Have sites complaining that 72.8.140.222 is showing up on command and control server. After research determined that IP is listed in the NTP.POOL.ORG listing of time servers. Unsure who to report this too to get it off the list. it can b confirmed by going to http://www.threatstop.com/checkip and checking the ip address. Thanks. SH