CLEAN MX realtime database    
public access query for portal URL
Totally watched: 135749, to down: 0, to up: 43, changed ip: 0
As of 2013-05-21 17:08:18 CEST

This database consists of spamming URI, collected and verified since Jul 2008

If you detect URI'S concerning your netblock, already closed... you have made a good job, otherwise please close them as soon as possible.

to look at some nice charts, there are complete statistics for this database
Attention: all URI'S are manually verified, but not cross-checked for real portals function in this moment you make this query.(Sites may have been closed already..)
Our automatic portalswalker process is scheduled every hour, so you may see now a incident and this one will be resolved later on.
So please keep on sending close-feedbacks to us...

if you have questions, criticism, wishes or ... do not hesitate to contact us at abuse@clean-mx.de
Our PBX is down you may reach us by cell phone +49 171 4802507 ...
Query as xml: Same query as xml output
TIMERS: Runtime Query: 0.5085 Seconds
Line#DateClosedhoursvirusnameip stateresponseIp initialAS#ip reviewURLDomaincountrysourceemailinetnumnetnamedescrns1ns2ns3ns4ns5URL
1 follow up this item(305686) 305686 Report false positive Report closed case make a suggestion 2011-10-29 03:21:03 OVERDUE! 13694  defaced_site  up  alive SenderBaselookup 196.220.43.60 at virustotallookup 196.220.43.60 at Rus CERT university stuttgart germanylookup 196.220.43.60 at AFRINIC 196.220.43.60  AS36943 SenderBaselookup 196.220.43.60 at virustotallookup 196.220.43.60 at Rus CERT university stuttgart germanylookup 196.220.43.60 at AFRINIC 196.220.43.60 lookup in virustotal http://induscs.co.za/by.html  induscs.co.za  ZA  AFRINIC  abuse@webafrica.co.za  196.220.40.0 - 196.220.55.255  WA-ATLDC-1  Web Africa Atlanta Data Center Allocation 1  ns01.glodns.net  ns02.glodns.net       lookup in virustotal http://induscs.co.za/by.html
2 follow up this item(307167) 307167 Report false positive Report closed case make a suggestion 2011-10-29 20:55:13 OVERDUE! 13676.4  defaced_site  up  alive SenderBaselookup 89.31.97.181 at virustotallookup 89.31.97.181 at Rus CERT university stuttgart germanylookup 89.31.97.181 at AFRINIC 89.31.97.181  AS4134 SenderBaselookup 141.138.205.178 at virustotallookup 141.138.205.178 at Rus CERT university stuttgart germanylookup 141.138.205.178 at AFRINIC 141.138.205.178 lookup in virustotal http://ikbenflink.nl  ikbenflink.nl  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns1.transip.nl  ns2.transip.eu  ns0.transip.net     lookup in virustotal http://ikbenflink.nl
3 follow up this item(309029) 309029 Report false positive Report closed case make a suggestion 2011-10-29 23:56:49 OVERDUE! 13673.4  defaced_site  up  alive SenderBaselookup 138.81.11.132 at virustotallookup 138.81.11.132 at Rus CERT university stuttgart germanylookup 138.81.11.132 at AFRINIC 138.81.11.132  AS4134 SenderBaselookup 138.81.11.132 at virustotallookup 138.81.11.132 at Rus CERT university stuttgart germanylookup 138.81.11.132 at AFRINIC 138.81.11.132 lookup in virustotal http://www.iso.org/iso/search.htm?qt=Hac ...  iso.org  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns2.iso.org  dnsone.iso.ch       lookup in virustotal http://www.iso.org/iso/search.htm?qt=Hac ...
4 follow up this item(360344) 360344 Report false positive Report closed case make a suggestion 2011-11-09 18:54:56 OVERDUE! 13413.4  defaced_site  up  alive SenderBaselookup 87.117.236.210 at virustotallookup 87.117.236.210 at Rus CERT university stuttgart germanylookup 87.117.236.210 at AFRINIC 87.117.236.210  AS4134 SenderBaselookup 158.255.43.136 at virustotallookup 158.255.43.136 at Rus CERT university stuttgart germanylookup 158.255.43.136 at AFRINIC 158.255.43.136 lookup in virustotal http://infold.co.uk/thr.htm  infold.co.uk  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns1.webhosting.uk.com  ns2.webhosting.uk.com  ns0.websumu.net  ns1.websumu.com   lookup in virustotal http://infold.co.uk/thr.htm
5 follow up this item(419335) 419335 Report false positive Report closed case make a suggestion 2011-11-25 20:17:35 OVERDUE! 13028  defaced_site  up  alive SenderBaselookup 196.220.42.61 at virustotallookup 196.220.42.61 at Rus CERT university stuttgart germanylookup 196.220.42.61 at AFRINIC 196.220.42.61  AS36943 SenderBaselookup 196.220.42.61 at virustotallookup 196.220.42.61 at Rus CERT university stuttgart germanylookup 196.220.42.61 at AFRINIC 196.220.42.61 lookup in virustotal http://ozonecape.za.org  za.org  ZA  AFRINIC  abuse@webafrica.co.za  196.220.40.0 - 196.220.55.255  WA-ATLDC-1  Web Africa Atlanta Data Center Allocation 1  ns0.plig.net  ns2.iafrica.com  igubu.saix.net  ns2.plig.net  ns0.is.co.za lookup in virustotal http://ozonecape.za.org
6 follow up this item(533101) 533101 Report false positive Report closed case make a suggestion 2011-12-06 16:38:44 OVERDUE! 12767.7  defaced_site  up  alive SenderBaselookup 212.36.75.26 at virustotallookup 212.36.75.26 at Rus CERT university stuttgart germanylookup 212.36.75.26 at AFRINIC 212.36.75.26  AS4134 SenderBaselookup 134.0.11.125 at virustotallookup 134.0.11.125 at Rus CERT university stuttgart germanylookup 134.0.11.125 at AFRINIC 134.0.11.125 lookup in virustotal http://aeaznalcazar.org/images/1.htm  aeaznalcazar.org  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns3.cdmon.net  ns2.cdmon.net  ns1.cdmon.net     lookup in virustotal http://aeaznalcazar.org/images/1.htm
7 follow up this item(566257) 566257 Report false positive Report closed case make a suggestion 2011-12-09 16:32:40 OVERDUE! 12695.8  defaced_site  up  alive SenderBaselookup 82.102.30.195 at virustotallookup 82.102.30.195 at Rus CERT university stuttgart germanylookup 82.102.30.195 at AFRINIC 82.102.30.195  AS4134 SenderBaselookup 130.185.81.110 at virustotallookup 130.185.81.110 at Rus CERT university stuttgart germanylookup 130.185.81.110 at AFRINIC 130.185.81.110 lookup in virustotal http://senslyn.rurikhan.com/root.htm  rurikhan.com  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns2.mundogest.com  ns1.mundogest.com       lookup in virustotal http://senslyn.rurikhan.com/root.htm
8 follow up this item(680759) 680759 Report false positive Report closed case make a suggestion 2011-12-14 17:16:23 OVERDUE! 12575.1  defaced_site  up  alive SenderBaselookup 67.15.249.104 at virustotallookup 67.15.249.104 at Rus CERT university stuttgart germanylookup 67.15.249.104 at AFRINIC 67.15.249.104  AS6713 SenderBaselookup 41.142.253.151 at virustotallookup 41.142.253.151 at Rus CERT university stuttgart germanylookup 41.142.253.151 at AFRINIC 41.142.253.151 lookup in virustotal http://www.lesentierdelareussite.com  lesentierdelareussite.com  MA  AFRINIC  sektaoui@menera.ma  41.140.0.0 - 41.143.255.255  ONdP1-20090106  Maroc Telecom  dns1.name-services.com  dns2.name-services.com  dns3.name-services.com  dns4.name-services.com  dns5.name-services.com lookup in virustotal http://www.lesentierdelareussite.com
9 follow up this item(699936) 699936 Report false positive Report closed case make a suggestion 2011-12-16 18:22:43 OVERDUE! 12526  defaced_site  up  alive SenderBaselookup 41.204.202.46 at virustotallookup 41.204.202.46 at Rus CERT university stuttgart germanylookup 41.204.202.46 at AFRINIC 41.204.202.46  AS16637 SenderBaselookup 41.204.202.46 at virustotallookup 41.204.202.46 at Rus CERT university stuttgart germanylookup 41.204.202.46 at AFRINIC 41.204.202.46 lookup in virustotal http://www.saace.co.za/tsep/searchtips.p ...  saace.co.za  ZA  AFRINIC  afrinic@hetzner.co.za  41.204.200.0 - 41.204.203.255  Hetz-CPT-Managed-5-6  CPT Managed 5 and 6 and SSL allocation ranges  mars.mics.co.za  saturn.mics.co.za       lookup in virustotal http://www.saace.co.za/tsep/searchtips.p ...
10 follow up this item(737492) 737492 Report false positive Report closed case make a suggestion 2011-12-18 14:55:07 OVERDUE! 12481.4  HTML/Infected.WebPage.Gen  up  alive SenderBaselookup 212.103.160.157 at virustotallookup 212.103.160.157 at Rus CERT university stuttgart germanylookup 212.103.160.157 at AFRINIC 212.103.160.157  AS8452 SenderBaselookup 212.103.160.157 at virustotallookup 212.103.160.157 at Rus CERT university stuttgart germanylookup 212.103.160.157 at AFRINIC 212.103.160.157 lookup in virustotal http://www.adwia.com  adwia.com  EG  AFRINIC  abuse@tedata.net  212.103.160.0 - 212.103.166.255  GEGA-EGTI-NETWORK  GEGANET  ns2.tedata.net  ns1.tedata.net       lookup in virustotal http://www.adwia.com
11 follow up this item(737762) 737762 Report false positive Report closed case make a suggestion 2011-12-18 15:27:31 OVERDUE! 12480.9  HTML/Infected.WebPage.Gen  up  alive SenderBaselookup 212.103.160.157 at virustotallookup 212.103.160.157 at Rus CERT university stuttgart germanylookup 212.103.160.157 at AFRINIC 212.103.160.157  AS8452 SenderBaselookup 212.103.160.157 at virustotallookup 212.103.160.157 at Rus CERT university stuttgart germanylookup 212.103.160.157 at AFRINIC 212.103.160.157 lookup in virustotal http://www.eichem.com.eg  eichem.com.eg  EG  AFRINIC  abuse@tedata.net  212.103.160.0 - 212.103.166.255  GEGA-EGTI-NETWORK  GEGANET  ns1.tedata.net  ns2.tedata.net       lookup in virustotal http://www.eichem.com.eg
12 follow up this item(763911) 763911 Report false positive Report closed case make a suggestion 2011-12-21 03:49:12 OVERDUE! 12420.5  defaced_site  up  alive SenderBaselookup 196.33.227.4 at virustotallookup 196.33.227.4 at Rus CERT university stuttgart germanylookup 196.33.227.4 at AFRINIC 196.33.227.4  AS3741 SenderBaselookup 196.33.227.4 at virustotallookup 196.33.227.4 at Rus CERT university stuttgart germanylookup 196.33.227.4 at AFRINIC 196.33.227.4 lookup in virustotal http://webtelegraph.co.za/communicator/b ...  webtelegraph.co.za  ZA  AFRINIC  abuse@is.co.za  196.33.0.0 - 196.33.255.255  ISNET-04  Internet SolutionsThe Campus, 57 Sloane StreetBryanstonJohannesburgGauteng2021  ns.dns1.co.za  ns.otherdns.net  ns.otherdns.com  ns.dns2.co.za   lookup in virustotal http://webtelegraph.co.za/communicator/b ...
13 follow up this item(953078) 953078 Report false positive Report closed case make a suggestion 2012-02-07 12:49:05 OVERDUE! 11259.5  defaced_site  up  alive SenderBaselookup 196.30.191.50 at virustotallookup 196.30.191.50 at Rus CERT university stuttgart germanylookup 196.30.191.50 at AFRINIC 196.30.191.50  AS36943 SenderBaselookup 196.220.60.20 at virustotallookup 196.220.60.20 at Rus CERT university stuttgart germanylookup 196.220.60.20 at AFRINIC 196.220.60.20 lookup in virustotal http://hskriel.co.za/forum/  hskriel.co.za  ZA  AFRINIC  abuse@webafrica.co.za  196.220.56.0 - 196.220.63.255  WA-CPTDC-2  Web Africa Cape Town Data Center Allocation 2  ns1.wadns.net  ns2.wadns.net       lookup in virustotal http://hskriel.co.za/forum/
14 follow up this item(969995) 969995 Report false positive Report closed case make a suggestion 2012-02-15 10:53:19 OVERDUE! 11069.4  defaced_site  up  alive SenderBaselookup 196.33.158.36 at virustotallookup 196.33.158.36 at Rus CERT university stuttgart germanylookup 196.33.158.36 at AFRINIC 196.33.158.36  AS3741 SenderBaselookup 196.33.158.36 at virustotallookup 196.33.158.36 at Rus CERT university stuttgart germanylookup 196.33.158.36 at AFRINIC 196.33.158.36 lookup in virustotal http://www.wpcs.co.za/x.htm  wpcs.co.za  ZA  AFRINIC  abuse@is.co.za  196.33.0.0 - 196.33.255.255  ISNET-04  Internet SolutionsThe Campus, 57 Sloane StreetBryanstonJohannesburgGauteng2021  ns2.host-h.net  ns1.host-h.net  ns1.dns-h.com     lookup in virustotal http://www.wpcs.co.za/x.htm
15 follow up this item(1044162) 1044162 Report false positive Report closed case make a suggestion 2012-03-30 16:06:33 OVERDUE! 10009.2  defaced_site  up  alive SenderBaselookup 67.15.234.71 at virustotallookup 67.15.234.71 at Rus CERT university stuttgart germanylookup 67.15.234.71 at AFRINIC 67.15.234.71  AS4134 SenderBaselookup 159.253.148.197 at virustotallookup 159.253.148.197 at Rus CERT university stuttgart germanylookup 159.253.148.197 at AFRINIC 159.253.148.197 lookup in virustotal http://www.lesachatsindustriels.com/Acha ...  lesachatsindustriels.com  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  server37ns1.heberjahiz.com  server37ns2.heberjahiz.com       lookup in virustotal http://www.lesachatsindustriels.com/Acha ...
16 follow up this item(1051898) 1051898 Report false positive Report closed case make a suggestion 2012-04-16 17:54:03 OVERDUE! 9599.4  defaced_site  up  alive SenderBaselookup 192.165.242.126 at virustotallookup 192.165.242.126 at Rus CERT university stuttgart germanylookup 192.165.242.126 at AFRINIC 192.165.242.126  AS4134 SenderBaselookup 192.165.242.126 at virustotallookup 192.165.242.126 at Rus CERT university stuttgart germanylookup 192.165.242.126 at AFRINIC 192.165.242.126 lookup in virustotal http://www.abftv.com  abftv.com  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space           lookup in virustotal http://www.abftv.com
17 follow up this item(1107752) 1107752 Report false positive Report closed case make a suggestion 2012-05-12 14:18:03 OVERDUE! 8979  defaced_site  up  alive SenderBaselookup 41.203.18.21 at virustotallookup 41.203.18.21 at Rus CERT university stuttgart germanylookup 41.203.18.21 at AFRINIC 41.203.18.21  AS16637 SenderBaselookup 196.22.132.153 at virustotallookup 196.22.132.153 at Rus CERT university stuttgart germanylookup 196.22.132.153 at AFRINIC 196.22.132.153 lookup in virustotal http://www.jeanettablignaut.com/wordpres ...  jeanettablignaut.com  ZA  AFRINIC  afrinic@hetzner.co.za  196.22.132.0 - 196.22.132.255  Hetz-Managed-Range1  Dedicated and shared managed servers  ns1.dns-h.com  ns1.host-h.net  ns2.host-h.net     lookup in virustotal http://www.jeanettablignaut.com/wordpres ...
18 follow up this item(1165586) 1165586 Report false positive Report closed case make a suggestion 2012-05-31 19:18:03 OVERDUE! 8518  defaced_site  up  alive SenderBaselookup 196.220.43.28 at virustotallookup 196.220.43.28 at Rus CERT university stuttgart germanylookup 196.220.43.28 at AFRINIC 196.220.43.28  AS36943 SenderBaselookup 196.220.43.28 at virustotallookup 196.220.43.28 at Rus CERT university stuttgart germanylookup 196.220.43.28 at AFRINIC 196.220.43.28 lookup in virustotal http://jaminadventures.com//Assets/Image ...  jaminadventures.com  ZA  AFRINIC  abuse@webafrica.co.za  196.220.40.0 - 196.220.55.255  WA-ATLDC-1  Web Africa Atlanta Data Center Allocation 1  ns01.webafrica.co.za  ns02.webafrica.co.za       lookup in virustotal http://jaminadventures.com//Assets/Image ...
19 follow up this item(1171780) 1171780 Report false positive Report closed case make a suggestion 2012-06-03 16:42:05 OVERDUE! 8448.6  defaced_site  up  alive SenderBaselookup 66.8.95.228 at virustotallookup 66.8.95.228 at Rus CERT university stuttgart germanylookup 66.8.95.228 at AFRINIC 66.8.95.228  AS16637 SenderBaselookup 66.8.95.228 at virustotallookup 66.8.95.228 at Rus CERT university stuttgart germanylookup 66.8.95.228 at AFRINIC 66.8.95.228 lookup in virustotal http://www.primediacontent.net/index.htm ...  primediacontent.net  ZA  AFRINIC  brad.hendrickse@mtnbusiness.co.za  66.8.95.224 - 66.8.95.255  MTNBUSINESS-66-8-95-224-27  updated = "2009-05-18"  168.210.2.2  ns1.is.co.za  ns1.iafrica.com  ns2.iafrica.com  titan.is.co.za lookup in virustotal http://www.primediacontent.net/index.htm ...
20 follow up this item(1185991) 1185991 Report false positive Report closed case make a suggestion 2012-06-14 11:00:06 OVERDUE! 8190.3  unknown_html  up  alive SenderBaselookup 160.58.148.1 at virustotallookup 160.58.148.1 at Rus CERT university stuttgart germanylookup 160.58.148.1 at AFRINIC 160.58.148.1  AS4134 SenderBaselookup 160.58.148.1 at virustotallookup 160.58.148.1 at Rus CERT university stuttgart germanylookup 160.58.148.1 at AFRINIC 160.58.148.1 lookup in virustotal http://www.deutschepost.de/de.html  deutschepost.de  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns5.markmonitor.com  ns.deutschepost.de  ns1.markmonitor.com  ppd00021.deutschepost.de  ns3.markmonitor.com lookup in virustotal http://www.deutschepost.de/de.html
21 follow up this item(1189108) 1189108 Report false positive Report closed case make a suggestion 2012-06-17 14:54:04 OVERDUE! 8114.4  defaced_site  up  alive SenderBaselookup 149.3.144.49 at virustotallookup 149.3.144.49 at Rus CERT university stuttgart germanylookup 149.3.144.49 at AFRINIC 149.3.144.49  AS4134 SenderBaselookup 149.3.144.49 at virustotallookup 149.3.144.49 at Rus CERT university stuttgart germanylookup 149.3.144.49 at AFRINIC 149.3.144.49 lookup in virustotal http://www.abcwindsurf.eu  abcwindsurf.eu  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns2.abcwindsurf.eu  ns3.abcwindsurf.eu  ns1.abcwindsurf.eu     lookup in virustotal http://www.abcwindsurf.eu
22 follow up this item(1220219) 1220219 Report false positive Report closed case make a suggestion 2012-06-28 15:24:04 OVERDUE! 7849.9  defaced_site  up  alive SenderBaselookup 62.8.88.127 at virustotallookup 62.8.88.127 at Rus CERT university stuttgart germanylookup 62.8.88.127 at AFRINIC 62.8.88.127  AS15399 SenderBaselookup 62.8.88.127 at virustotallookup 62.8.88.127 at Rus CERT university stuttgart germanylookup 62.8.88.127 at AFRINIC 62.8.88.127 lookup in virustotal http://www.runji.co.ke/templates/beez/in ...  runji.co.ke  KE  AFRINIC  lir@ke.wananchi.com  62.8.88.0 - 62.8.88.255  KE-WG-INFR  Wananchi Group Kenya  dns2.wananchi.com  dns1.wananchi.com       lookup in virustotal http://www.runji.co.ke/templates/beez/in ...
23 follow up this item(1237627) 1237627 Report false positive Report closed case make a suggestion 2012-07-11 14:36:03 OVERDUE! 7538.7  defaced_site  up  alive SenderBaselookup 196.3.165.238 at virustotallookup 196.3.165.238 at Rus CERT university stuttgart germanylookup 196.3.165.238 at AFRINIC 196.3.165.238  AS11845 SenderBaselookup 196.3.165.238 at virustotallookup 196.3.165.238 at Rus CERT university stuttgart germanylookup 196.3.165.238 at AFRINIC 196.3.165.238 lookup in virustotal http://server.knowledgebankerp.co.nz/hit ...  knowledgebankerp.co.nz  ZA  AFRINIC  ipadmin@datapro.co.za  196.3.165.0 - 196.3.165.255  GIA-BLK-1  # Filtered  ns3.prodns.co.za  ns1.prodns.co.za  ns2.prodns.co.za     lookup in virustotal http://server.knowledgebankerp.co.nz/hit ...
24 follow up this item(1244577) 1244577 Report false positive Report closed case make a suggestion 2012-07-17 10:30:04 OVERDUE! 7398.8  unknown_html  up  alive SenderBaselookup 143.224.185.41 at virustotallookup 143.224.185.41 at Rus CERT university stuttgart germanylookup 143.224.185.41 at AFRINIC 143.224.185.41  AS4134 SenderBaselookup 143.224.185.41 at virustotallookup 143.224.185.41 at Rus CERT university stuttgart germanylookup 143.224.185.41 at AFRINIC 143.224.185.41 lookup in virustotal http://www.joanneum.at/de/digital.html  joanneum.at  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  rzjgate.joanneum.ac.at  rzjgate1.joanneum.ac.at       lookup in virustotal http://www.joanneum.at/de/digital.html
25 follow up this item(1269070) 1269070 Report false positive Report closed case make a suggestion 2012-08-10 14:42:04 OVERDUE! 6818.6  defaced_site  up  alive SenderBaselookup 85.233.165.100 at virustotallookup 85.233.165.100 at Rus CERT university stuttgart germanylookup 85.233.165.100 at AFRINIC 85.233.165.100  AS4134 SenderBaselookup 159.253.210.8 at virustotallookup 159.253.210.8 at Rus CERT university stuttgart germanylookup 159.253.210.8 at AFRINIC 159.253.210.8 lookup in virustotal http://johnbuckley.co.uk/includes/templa ...  johnbuckley.co.uk  EU  AFRINIC  bitbucket@ripe.net  0.0.0.0 - 255.255.255.255  IANA-BLK  The whole IPv4 address space  ns0.phase8.net  ns1.phase8.net  ns2.phase8.net     lookup in virustotal http://johnbuckley.co.uk/includes/templa ...
Click here for other vital incidents


Protected by clean MX
Access is provided for free and subject to these Terms and Conditions.