What is detected here? Should IP be blocked?

Viruses and worms
1

See: http://vscan.novirusthanks.org/analysis/b27c092b90be9385f0591238a31a0124/aW5kZXg=/ permalink
and https://www.virustotal.com/en/url/4dd46255e3572445c2a296b67c9a49d16b9354f2835c1d9ac72092406edc7195/analysis/1376075429/
and https://www.virustotal.com/en/file/ac195be5edc4fc04f9550a58e6d62ef763cacabdf85a79329f350f79d253b36f/analysis/1376000805/? https://www.virustotal.com/en/ip-address/91.201.215.136/information/ (malicious IP)

polonus

2

Well a reason for this situation is 95 websites on same IP address: http://sameid.net/ip/91.201.215.136/
Also use this tool in this connection: http://www.websitelooker.net/analytics/UA-28351334

polonus