Are you sure it was based on IP address? This domain was used to host questionable links a few years ago, including suspicious antivirus software:
http://web.archive.org/web/*/workstax.com
http://web.archive.org/web/20070127212047/http://workstax.co...