Here's a breakdown of all the ip addresses (mostly exploited) that provide the hosting and DNS for the domains in Red's previous post:
| IP | # Occurrences | Abuse contact | Hosting company | 
| 92.48.119.139 | 33 | abuse@as29550.net | AS29550 Operators Simply Transit BlueSquare House Priors Way Maidenhead Berkshire SL62HP | 
| 84.22.104.117 | 27 |  | AS34109, absolutely no contact information at all | 
| 84.22.104.123 | 13 |  | AS34109, absolutely no contact information at all | 
| 148.206.50.99 | 9 | iflorese@CORREO.UAM.MX | Universidad Autonoma Metropolitana, Mexico | 
| 200.110.137.11 | 9 | operaciones.arin@IFXNW.COM.AR | IFX Networks Argentina | 
| 203.192.247.53 | 9 | pooranm@in2cable.com, bt.jumani@webmail.in2cable.com | In2cable Bangalore, India | 
| 61.178.118.4 | 7 | anti-spam@ns.chinanet.cn.net | Chinanet | 
| 93.99.136.42 | 7 |  | Pavel Suk, Czech Republic | 
| 148.206.50.101 | 7 | iflorese@CORREO.UAM.MX | Universidad Autonoma Metropolitana, Mexico | 
| 61.133.234.105 | 5 | pangph@public.xn.qh.cn | Chinanet | 
| 221.207.50.84 | 5 | abuse@cnc-noc.net | ChinaUnicom Hostmaster | 
| 207.182.155.101 | 4 |  | eNet inc. | 
| 60.28.145.226 | 3 | abuse@cnc-noc.net | ChinaUnicom Hostmaster | 
| 125.16.213.251 | 3 | techsupport@bharti.com | Bharti Tele-Ventures Limited, New Delhi, India | 
| 58.241.9.138 | 2 | abuse@cnc-noc.net | ChinaUnicom Hostmaster | 
| 218.206.241.178 | 2 | hostmaster@chinamobile.com | China Mobile Communications Corporation - henan | 
| 58.221.185.220 | 1 |  |  | 
| 58.42.251.237 | 1 |  |  | 
| 61.150.109.186 | 1 |  |  | 
| 61.160.9.202 | 1 |  |  | 
| 80.83.122.244 | 1 |  |  | 
| 91.226.116.66 | 1 |  |  | 
| 125.19.57.95 | 1 |  |  | 
| 193.146.210.94 | 1 |  |  | 
| 203.129.225.11 | 1 |  |  | 
| 207.182.155.104 | 1 |  |  | 
| 222.66.76.226 | 1 |  |  | 
SiL