CLEAN MX realtime database    
public access query for portal URL
Totally watched: 133750, to down: 0, to up: 51, changed ip: 0
As of 2013-05-23 20:09:14 CEST

This database consists of spamming URI, collected and verified since Jul 2008

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real portals function in this moment you make this query.(Sites may have been closed already..)
Our automatic portalswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0045 Seconds
Line#DateClosedhoursvirusnameip stateresponseIp initialAS#ip reviewURLDomaincountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1947152) 1947152 Report false positive Report closed case make a suggestion 2013-03-24 06:00:13 OVERDUE! 1453.2  defaced_site  up  alive SenderBaselookup 92.48.122.132 at virustotallookup 92.48.122.132 at Rus CERT university stuttgart germanylookup 92.48.122.132 at Ripe 92.48.122.132  AS29550 SenderBaselookup 31.193.142.196 at virustotallookup 31.193.142.196 at Rus CERT university stuttgart germanylookup 31.193.142.196 at Ripe 31.193.142.196 lookup in virustotal http://xtender.com  xtender.com  GB  RIPE  abuse@as29550.net  31.193.128.0 - 31.193.143.255  UK-POUNDHOST-20110427  Simply Transit Ltd  dns1.nettica.com  dns2.nettica.com  dns5.nettica.com  dns4.nettica.com  dns3.nettica.com lookup in virustotal http://xtender.com
2 follow up this item(1698179) 1698179 Report false positive Report closed case make a suggestion 2013-02-03 20:24:05 OVERDUE! 2614.8  defaced_site  up  alive SenderBaselookup 149.12.216.11 at virustotallookup 149.12.216.11 at Rus CERT university stuttgart germanylookup 149.12.216.11 at ARIN 149.12.216.11  AS174 SenderBaselookup 149.12.216.11 at virustotallookup 149.12.216.11 at Rus CERT university stuttgart germanylookup 149.12.216.11 at ARIN 149.12.216.11 lookup in virustotal http://www.casasbbb.com/sejeal.jpg  casasbbb.com  US  ARIN  abuse@cogentco.com  149.12.0.0 - 149.12.255.255  COGENT-149-12-16  PSINet, Inc. PSI-1 1015 31st St NW Washington DC 20007  dns1.nettica.com  dns3.nettica.com  dns5.nettica.com  dns2.nettica.com  dns4.nettica.com lookup in virustotal http://www.casasbbb.com/sejeal.jpg
3 follow up this item(2178977) 2178977 Report false positive Report closed case make a suggestion 2013-05-19 20:01:03      defaced_site  up  alive SenderBaselookup 109.203.121.32 at virustotallookup 109.203.121.32 at Rus CERT university stuttgart germanylookup 109.203.121.32 at Ripe 109.203.121.32  AS29550 SenderBaselookup 109.203.121.32 at virustotallookup 109.203.121.32 at Rus CERT university stuttgart germanylookup 109.203.121.32 at Ripe 109.203.121.32 lookup in virustotal http://www.livebingonetwork.co.uk  livebingonetwork.co.uk  GB  RIPE  abuse@eukhost.com  109.203.96.0 - 109.203.127.255  UK-EUKHOST-20100303  eUKhost LTD  dns3.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns2.nettica.com lookup in virustotal http://www.livebingonetwork.co.uk
4 follow up this item(1698884) 1698884 Report false positive Report closed case make a suggestion 2013-02-04 06:24:02 OVERDUE! 2604.8  defaced_site  up  alive SenderBaselookup 89.186.94.186 at virustotallookup 89.186.94.186 at Rus CERT university stuttgart germanylookup 89.186.94.186 at ARIN 89.186.94.186  AS8075 SenderBaselookup 65.52.128.33 at virustotallookup 65.52.128.33 at Rus CERT university stuttgart germanylookup 65.52.128.33 at ARIN 65.52.128.33 lookup in virustotal http://www.fotomorena.it  fotomorena.it  US  ARIN  abuse@msn.com  65.52.0.0 - 65.55.255.255  MICROSOFT-1BLK  Microsoft Corp MSFT One Microsoft Way Redmond WA 98052  dns4.nettica.com  dns2.nettica.com  dns5.nettica.com  dns1.nettica.com  dns3.nettica.com lookup in virustotal http://www.fotomorena.it
5 follow up this item(1698885) 1698885 Report false positive Report closed case make a suggestion 2013-02-04 06:24:02 OVERDUE! 2604.8  defaced_site  up  alive SenderBaselookup 89.186.94.186 at virustotallookup 89.186.94.186 at Rus CERT university stuttgart germanylookup 89.186.94.186 at ARIN 89.186.94.186  AS8075 SenderBaselookup 65.52.128.33 at virustotallookup 65.52.128.33 at Rus CERT university stuttgart germanylookup 65.52.128.33 at ARIN 65.52.128.33 lookup in virustotal http://www.galibox.com  galibox.com  US  ARIN  abuse@msn.com  65.52.0.0 - 65.55.255.255  MICROSOFT-1BLK  Microsoft Corp MSFT One Microsoft Way Redmond WA 98052  dns1.nettica.com  dns3.nettica.com  dns5.nettica.com  dns4.nettica.com  dns2.nettica.com lookup in virustotal http://www.galibox.com
6 follow up this item(1698889) 1698889 Report false positive Report closed case make a suggestion 2013-02-04 06:24:02 OVERDUE! 2604.8  defaced_site  up  alive SenderBaselookup 89.186.94.186 at virustotallookup 89.186.94.186 at Rus CERT university stuttgart germanylookup 89.186.94.186 at ARIN 89.186.94.186  AS8075 SenderBaselookup 65.52.128.33 at virustotallookup 65.52.128.33 at Rus CERT university stuttgart germanylookup 65.52.128.33 at ARIN 65.52.128.33 lookup in virustotal http://www.diemmegisecurity.it  diemmegisecurity.it  US  ARIN  abuse@msn.com  65.52.0.0 - 65.55.255.255  MICROSOFT-1BLK  Microsoft Corp MSFT One Microsoft Way Redmond WA 98052  dns2.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns3.nettica.com lookup in virustotal http://www.diemmegisecurity.it
7 follow up this item(1341620) 1341620 Report false positive Report closed case make a suggestion 2012-10-23 04:11:58 OVERDUE! 5104  defaced_site  up  alive SenderBaselookup 212.64.146.84 at virustotallookup 212.64.146.84 at Rus CERT university stuttgart germanylookup 212.64.146.84 at Ripe 212.64.146.84  AS15395 SenderBaselookup 212.64.146.84 at virustotallookup 212.64.146.84 at Rus CERT university stuttgart germanylookup 212.64.146.84 at Ripe 212.64.146.84 lookup in virustotal http://www.summermadness.co.uk/a.htm  summermadness.co.uk  GB  RIPE  abuse@rackspace.com  212.64.146.80 - 212.64.146.87  RSPC-UK-RTNetworks-Ltd  RTNetworks Ltd IP Space  dns3.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns2.nettica.com lookup in virustotal http://www.summermadness.co.uk/a.htm
8 follow up this item(2108999) 2108999 Report false positive Report closed case make a suggestion 2013-04-17 23:01:02      defaced_site  up  alive SenderBaselookup 81.94.207.107 at virustotallookup 81.94.207.107 at Rus CERT university stuttgart germanylookup 81.94.207.107 at Ripe 81.94.207.107  AS35662 SenderBaselookup 81.94.207.107 at virustotallookup 81.94.207.107 at Rus CERT university stuttgart germanylookup 81.94.207.107 at Ripe 81.94.207.107 lookup in virustotal http://api.fedex1.com/6018/dc.txt  fedex1.com  GB  RIPE  abuse@redstation.com  81.94.204.0 - 81.94.207.255  REDSTATION  Redstation LimitedDedicated Servers  dns1.nettica.com  dns2.nettica.com  dns5.nettica.com     lookup in virustotal http://api.fedex1.com/6018/dc.txt
9 follow up this item(1694219) 1694219 Report false positive Report closed case make a suggestion 2013-02-02 20:12:03 OVERDUE! 2639  defaced_site  up  alive SenderBaselookup 176.56.61.89 at virustotallookup 176.56.61.89 at Rus CERT university stuttgart germanylookup 176.56.61.89 at Ripe 176.56.61.89  ASNA.185.0.0.0 - 185.255.255.255 SenderBaselookup 185.17.180.10 at virustotallookup 185.17.180.10 at Rus CERT university stuttgart germanylookup 185.17.180.10 at Ripe 185.17.180.10 lookup in virustotal http://www.worldwildlifeimages.com/sejea ...  worldwildlifeimages.com  EU  RIPE  abuse@ripe.net  185.0.0.0 - 185.255.255.255  EU-ZZ-185  RIPE NCCEuropean Regional Registry  dns3.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns2.nettica.com lookup in virustotal http://www.worldwildlifeimages.com/sejea ...
10 follow up this item(2119494) 2119494 Report false positive Report closed case make a suggestion 2013-04-22 19:00:08      unknown_html  up  alive SenderBaselookup 96.46.48.12 at virustotallookup 96.46.48.12 at Rus CERT university stuttgart germanylookup 96.46.48.12 at ARIN 96.46.48.12  AS36689 SenderBaselookup 96.46.48.12 at virustotallookup 96.46.48.12 at Rus CERT university stuttgart germanylookup 96.46.48.12 at ARIN 96.46.48.12 lookup in virustotal http://csgnewyork.com/wp-content/plugins ...  csgnewyork.com  US  ARIN  admin@dotcompower.com  96.46.48.0 - 96.46.48.127  SFLINKS  P.O. Box 591812 San Francisco CA 94159-1812  dns2.nettica.com  dns1.nettica.com  dns5.nettica.com  dns3.nettica.com  dns4.nettica.com lookup in virustotal http://csgnewyork.com/wp-content/plugins ...
11 follow up this item(1585154) 1585154 Report false positive Report closed case make a suggestion 2012-12-12 23:30:06 OVERDUE! 3883.7  unknown_html_RFI_shell  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/ckjA2  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns3.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns2.nettica.com lookup in virustotal http://migre.me/ckjA2
12 follow up this item(2177898) 2177898 Report false positive Report closed case make a suggestion 2013-05-19 08:00:15      TR/ATRAPS.Gen  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/eB0bL  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns2.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns3.nettica.com lookup in virustotal http://migre.me/eB0bL
13 follow up this item(2121619) 2121619 Report false positive Report closed case make a suggestion 2013-04-23 23:00:17      unknown_html  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/efe6p  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns1.nettica.com  dns4.nettica.com  dns5.nettica.com  dns2.nettica.com  dns3.nettica.com lookup in virustotal http://migre.me/efe6p
14 follow up this item(2173880) 2173880 Report false positive Report closed case make a suggestion 2013-05-16 15:30:16      unknown_html_RFI_shell  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/ey8cW  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns1.nettica.com  dns2.nettica.com  dns5.nettica.com  dns4.nettica.com  dns3.nettica.com lookup in virustotal http://migre.me/ey8cW
15 follow up this item(1579498) 1579498 Report false positive Report closed case make a suggestion 2012-12-08 00:07:00 OVERDUE! 4003.1  unknown_html  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/cgOGH  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns3.nettica.com  dns4.nettica.com  dns5.nettica.com  dns1.nettica.com  dns2.nettica.com lookup in virustotal http://migre.me/cgOGH
16 follow up this item(2160122) 2160122 Report false positive Report closed case make a suggestion 2013-05-09 20:30:30      unknown_exe  up  alive SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46  AS15201 SenderBaselookup 200.98.131.46 at virustotallookup 200.98.131.46 at Rus CERT university stuttgart germanylookup 200.98.131.46 at LACNIC 200.98.131.46 lookup in virustotal http://migre.me/eoslg  migre.me  BR  LACNIC  l-registrobr-uol@corp.uol.com.br  200.98.0.0 - 200.98.255.255  001.109.184/0001-95  Universo Online S.A.  dns2.nettica.com  dns1.nettica.com  dns5.nettica.com  dns4.nettica.com  dns3.nettica.com lookup in virustotal http://migre.me/eoslg
17 follow up this item(2127361) 2127361 Report false positive Report closed case make a suggestion 2013-04-26 15:54:12      cleanmx_generic  up  alive SenderBaselookup 174.120.50.162 at virustotallookup 174.120.50.162 at Rus CERT university stuttgart germanylookup 174.120.50.162 at ARIN 174.120.50.162  AS36420, AS30315, AS13749, AS21844 SenderBaselookup 174.120.50.162 at virustotallookup 174.120.50.162 at Rus CERT university stuttgart germanylookup 174.120.50.162 at ARIN 174.120.50.162 lookup in virustotal http://www.gbmmarketing.com/hoss.htm  gbmmarketing.com  US  ARIN  noc@theplanet.com  174.120.0.0 - 174.123.255.255  NETBLK-THEPLANET-BLK-16  ThePlanet.com Internet Services, Inc. TPCM 315 Capitol Suite 205 Houston TX 77002  dns1.nettica.com  dns2.nettica.com  dns5.nettica.com  dns3.nettica.com  dns4.nettica.com lookup in virustotal http://www.gbmmarketing.com/hoss.htm
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.