[40143] in North American Network Operators' Group
Code Red host list
daemon@ATHENA.MIT.EDU (John Kristoff)
Thu Aug 2 13:19:38 2001
Message-ID: <3B698AFD.6D7E5283@depaul.edu>
Date: Thu, 02 Aug 2001 12:16:45 -0500
From: John Kristoff <jtk@depaul.edu>
Reply-To: jtk@aharp.is-net.depaul.edu
MIME-Version: 1.0
To: nanog@merit.edu
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Errors-To: owner-nanog-outgoing@merit.edu
The following is a list of about 18,400 host IPs that are thought to be
or were infected by the second round of the recent Code Red worm.
Again, I hope this is helpful. I unfortunately missed some data and we
continue to see new IPs continue to come in, but hopefully this is a
good start. As usual, more complete monitoring would probably have
turned up significantly more.
http://condor.depaul.edu/~jkristof/codered-hosts.txt
This is being sent to multiple people/lists in order to ensure that it
reaches all interested parties. Apologies to those that may receive
this note more than once.
John
