This IP should be blocked as with Zeus: getboating dot .com dot au/libraries/zauan/shortcodes/mandan/zt/wp/bt/js/url/upload/cp.php?m=login IP= http://sameid.net/ip/114.141.196.165/ see: http://www.abuseipdb.com/whois/114.141.196.165 Not found :o and again never heard of it: https://www.mywot.com/en/scorecard/114.141.196.165 Cybercrime that goes on largely undetected then? Never been tested: http://safeweb.norton.com/report/show?url=114.141.196.165 another, not even an IDS alert: http://urlquery.net/report.php?id=9714482 Bingo detected: https://zeustracker.abuse.ch/monitor.php?ipaddress=114.141.196.16 ThreatSTOP: Threat PhishTank danger level 1 last seen 5 months ago At Cybertracker last seen 28-02-2014 → https://www.virustotal.com/nl/url/49051877dee432c7aee5f158a334c2bd0cbc5574641ab8da28c381fcacbf3b59/analysis/ https://www.virustotal.com/nl/file/92f22817daca6e7ed293fc8120508d71d0d8528d648ea94e641772c305d6cab3/analysis/1367506132/ phish but probably non-malicious?
pol