[nsp-sec] malware on .cn domains: AS8560, AS25532, AS35830, AS16340, AS12322, AS7992, AS20923, AS13618

[Niels Provos]

Here are a few more IPs/domains suspected to be involved with malware.
 Over the last 7 days, it seems they compromised over 15,000 web
sites.

Niels.

ASNs
AS8560 - SCHLUND
AS25532 - MASTERHOST-AS
AS35830 - SIVIT-AS
AS16340 - IS-ASN
AS12322 - PROXAD
AS7992 - COGECOWAVE
AS20923 - SKYMARKET-UK-AS
AS13618 - CARONET-ASN

IPs
213.165.80.179
87.106.103.122
90.156.144.78
82.115.86.94
88.191.78.48
80.248.218.241
212.84.166.131
72.38.121.90
69.59.28.225

Countries
gbr
deu
fra
rus
pol
can
usa

bestnameshop.cn/
bestwebfind.cn/
bigbestfind.cn/
bigtopmanagement.cn/
catchynamestore.cn/
chester-housedomain.cn/
chesterhousedomain.cn/
combinebet.cn/
compoundcapitolgroup.cn/
compoundlot.cn/
findbigbearproperty.cn/
findbigboob.cn/
findbigbrother.cn/
finditinbigapple.cn/
findyourbigwhy.cn/
gianttoplocate.cn/
globalnameshop.cn/
greatnamemovie.cn/
greatshopfilm.cn/
harleyhousedomain.cn/
homebrandname.cn/
homenameworld.cn/
houseofnoname.cn/
hugebest.cn/
hugepremium.cn/
hugetopdiet.cn/
hugetopdiscover.cn/
hugetoplocate.cn/
inhouselabel.cn/
litehighestmodel.cn/
litepremium.cn/
lotwager.cn/
mediaalias.cn/
mediahomenameshopmovie.cn/
mediahomenameshoppicture.cn/
mediahousenamebuypicture.cn/
mediahousenamebuyvideo.cn/
mediahousenamemartmovie.cn/
mixgroupguide.cn/
mixigroup.cn/
mixlotsite.cn/
mixlotworld.cn/
mixmaxgroup.cn/
mixreleasegroup.cn/
mynewnameshop.cn/
namebuyfilmlife.cn/
nameclaimstore.cn/
namecompanystore.cn/
nameforshop.cn/
namemartfilm.cn/
namemartfilmlife.cn/
nameshopinternational.cn/
namestorediscount.cn/
namestorevideo.cn/
newnetnameshop.cn/
shopfilmlifeonline.cn/
shopfilmlifescience.cn/
shopmoviefestival.cn/
shopmovieproduction.cn/
solmixgroup.cn/
superfilmlife.cn/
superlottry.cn/
technologybigtop.cn/
thebestwaytofind.cn/
thebestyoucanfind.cn/
thebettings.cn/
thefilmmusic.cn/
thehomename.cn/
thelotmachine.cn/
thenetnameshop.cn/
topfindworld.cn/
toplitesite.cn/
tvnameshop.cn/
usednamestore.cn/
webnamemart.cn/
worldnamebuy.cn/
yournameheremedia.cn/
yournameshop.cn/

Server Versions
nginx