The following is a list of about 18,400 host IPs that are thought to be or were infected by the second round of the recent Code Red worm. Again, I hope this is helpful. I unfortunately missed some data and we continue to see new IPs continue to come in, but hopefully this is a good start. As usual, more complete monitoring would probably have turned up significantly more. http://condor.depaul.edu/~jkristof/codered-hosts.txt This is being sent to multiple people/lists in order to ensure that it reaches all interested parties. Apologies to those that may receive this note more than once. John