120113223        91.207.117.220        Failed resolution        kazyjdi.cn        http://kazyjdi.cn

20091120113223        91.207.117.220        Failed resolution        kazyjdi.cn        http://kazyjdi.cn

20091120113244        91.207.117.220        Failed resolution        lizugco.cn        http://lizugco.cn/

20091120113244        91.207.117.220        Failed resolution        lizugco.cn        http://lizugco.cn/

20091120113250        91.207.117.220        Failed resolution        lojatge.cn        http://lojatge.cn/?wm=7036701060

20091120113251        91.207.117.220        Failed resolution        lojatge.cn        http://lojatge.cn/?wm=7036701060

20091120113257        91.207.117.220        Failed resolution        lojatge.cn        http://lojatge.cn/installer.7036701060.exe

20091120113257        91.207.117.220        Failed resolution        lojatge.cn        http://lojatge.cn/installer.7036701060.exe

20091120113304        91.207.117.220        Failed resolution        lybokag.cn        http://lybokag.cn/

20091120113304        91.207.117.220        Failed resolution        lybokag.cn        http://lybokag.cn/

20091120113312        91.207.117.220        Failed resolution        lyqteip.cn        http://lyqteip.cn/

20091120113312        91.207.117.220        Failed resolution        lyqteip.cn        http://lyqteip.cn/

20091120113322        91.207.117.220        Failed resolution        macgum.cn        http://macgum.cn/

20091120113322        91.207.117.220        Failed resolution        macgum.cn        http://macgum.cn/

20091120113339        91.207.117.220        Failed resolution        mazhywe.cn        http://mazhywe.cn/

20091120113339        91.207.117.220        Failed resolution        mazhywe.cn        http://mazhywe.cn/

20091122183110        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/cgi-bin/setup.pl?1138

20091122183117        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/cgi-bin/go.jpg

20091122183124        91.207.116.55        Failed resolution        coolcount1.com        http://coolcount1.com/cgi-bin/logo.gif

20091124151805        91.207.116.55        Failed resolution        pc-scanner.info        http://pc-scanner.info/?code=1138

20091124151821        91.207.116.55        Failed resolution        pc-scanner.info        http://pc-scanner.info/cgi-bin/setup.pl?adv=1138&p=5

20091124192005        91.207.116.55        Failed resolution        malware-scaner.biz        http://malware-scaner.biz/cgi-bin/setup.pl?adv=1243&p=5

20091125000124        91.207.116.55        Failed resolution        pc-scanner.net        http://pc-scanner.net/?code=1140


Both of these networks are dedicated to malicious activity from what I've seen.

Anyone else seeing a pattern here? It's begging the question of why RETN aren't putting a stop to this. They're the ones providing the upstream connectivity, so surely, as was done to Riccom a few weeks ago, they could shut this lot down?

There's also a connection here, to Rise

http://www.robtex.com/asmacro/as-rise.html

Which has ties to NETASSIST (and yep, so 3 of the above). NETASSIST have ties to the likes of root eSolutions and several other Ukrainian AS's;

http://www.robtex.com/as/as29632.html#peer

I'm looking forward to RETN's explanation for this one, whatever it may be.

No comments: