See: http://urlquery.net/report.php?id=9485703
Malware long OVERDUE on IP: http://support.clean-mx.de/clean-mx/viruses.php?id=19769961
The latter detected by avast! → https://www.virustotal.com/nl/file/f6aaa6cba0005e3eb73a8071194863f2dcd70f16a2763c56815a87d6410b3387/analysis/
See: http://www.nictasoft.com/ace/ip-search/?ip=107.160.11.197
Host malware history: https://www.virustotal.com/nl/ip-address/107.160.11.197/information/
See: http://www.scumware.org/report/107.160.11.197.html
→ https://www.google.nl/interstitial?url=http://jinmayulecheng.sxclb.com/
→ https://www.google.com/safebrowsing/diagnostic?site=http://jinmayulecheng.sxclb.com/&hl=nl
High risk site: http://app.webinspector.com/public/reports/show_history?id=19810812
Read on sinkhole: http://krebsonsecurity.com/2013/01/polish-takedown-targets-virut-botnet/ (link author Brian Krebs)
Have a look: http://hosts-file.net/?s=148.81.111.111&view=history
View: http://kb.bothunter.net/ipInfo/nowait.php?IP=148.81.111.111 → Malware scan and infect source!
polonus