CLEAN MX realtime database    
public access query for portal URL
Totally watched: 135103, to down: 0, to up: 51, changed ip: 0
As of 2013-05-21 20:07:11 CEST

This database consists of spamming URI, collected and verified since Jul 2008

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real portals function in this moment you make this query.(Sites may have been closed already..)
Our automatic portalswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0031 Seconds
Line#DateClosedhoursvirusnameip stateresponseIp initialAS#ip reviewURLDomaincountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1851017) 1851017 Report false positive Report closed case make a suggestion 2013-02-28 13:36:03 OVERDUE! 1973.7  defaced_site  up  alive SenderBaselookup 67.227.148.208 at virustotallookup 67.227.148.208 at Rus CERT university stuttgart germanylookup 67.227.148.208 at ARIN 67.227.148.208  AS32244 SenderBaselookup 72.52.186.61 at virustotallookup 72.52.186.61 at Rus CERT university stuttgart germanylookup 72.52.186.61 at ARIN 72.52.186.61 lookup in virustotal http://www.cafejiran.co.za  cafejiran.co.za  US  ARIN  abuse@liquidweb.com  72.52.128.0 - 72.52.191.255  LIQUIDWEB-6  Liquid Web, Inc. LQWB 4210 Creyts Rd. Lansing MI 48917  ns1.host-h.net  ns1.dns-h.com  ns2.host-h.net     lookup in virustotal http://www.cafejiran.co.za
2 follow up this item(1107752) 1107752 Report false positive Report closed case make a suggestion 2012-05-12 14:18:03 OVERDUE! 8982  defaced_site  up  alive SenderBaselookup 41.203.18.21 at virustotallookup 41.203.18.21 at Rus CERT university stuttgart germanylookup 41.203.18.21 at AFRINIC 41.203.18.21  AS16637 SenderBaselookup 196.22.132.153 at virustotallookup 196.22.132.153 at Rus CERT university stuttgart germanylookup 196.22.132.153 at AFRINIC 196.22.132.153 lookup in virustotal http://www.jeanettablignaut.com/wordpres ...  jeanettablignaut.com  ZA  AFRINIC  afrinic@hetzner.co.za  196.22.132.0 - 196.22.132.255  Hetz-Managed-Range1  Dedicated and shared managed servers  ns1.dns-h.com  ns1.host-h.net  ns2.host-h.net     lookup in virustotal http://www.jeanettablignaut.com/wordpres ...
3 follow up this item(1680999) 1680999 Report false positive Report closed case make a suggestion 2013-01-30 13:30:03 OVERDUE! 2669.8  defaced_site  up  alive SenderBaselookup 41.204.200.186 at virustotallookup 41.204.200.186 at Rus CERT university stuttgart germanylookup 41.204.200.186 at AFRINIC 41.204.200.186  AS16637 SenderBaselookup 41.204.200.186 at virustotallookup 41.204.200.186 at Rus CERT university stuttgart germanylookup 41.204.200.186 at AFRINIC 41.204.200.186 lookup in virustotal http://www.gapfactor.co.za/sejeal.jpg  gapfactor.co.za  ZA  AFRINIC  afrinic@hetzner.co.za  41.204.200.0 - 41.204.203.255  Hetz-CPT-Managed-5-6  CPT Managed 5 and 6 and SSL allocation ranges  ns1.dns-h.com  ns1.host-h.net  ns2.host-h.net     lookup in virustotal http://www.gapfactor.co.za/sejeal.jpg
4 follow up this item(2171448) 2171448 Report false positive Report closed case make a suggestion 2013-05-15 17:54:03      defaced_site  up  alive SenderBaselookup 196.40.97.111 at virustotallookup 196.40.97.111 at Rus CERT university stuttgart germanylookup 196.40.97.111 at AFRINIC 196.40.97.111  AS37153 SenderBaselookup 196.40.97.111 at virustotallookup 196.40.97.111 at Rus CERT university stuttgart germanylookup 196.40.97.111 at AFRINIC 196.40.97.111 lookup in virustotal http://www.siyayaskills.co.za/x.htm  siyayaskills.co.za  ZA  AFRINIC  brad.hendrickse@mtnbusiness.co.za  196.40.97.0 - 196.40.97.255  Hetz-CPT-Managed-2  CPT Managed 2  ns1.host-h.net  ns1.dns-h.com  ns2.host-h.net     lookup in virustotal http://www.siyayaskills.co.za/x.htm
5 follow up this item(1967681) 1967681 Report false positive Report closed case make a suggestion 2013-04-03 12:18:03      defaced_site  up  alive SenderBaselookup 41.72.159.36 at virustotallookup 41.72.159.36 at Rus CERT university stuttgart germanylookup 41.72.159.36 at AFRINIC 41.72.159.36  AS16637 SenderBaselookup 41.72.159.36 at virustotallookup 41.72.159.36 at Rus CERT university stuttgart germanylookup 41.72.159.36 at AFRINIC 41.72.159.36 lookup in virustotal http://www.mytop100ebooks.com  mytop100ebooks.com  ZA  AFRINIC  brad.hendrickse@mtnbusiness.co.za  41.72.128.0 - 41.72.159.255  HETZNER-20091125  Hetzner CC  ns1.host-h.net  ns1.dns-h.com  ns2.host-h.net     lookup in virustotal http://www.mytop100ebooks.com
6 follow up this item(1963823) 1963823 Report false positive Report closed case make a suggestion 2013-04-01 19:36:03      defaced_site  up  alive SenderBaselookup 50.63.58.233 at virustotallookup 50.63.58.233 at Rus CERT university stuttgart germanylookup 50.63.58.233 at AFRINIC 50.63.58.233  AS10474 SenderBaselookup 196.2.147.190 at virustotallookup 196.2.147.190 at Rus CERT university stuttgart germanylookup 196.2.147.190 at AFRINIC 196.2.147.190 lookup in virustotal http://progressivesigns.co.za  progressivesigns.co.za  ZA  AFRINIC  sys-admin@netactive.co.za  196.2.147.0 - 196.2.147.255  MWEB-VIC-COLOCATE  7500  ns1.host-h.net  ns1.dns-h.com  ns2.host-h.net     lookup in virustotal http://progressivesigns.co.za
7 follow up this item(1963829) 1963829 Report false positive Report closed case make a suggestion 2013-04-01 19:48:02      defaced_site  up  alive SenderBaselookup 50.63.58.233 at virustotallookup 50.63.58.233 at Rus CERT university stuttgart germanylookup 50.63.58.233 at AFRINIC 50.63.58.233  AS10474 SenderBaselookup 196.2.147.190 at virustotallookup 196.2.147.190 at Rus CERT university stuttgart germanylookup 196.2.147.190 at AFRINIC 196.2.147.190 lookup in virustotal http://stayin.co.za  stayin.co.za  ZA  AFRINIC  sys-admin@netactive.co.za  196.2.147.0 - 196.2.147.255  MWEB-VIC-COLOCATE  7500  ns1.dns-h.com  ns1.host-h.net  ns2.host-h.net     lookup in virustotal http://stayin.co.za
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.