CLEAN MX realtime database    
public access query for portal URL
Totally watched: 135837, to down: 0, to up: 50, changed ip: 0
As of 2013-05-21 11:06:59 CEST

This database consists of spamming URI, collected and verified since Jul 2008

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real portals function in this moment you make this query.(Sites may have been closed already..)
Our automatic portalswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.0099 Seconds
Line#DateClosedhoursvirusnameip stateresponseIp initialAS#ip reviewURLDomaincountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(1603181) 1603181 Report false positive Report closed case make a suggestion 2012-12-28 13:30:04 OVERDUE! 3453.3  defaced_site  up  alive SenderBaselookup 94.112.244.250 at virustotallookup 94.112.244.250 at Rus CERT university stuttgart germanylookup 94.112.244.250 at Ripe 94.112.244.250  AS6830 SenderBaselookup 94.112.244.250 at virustotallookup 94.112.244.250 at Rus CERT university stuttgart germanylookup 94.112.244.250 at Ripe 94.112.244.250 lookup in virustotal http://www.beerresearch.cz/x.txt  beerresearch.cz  CZ  RIPE   abuse@mistral.cz  94.112.0.0 - 94.112.255.255  UPC-BROADBAND-XXXVI  UPC Broadband Internet ServicesCZ-DATTELKABEL-20080709 #1CZ-DATTELKABEL-20080709 #2  ns.mcc.cz  ns1.mcc.cz       lookup in virustotal http://www.beerresearch.cz/x.txt
2 follow up this item(1295230) 1295230 Report false positive Report closed case make a suggestion 2012-09-04 22:06:07 OVERDUE! 6205.7  defaced_site  up  alive SenderBaselookup 212.58.116.69 at virustotallookup 212.58.116.69 at Rus CERT university stuttgart germanylookup 212.58.116.69 at Ripe 212.58.116.69  AS20771 SenderBaselookup 212.58.116.69 at virustotallookup 212.58.116.69 at Rus CERT university stuttgart germanylookup 212.58.116.69 at Ripe 212.58.116.69 lookup in virustotal http://pepsi.ge/storage/trabzonx.html  pepsi.ge  GE  RIPE  zzurashvili@ibasis.net  212.58.116.64 - 212.58.116.79  GE-BOOM  boomgeGE-IBERIAPAC-19990831GE-IBERIAPAC-19990831Optic Local Clients212.58.112.0/20  ns0.sanet.ge  ns1.sanet.ge       lookup in virustotal http://pepsi.ge/storage/trabzonx.html
3 follow up this item(1943333) 1943333 Report false positive Report closed case make a suggestion 2013-03-22 12:42:05 OVERDUE! 1438.1  defaced_site  up  alive SenderBaselookup 109.69.118.14 at virustotallookup 109.69.118.14 at Rus CERT university stuttgart germanylookup 109.69.118.14 at Ripe 109.69.118.14  AS50031 SenderBaselookup 109.69.118.14 at virustotallookup 109.69.118.14 at Rus CERT university stuttgart germanylookup 109.69.118.14 at Ripe 109.69.118.14 lookup in virustotal http://www.kulturterkep.zala.hu/x.txt  zala.hu  HU  RIPE  zsg@zalaszam.hu  109.69.118.0 - 109.69.119.255  ZALASZAM-NET  Zalaszam Informatika Kft.Zalaszam InfrastructureZalaszam Kft.Hungary  ns1.zalaszam.hu  ns.zala.hu       lookup in virustotal http://www.kulturterkep.zala.hu/x.txt
4 follow up this item(2097784) 2097784 Report false positive Report closed case make a suggestion 2013-04-13 14:00:19      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://test2.isousou.net/r00t.htm  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://test2.isousou.net/r00t.htm
5 follow up this item(2097783) 2097783 Report false positive Report closed case make a suggestion 2013-04-13 14:00:18      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://test1.isousou.net/r00t.htm  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://test1.isousou.net/r00t.htm
6 follow up this item(2097781) 2097781 Report false positive Report closed case make a suggestion 2013-04-13 14:00:17      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://rongying.isousou.net/r00t.htm  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://rongying.isousou.net/r00t.htm
7 follow up this item(2097773) 2097773 Report false positive Report closed case make a suggestion 2013-04-13 14:00:14      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://diaocha.isousou.net/r00t.htm  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://diaocha.isousou.net/r00t.htm
8 follow up this item(2097772) 2097772 Report false positive Report closed case make a suggestion 2013-04-13 14:00:13      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://cj.isousou.net/r00t.htm  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://cj.isousou.net/r00t.htm
9 follow up this item(2092616) 2092616 Report false positive Report closed case make a suggestion 2013-04-12 16:48:02      defaced_site  up  alive SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188  AS53935, AS6939 SenderBaselookup 199.192.157.188 at virustotallookup 199.192.157.188 at Rus CERT university stuttgart germanylookup 199.192.157.188 at ARIN 199.192.157.188 lookup in virustotal http://cjcx.isousou.net/x.txt  isousou.net  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://cjcx.isousou.net/x.txt
10 follow up this item(1963511) 1963511 Report false positive Report closed case make a suggestion 2013-04-01 14:36:04      defaced_site  up  alive SenderBaselookup 199.193.64.112 at virustotallookup 199.193.64.112 at Rus CERT university stuttgart germanylookup 199.193.64.112 at ARIN 199.193.64.112  AS53935 SenderBaselookup 199.193.64.112 at virustotallookup 199.193.64.112 at Rus CERT university stuttgart germanylookup 199.193.64.112 at ARIN 199.193.64.112 lookup in virustotal http://k564.com/a.htm  k564.com  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://k564.com/a.htm
11 follow up this item(1963277) 1963277 Report false positive Report closed case make a suggestion 2013-04-01 09:36:03      defaced_site  up  alive SenderBaselookup 199.114.242.194 at virustotallookup 199.114.242.194 at Rus CERT university stuttgart germanylookup 199.114.242.194 at ARIN 199.114.242.194  AS53935 SenderBaselookup 199.114.242.194 at virustotallookup 199.114.242.194 at Rus CERT university stuttgart germanylookup 199.114.242.194 at ARIN 199.114.242.194 lookup in virustotal http://shenyangs.com/a.htm  shenyangs.com  US  ARIN  zoujinhe@ehostingusa.com  199.114.240.0 - 199.114.247.255  VPS21003  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  dns19.hichina.com  dns20.hichina.com       lookup in virustotal http://shenyangs.com/a.htm
12 follow up this item(1958587) 1958587 Report false positive Report closed case make a suggestion 2013-03-29 02:30:02      defaced_site  up  alive SenderBaselookup 199.36.75.60 at virustotallookup 199.36.75.60 at Rus CERT university stuttgart germanylookup 199.36.75.60 at ARIN 199.36.75.60  AS53935, AS6939 SenderBaselookup 199.36.72.48 at virustotallookup 199.36.72.48 at Rus CERT university stuttgart germanylookup 199.36.72.48 at ARIN 199.36.72.48 lookup in virustotal http://a2013.com  a2013.com  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns1.chinaccnet.net  ns3.chinaccnet.net  ns2.chinaccnet.net     lookup in virustotal http://a2013.com
13 follow up this item(1717553) 1717553 Report false positive Report closed case make a suggestion 2013-02-06 08:48:03 OVERDUE! 2498  defaced_site  up  alive SenderBaselookup 199.192.156.110 at virustotallookup 199.192.156.110 at Rus CERT university stuttgart germanylookup 199.192.156.110 at ARIN 199.192.156.110  AS53935, AS6939 SenderBaselookup 199.192.156.110 at virustotallookup 199.192.156.110 at Rus CERT university stuttgart germanylookup 199.192.156.110 at ARIN 199.192.156.110 lookup in virustotal http://www.xmxylm.com/a.htm  xmxylm.com  US  ARIN  zoujinhe@ehostingusa.com  199.192.152.0 - 199.192.159.255  VPS21001  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536           lookup in virustotal http://www.xmxylm.com/a.htm
14 follow up this item(1652013) 1652013 Report false positive Report closed case make a suggestion 2013-01-23 19:30:03 OVERDUE! 2823.3  defaced_site  up  alive SenderBaselookup 199.193.64.177 at virustotallookup 199.193.64.177 at Rus CERT university stuttgart germanylookup 199.193.64.177 at ARIN 199.193.64.177  AS53935 SenderBaselookup 199.193.64.177 at virustotallookup 199.193.64.177 at Rus CERT university stuttgart germanylookup 199.193.64.177 at ARIN 199.193.64.177 lookup in virustotal http://zshsq.com/a.htm  zshsq.com  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  ns13.xincache.com  ns14.xincache.com       lookup in virustotal http://zshsq.com/a.htm
15 follow up this item(1641520) 1641520 Report false positive Report closed case make a suggestion 2013-01-18 16:42:05 OVERDUE! 2946.1  defaced_site  up  alive SenderBaselookup 199.36.79.44 at virustotallookup 199.36.79.44 at Rus CERT university stuttgart germanylookup 199.36.79.44 at ARIN 199.36.79.44  AS53935, AS6939 SenderBaselookup 199.36.79.44 at virustotallookup 199.36.79.44 at Rus CERT university stuttgart germanylookup 199.36.79.44 at ARIN 199.36.79.44 lookup in virustotal http://www.foncn.com  foncn.com  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  dns2.iidns.com  dns4.iidns.com  dns3.iidns.com  dns6.iidns.com  dns5.iidns.com lookup in virustotal http://www.foncn.com
16 follow up this item(1641518) 1641518 Report false positive Report closed case make a suggestion 2013-01-18 16:42:05 OVERDUE! 2946.1  defaced_site  up  alive SenderBaselookup 199.36.79.44 at virustotallookup 199.36.79.44 at Rus CERT university stuttgart germanylookup 199.36.79.44 at ARIN 199.36.79.44  AS53935, AS6939 SenderBaselookup 199.36.79.44 at virustotallookup 199.36.79.44 at Rus CERT university stuttgart germanylookup 199.36.79.44 at ARIN 199.36.79.44 lookup in virustotal http://cxad.cn  cxad.cn  US  ARIN  zoujinhe@ehostingusa.com  199.36.72.0 - 199.36.79.255  VPS21002  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  dns6.iidns.com  dns1.iidns.com  dns4.iidns.com  dns2.iidns.com  dns3.iidns.com lookup in virustotal http://cxad.cn
17 follow up this item(1625957) 1625957 Report false positive Report closed case make a suggestion 2013-01-11 07:54:02 OVERDUE! 3122.9  defaced_site  up  alive SenderBaselookup 199.193.70.74 at virustotallookup 199.193.70.74 at Rus CERT university stuttgart germanylookup 199.193.70.74 at ARIN 199.193.70.74  AS53935 SenderBaselookup 199.193.70.74 at virustotallookup 199.193.70.74 at Rus CERT university stuttgart germanylookup 199.193.70.74 at ARIN 199.193.70.74 lookup in virustotal http://www.ting75.com/gh.txt  ting75.com  US  ARIN  zoujinhe@ehostingusa.com  199.193.64.0 - 199.193.71.255  VPS21004  VPS21 LTD VL-11 38958 S FREMONT BLVD FREMONT CA 94536  f1g1ns1.dnspod.net  f1g1ns2.dnspod.net       lookup in virustotal http://www.ting75.com/gh.txt
18 follow up this item(2170488) 2170488 Report false positive Report closed case make a suggestion 2013-05-14 23:59:43      defaced_site  up  alive SenderBaselookup 195.78.33.120 at virustotallookup 195.78.33.120 at Rus CERT university stuttgart germanylookup 195.78.33.120 at Ripe 195.78.33.120  AS25277 SenderBaselookup 195.78.33.120 at virustotallookup 195.78.33.120 at Rus CERT university stuttgart germanylookup 195.78.33.120 at Ripe 195.78.33.120 lookup in virustotal http://mnk-nemetin.hr/  mnk-nemetin.hr  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns2.posluh.hr  dns1.posluh.hr       lookup in virustotal http://mnk-nemetin.hr/
19 follow up this item(2170432) 2170432 Report false positive Report closed case make a suggestion 2013-05-14 23:36:03      defaced_site  up  alive SenderBaselookup 195.78.33.120 at virustotallookup 195.78.33.120 at Rus CERT university stuttgart germanylookup 195.78.33.120 at Ripe 195.78.33.120  AS25277 SenderBaselookup 195.78.33.120 at virustotallookup 195.78.33.120 at Rus CERT university stuttgart germanylookup 195.78.33.120 at Ripe 195.78.33.120 lookup in virustotal http://mnk-nemetin.hr  mnk-nemetin.hr  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns1.posluh.hr  dns2.posluh.hr       lookup in virustotal http://mnk-nemetin.hr
20 follow up this item(2166733) 2166733 Report false positive Report closed case make a suggestion 2013-05-13 10:48:11      defaced_site  up  alive SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150  AS25277 SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150 lookup in virustotal http://orehnamjestaj.com/index.php  orehnamjestaj.com  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns1.posluh.hr  dns2.posluh.hr       lookup in virustotal http://orehnamjestaj.com/index.php
21 follow up this item(2166732) 2166732 Report false positive Report closed case make a suggestion 2013-05-13 10:48:11      defaced_site  up  alive SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150  AS25277 SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150 lookup in virustotal http://gunstigurlaub-kroatien.com  gunstigurlaub-kroatien.com  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns1.posluh.hr  dns2.posluh.hr       lookup in virustotal http://gunstigurlaub-kroatien.com
22 follow up this item(2166731) 2166731 Report false positive Report closed case make a suggestion 2013-05-13 10:48:10      defaced_site  up  alive SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150  AS25277 SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150 lookup in virustotal http://stalica-groznica.com  stalica-groznica.com  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns2.posluh.hr  dns1.posluh.hr       lookup in virustotal http://stalica-groznica.com
23 follow up this item(2166730) 2166730 Report false positive Report closed case make a suggestion 2013-05-13 10:48:10      HTML/Rce.Gen3  up  alive SenderBaselookup 195.78.33.63 at virustotallookup 195.78.33.63 at Rus CERT university stuttgart germanylookup 195.78.33.63 at Ripe 195.78.33.63  AS25277 SenderBaselookup 195.78.33.63 at virustotallookup 195.78.33.63 at Rus CERT university stuttgart germanylookup 195.78.33.63 at Ripe 195.78.33.63 lookup in virustotal http://www.appsev.com  appsev.com  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns2.posluh.hr  dns1.posluh.hr       lookup in virustotal http://www.appsev.com
24 follow up this item(2166707) 2166707 Report false positive Report closed case make a suggestion 2013-05-13 10:42:02      defaced_site  up  alive SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150  AS25277 SenderBaselookup 195.78.33.150 at virustotallookup 195.78.33.150 at Rus CERT university stuttgart germanylookup 195.78.33.150 at Ripe 195.78.33.150 lookup in virustotal http://zapresicke-maline.com  zapresicke-maline.com  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns2.posluh.hr  dns1.posluh.hr       lookup in virustotal http://zapresicke-maline.com
25 follow up this item(2166084) 2166084 Report false positive Report closed case make a suggestion 2013-05-12 22:42:03      defaced_site  up  alive SenderBaselookup 195.78.33.160 at virustotallookup 195.78.33.160 at Rus CERT university stuttgart germanylookup 195.78.33.160 at Ripe 195.78.33.160  AS25277 SenderBaselookup 195.78.33.160 at virustotallookup 195.78.33.160 at Rus CERT university stuttgart germanylookup 195.78.33.160 at Ripe 195.78.33.160 lookup in virustotal http://www.finacta.com.hr  finacta.com.hr  HR  RIPE  zoranm@posluh.hr  195.78.32.0 - 195.78.33.255  POSLUH  POSLuH d.o.o., ZagrebPOSLUH  dns2.posluh.hr  dns1.posluh.hr       lookup in virustotal http://www.finacta.com.hr
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.