Sponsored by..

Tuesday, 20 November 2012

Malware sites to block 20/11/12

This huge pile of malware sites and IPs is connected with these malicious emails being distributed in the Netherlands. All the sites are interconnected through their black hat infrastructure and are eith er being used for malware distribution or some other evil activity:

5.39.8.105 (OVH, Ireland)
46.249.38.27 (Hotkey, Russia)
62.109.31.36 (TheFirst, Russia)
64.79.64.170 (XLHost, US)
78.46.198.143 (GPI Holding,US)
78.110.61.186 (Hosting Telesystems, Russia)
91.220.35.42 (Zamahost, Russia)
91.220.35.74 (Zamahost, Russia)
91.231.156.55 (Sevzapkanat-Unimars, Russia)
93.174.90.81 (Ecatel, Netherlands)
95.211.9.46 (Leaseweb, Netherlands)
95.211.9.55 (Leaseweb, Netherlands)
149.154.67.103 (TheFirst, Russia)
176.9.179.170 (Siteko, Russia)
178.63.226.203 (Avist, Russia)
178.63.247.189 (GPI Holding,US)
178.162.134.205 (AlfaInternet, Russia)
184.82.101.52 (HostNOC, US)
193.161.86.43 (Host-Telecom, Czech Republic)
194.62.233.19 (Stils-Grupp, Russia)
198.23.139.199 (Chicago VPS, US)
208.88.226.231 (WZ Communications, US)

If you want to block those Russian hosts more widely, perhaps use the following list:
46.249.38.0/24
62.109.28.0/22
64.79.64.170
78.46.198.136/29
78.110.61.186
91.220.35.0/24
91.231.156.0/24
93.174.90.81
95.211.9.46
95.211.9.55
149.154.66.0/23
176.9.179.128/26
178.63.226.192/26
178.63.247.128/26
178.162.134.192/26
184.82.101.52
193.161.86.43
194.62.233.0/24
198.23.139.199

Alternatively, this is a plain list of all the IPs and domains that I can identify in this cluster. There are a LOT of them, sorry..
5.39.8.105
46.249.38.27
62.109.31.36
64.79.64.170
78.46.198.143
78.110.61.186
91.220.35.42
91.220.35.74
91.231.156.55
93.174.90.81
95.211.9.46
95.211.9.55
149.154.67.103
176.9.179.170
178.63.226.203
178.63.247.189
178.162.134.205
184.82.101.52
193.161.86.43
194.62.233.19
198.23.139.199
208.88.226.231
3dsec.4pu.com
617.ddns.info
617c.ddns.info
623c.ddns.info
95ccc.com
aboutmailmerging.net
achieve8searcherscom.com
achieve8searcherscom.net
adventureslh.net
advert01.wwwapp-myups.net
advert02.wwwapp-myups.net
alhmzpxsdtj.net
almanaccategorycommercial.org
aloha.4mydomain.com
alwaysallowdream.net
amalgamagain.info
analogmodemtittering.info
angleheadlines.info
anonymizerbookstore.pro
anxdn.info
anytimetunnel.biz
aol.adswrapper.com
appenoughceleronbased.org
artclipsamet.com
artistsbannerlike.pro
askplus.com
atstreetside.info
augmxqkfile.info
austerecam.net
aybqlgximi.info
babeqapa.tk
backgroundpioneered.org
bad2gooddog.com
badgestargetshaped.info
bannedbarefoot.info
barrenislandbeads.com
basetavo.tk
bcwud.info
bender.ddns.info
berasta.org
beregans.com
bestlermecg.info
bestmakingbreadonline.com
bestsearch.info
big-tube.info
blackboardcomodos.info
blizzardcwopp.net
bmjxsqrs.info
bombastikso.org
bonesgargamel.info
bothbe.org
brieffaith.info
brokenearparent.info
brounsnastles.com
builderskating.net
burdeningyp.org
businezzz.com
camimia.asia
cannotkubrick.info
caseroutinely.net
cassettesbeauty.org
castlerockcare.com
castlerockholiday.com
cdn.milstone.org
cdn2.milstone.org
chalais.com
chasidydil.mobi
cjsmweubiwy.info
clientyestab.biz
clipsvuze.info
clusterconference.com
cocktailpipeline.org
collapsesorenson.info
collegesorcerer.org
coloradopinolo.com
companypinolo.com
compellingpartition.org
conandeliberately.pro
constructionverified.org
coolhottube.net
copyahnlabs.info
countess.com
coupledqiks.org
crystalsave.net
ctosmamas.org
cuttinggoghs.info
cyberlinkspaypass.info
daertnop.ftp1.biz
dandyapples.pro
daoakxuko.info
darvuha.info
ddntruc.info
ddred.ddns.info
decreasesnotable.net
deductedsweatinducing.org
degreeswiftly.pro
deluxearpeggiated.info
delvingchromakey.info
demandededitions.info
densepromissory.info
dependthreelicense.info
desktopbasedwolfish.net
devidugo.tk
dialinlengths.info
discoverleaving.net
districtagenda.net
diyoyowo.tk
dkpdistrib.com
dns5number.com
dnsnumber4.com
docktoolsthe.org
doggedapril.info
dpljrtcsvva.info
dqnmuraq.info
dqnoctx.info
dreamflaunt.pro
drillup.itemdb.com
dsmxxqyh.info
dwall.info
ebaymoat.pro
echurchstrategies.com
emgsiavpjrlx.info
enemiesfocuses.org
epbdkhoacl.info
ergonomicbegging.net
eservicetimesyncing.org
everevolvingredact.info
excellentinternetmoney.com
executiveshours.org
exkcrch.info
experiencegraphical.net
extchangeable.net
eyecolorreserve.pro
faqseer.ddns.info
fdknklmlmb.pro
fejyvrhd.info
ffiae.info
fgypodecxg.info
figuringdictating.net
findrevenue.net
fireddependence.net
firefoxslacker.pro
fix-lite.info
fix-online.info
fklnbiokjemiwovpe.pro
fkvwtviospticmvjbhkae.usa.cc
flapshrill.net
flyswatinterestingly.info
fortraff.ddns.info
fqxxifs.info
fredamm4.cu.cc
freesnonintegral.net
fresh.otzo.com
frwdlink.in
ftpfreame.ddns.info
gadogube.tk
gdzwqbg.info
geodeskilar.info
geossh.net
geotagspogoplugs.org
getdnscheck.info
getestore.org
gfnsdntgb.info
ghrptvjb.info
gipifequ.tk
google123.flu.cc
google-script.net
gospodin.co.uk
governingjerk.org
green-suntech.com
grewforks.info
gromdemn77bert.pro
gudangbrankas.com
gymybrbcmfe.info
handishades.com
heartedmessaging.info
hemptalk.net
hmdvebvs.info
holdingshitech.info
homescastlerock.com
hostingmir.net
hourlyfyis.info
hsskvmg.info
humanitiesinstitute.com
hwpwecgl.info
ibabkmm.info
iftttcore.info
igadgetcapable.net
igtoydlufrpq.info
ihamehq.info
imagereport470x80.net
img.businessboomerflorida.com
img.chappellroberts.biz
img.chappellroberts.com
img.growmycash.com
img.ksyc1039.com
img.ksyc1039.info
img.ksyc1039.org
img.mitchcota.com
img.powerisfun.com
img.thefriar.com
img2.theqrpros.com
indiesblinks.com
influxtechnologies.com
innertextbosher.com
instructedtabtastic.org
interpretondemand.pro
intervalviicompatible.info
invadeinsecure.org
invitationsdoand.pro
iogdbsxmtk.pro
ipoiuhipowuujhwrtvas.flu.cc
iqyzfevrf.info
itouchsilence.net
jackerdesktopstyle.info
janomeku.tk
jdkthinkfree.net
jeuae.info
jeyhjrif.info
jfbwzb.info
jltwphu.info
josaheb.tk
junkwifi.com
jywkymar.info
jzmpmdodijj.info
karudozu.tk
kcgysjg.info
kcqobilky.info
kdvltguzobyj.info
kdvxojwpyzna.info
keystransactions.com
keyxdgpi.info
khdnqjau.info
kidasivi.tk
kinkosfragile.pro
kiwkemw.info
kohvragbmen.info
kqjoxyoe.info
kxxmnafgjeg.info
lasttube.info
lawbureau.com
leakedla.net
leddate.net
lesnegra.info
lgiqe.info
lslouxjrp.info
lunivusu.tk
lycyybse.info
mafpsqen.info
mandyeffect.com
mcclam.com
mdacparticular.org
mechcomm.net
mekanuki.tk
menugibberish.net
microsoftformatnuts.com
mixmoney.info
mkbeun.info
mkvpcsgg.info
moejpizdeprivet.org
mofaxeq5.cu.cc
moneysold.net
moneysporchefancy.net
moviehong.net
mugalkzr.info
my-best-tube.net
mydnsmask.info
mygreentube.net
mynewtube.net
nameshistory.info
ndwlmifgtox.info
nerosuptodate.org
netbooksmcafees.org
netboosterbreathe.net
new-browser1.ru
newcomersocialmediaminded.info
ngjfwcex.info
nicschleck5.com
nioterlybwma.info
nocejose.tk
nofussdonuts.org
notchedidrive.info
nxybedq.info
obitalkcomemptied.pro
obstacledogcams.org
occupyrent.com
ojkuxrfnwd.net
onedreamnetwork.com
oozeeven.org
opelcbgy.info
opwaksumd.info
ottnejwtsyn.info
ouviqqiift.info
overseassouth.net
oyparncfzw.info
packsos.info
paintsg.net
paisdhcgwrjklasdrt.usa.cc
palmwellreceived.net
panelsadvise.net
paqruwzktc.info
passesdemocratic.net
pathnamemypogoplugcom.net
pazza-inter.com
pdvfywomxtl.net
pervasivefootage.org
php.telwire.net
pihbqmtyjlz.info
piwroicybwyvnatywqerf.flu.cc
pizadaivanonaprivet.org
pksfxserverclass.net
plancentrallaura.org
planesmeasuring.pro
playpiano.info
plusesquotes.info
poishealthcare.info
polarizebit.org
polneska.ipq.co
posduet.org
pqdefywsxova.org
pregnancytestpaper.com
privacyparentalintersections.pro
processedinserting.info
proddingappsumo.info
projectthermometerstyle.net
promotesmetasearch.net
pxanwmcqod.info
pzoibqzb.info
qchtvjpmyfo.info
qesigafu.tk
qkfrcptayzj.info
qomazime.tk
qonla.info
qoxeciw.tk
qpflbmakjwe.info
qqpyzahqpqw.info
quxozife.tk
qzeryra.info
racksschools.pro
radialinfested.net
ragoose.ipq.co
ratiofollows.pro
rbgyoxngr.info
rdparentalcontrol.net
recorderscaloriecounting.net
recordingbarcelonas.info
reflectshello.info
resemblesvisa.info
resultsreacts.pro
retweetstasteful.net
retzaser.com
rfktgh.info
rhymingtravelocity.info
rhythmsstuttering.net
rivzdktjw.info
romanticring.com
royalmojito.org
rpfstorage.org
ruralnoise.info
saavihaunting.net
salzgrrckpa.info
scan-domain.org
sdavey.com
secondarydatapad.info
seguhuqo.tk
selectivelylanguages.info
semlnqzn.info
senetef.tk
servicesinstitute.com
sexintheroom.net
sgmlscreensavers.biz
sharpeyedresizable.net
shava.sytes.net
shownheadphone.net
silentpentest.com
sivoyase.tk
sjdwugpxnb.info
slewhovering.net
soft-tube.net
solicitationattorney.com
songbookterrified.pro
sorryintellicookie.net
spaceyourfilesbig.chickenkiller.com
speedanymore.net
spousechaptersthe.net
ssbigpicture.net
sscnvcxkcsh.info
startinternetmarketing4u.com
stats-tracking.ibiz.cc
storyboardonlysplines.info
stped.dnset.com
streamlinespaging.org
substitutesjeani.net
suitautorun.in
sundayhammered.net
superfasthardcopy.net
svqzmfcapho.info
svrealestates.com
swqocit.info
syenial.com
syncreticorder.com
sytghikbl.info
szjzico.info
tatibeg.tk
tceeeuq.info
teleprompterenglish.net
tenscrub.net
tethertremendous.info
tewnrpvxbdjc.info
texturesbusinesslevel.in
tiesink.net
tiffanylplee.com
tiffciscos.biz
tiledblacks.biz
tllnerim.info
tnciayzr.info
tobackupmxp.info
totesynopsis.net
traaf.ddns.info
traf13.ddns.info
trafferss.ddns.info
trafficstock.net
translucentattractive.net
trendmicrosemulate.info
trento.ikwb.com
tropicrentals.com
truestrategic.biz
tubeltd.net
tuhabos.tk
turocigu.tk
txhyzguwbdia.info
u83s.info
u86s.info
u87s.info
ufifkfwsnml.info
uigazjmeb.info
uihvdjf.info
uiolehvrfb.info
ukhercules.org
ultimate-boobs.com
ultqpdnrxh.info
umtxsx.info
unbootablemassively.info
undpower.co.uk
uninstallationcassette.net
urbansoulentertainment.com
user1.ddns.info
user3.ddns.info
useruploadedhumorist.info
usuiu.info
uyund.info
vansalivate.org
vendendoaqui.com
vennwake.info
viewcastlerock.com
vkdlbfh.info
vlbxty.info
vodkkaredbuuull.chickenkiller.com
wallarticles.com
wallmountedsubprojects.info
webcheckfinalizing.net
webcoupons2.com
weednav.info
weehourbravia.net
whicheverwe.info
win8searcherscom.com
wittierhoning.org
wnpagain.info
wogepil.tk
wrapeyeopening.info
wsrqeyqq.info
wupikbtq.info
www.obitalkcomemptied.pro
wwwapp-myups.com
wyllruoeueo.info
xcomctrlb.pro
xesidijo.tk
xhikjbtr.info
xidthronpemf.info
xijigaf.tk
xltube.info
xnqamke.info
x-red-tube.net
xszrccmve.info
ybnbqgqe.info
ybpekhvp.info
ydsvkx.info
yevetoma.tk
yfbthpdivlc.net
ylhwygggiy.info
yndgh.info
your-best-tube.net
yournewtube.net
zenithoutdoors.com
ziallow1990.com
zonermtbf.net
zqdrtnkhzd.info
ztmyno.info
zuretiy.tk
zvhtkpsnmdy.info
zvoxzgdrza.info


No comments: