# # ImproWare AG wormlist, last 3 days, host ip-addresses # While the DNS is updated in realtime, this textlist can have # up to 15 minutes delay. # # Generated at Mon Mar 15 22:35:15 2010, timezone is CEST # count ip-address unixtime localtime name hostname 2 24.29.14.178 1268542086: Sun Mar 14 05:48:06 2010 (Trojan.HTML-7) cpe-24-29-14-178.cinci.res.rr.com. 1 59.4.42.71 1268658732: Mon Mar 15 14:12:12 2010 (Suspect.FakeAV-zippwd) - 1 61.190.86.218 1268644290: Mon Mar 15 10:11:30 2010 (Suspect.FakeAV-zippwd) - 1 62.112.159.93 1268643976: Mon Mar 15 10:06:16 2010 (Suspect.FakeAV-zippwd) 446.hosttech.eu. 1 62.202.222.7 1268680558: Mon Mar 15 20:15:58 2010 (Worm.NetSky-14) 7.222.202.62.cust.bluewin.ch. 1 62.243.129.54 1268647912: Mon Mar 15 11:11:52 2010 (Suspect.FakeAV-zippwd) cpe.xe-3-1-0-414.banqu1.customer.tele.dk. 1 76.98.120.25 1268672676: Mon Mar 15 18:04:36 2010 (Suspect.FakeAV-zippwd) c-76-98-120-25.hsd1.nj.comcast.net. 1 80.73.57.61 1268676993: Mon Mar 15 19:16:33 2010 (Suspect.FakeAV-zippwd) 80-73-57-61.cust.kungalv.net. 1 81.152.0.0 1222695489: Mon Sep 29 15:38:09 2008 (Trojan.Agent-52135) host81-152-0-0.range81-152.btcentralplus.com. 2 81.221.154.189 1268639473: Mon Mar 15 08:51:13 2010 (Worm.NetSky-14) zux221-154-189.adsl.green.ch. 1 81.221.188.199 1268571115: Sun Mar 14 13:51:55 2010 (Suspect.DoubleExtension-zippwd-9)zux221-188-199.adsl.green.ch. 9 83.76.111.42 1268554303: Sun Mar 14 09:11:43 2010 (Worm.SomeFool.D) 42-111.76-83.cust.bluewin.ch. 2 83.76.144.140 1268654328: Mon Mar 15 12:58:48 2010 (Worm.SomeFool.D) 140-144.76-83.cust.bluewin.ch. 1 83.76.46.186 1268553405: Sun Mar 14 08:56:45 2010 (Worm.SomeFool.D) 186-46.76-83.cust.bluewin.ch. 16 83.77.192.78 1268584728: Sun Mar 14 17:38:48 2010 (Worm.SomeFool.D) 78-192.77-83.cust.bluewin.ch. 3 83.78.217.152 1268644539: Mon Mar 15 10:15:39 2010 (Worm.NetSky-14) 152-217.78-83.cust.bluewin.ch. 2 83.78.217.73 1268555914: Sun Mar 14 09:38:34 2010 (Worm.NetSky-14) 73-217.78-83.cust.bluewin.ch. 2 83.79.248.168 1268678043: Mon Mar 15 19:34:03 2010 (Worm.SomeFool.Gen-2) 168-248.79-83.cust.bluewin.ch. 1 84.203.243.150 1268648664: Mon Mar 15 11:24:24 2010 (Suspect.FakeAV-zippwd) - 1 85.179.138.33 1268666709: Mon Mar 15 16:25:09 2010 (Suspect.FakeAV-zippwd) e179138033.adsl.alicedsl.de. 3 85.2.151.124 1268593559: Sun Mar 14 20:05:59 2010 (Worm.SomeFool.D) 124-151.2-85.cust.bluewin.ch. 3 85.2.167.49 1268644627: Mon Mar 15 10:17:07 2010 (Worm.SomeFool.D) 49-167.2-85.cust.bluewin.ch. 1 85.3.97.22 1268641656: Mon Mar 15 09:27:36 2010 (Worm.SomeFool.D) 22-97.3-85.cust.bluewin.ch. 5 85.5.0.32 1268654337: Mon Mar 15 12:58:57 2010 (Worm.NetSky-14) 32-0.5-85.cust.bluewin.ch. 1 85.9.16.82 1268646799: Mon Mar 15 10:53:19 2010 (Suspect.FakeAV-zippwd) - 1 87.15.146.241 1268564165: Sun Mar 14 11:56:05 2010 (Worm.SomeFool.Gen-1) host241-146-dynamic.15-87-r.retail.telecomitalia.it. 1 91.190.12.7 1268558708: Sun Mar 14 10:25:08 2010 (Eicar-Test-Signature) dhclient-91-190-12-7.flashcable.ch. 1 92.107.143.174 1268655234: Mon Mar 15 13:13:54 2010 (Worm.SomeFool.D) 174-143.107-92.cust.bluewin.ch. 1 112.158.140.10 1268669609: Mon Mar 15 17:13:29 2010 (Suspect.FakeAV-zippwd) - 1 116.39.18.173 1268672268: Mon Mar 15 17:57:48 2010 (Suspect.FakeAV-zippwd) - 1 120.32.184.52 1268666464: Mon Mar 15 16:21:04 2010 (Suspect.FakeAV-zippwd) 52.184.32.120.board.xm.fj.dynamic.163data.com.cn. 2 122.202.161.13 1268681281: Mon Mar 15 20:28:01 2010 (Suspect.FakeAV-zippwd) - 2 178.83.139.238 1268584194: Sun Mar 14 17:29:54 2010 (Worm.SomeFool.D) 178-83-139-238.dclient.hispeed.ch. 2 178.83.147.129 1268637108: Mon Mar 15 08:11:48 2010 (Worm.SomeFool.D) 178-83-147-129.dclient.hispeed.ch. 1 178.83.147.6 1268656412: Mon Mar 15 13:33:32 2010 (Worm.SomeFool.D) 178-83-147-6.dclient.hispeed.ch. 2 188.105.206.225 1268663209: Mon Mar 15 15:26:49 2010 (Worm.NetSky-14) - 1 190.3.231.107 1268668765: Mon Mar 15 16:59:25 2010 (Suspect.FakeAV-zippwd) - 1 193.72.33.89 1268670254: Mon Mar 15 17:24:14 2010 (Worm.SomeFool.D) dynip-89-33-72-193.adsl.switzerland.net. 1 194.170.216.18 1268672929: Mon Mar 15 18:08:49 2010 (Suspect.FakeAV-zippwd) - 1 213.144.136.14 1268664902: Mon Mar 15 15:55:02 2010 (Worm.NetSky-13) dial-136-14.dial.init7.net. 1 213.144.136.21 1268585954: Sun Mar 14 17:59:14 2010 (Worm.NetSky-13) dial-136-21.dial.init7.net.