Black list of worm polluted sites
		

		

                                                                M. Oshima

			
Recently attacks of worms on this site disturb the operation. The following lists
are disclosed for defense. It is free to cite these lists. Number followed the 
site name means repetition of attacks. If you find some part of the lists are 
wrong, please mail to oshima%kaiyodai.ac.jp.


			
                                               updated 2002.02.01

		

Sites seemed to be polluted by W32/Nimda:
telesp.net.br.	5
sympatico.ca	2
attbi.com.	2
btopenworld.com.	3
clohwireless.com.
al.home.com.
co.home.com.
il.home.com.
in.home.com.	2
ma.home.com.
md.home.com.	2
nj.home.com.	2
nl.home.com.
va.home.com.
wa.home.com.
wave.home.com.
mindspring.com.	3
rogers.com.	5
rr.com.	7
telocity.com.	3
pppool.de.
worldonline.dk.
richtide.com.hk.
atgi.net.
att.net. 2
bellsouth.net.	5
cnc.net.	2
colt.net.	2
comcast.net
cox.net
deltacom.net.	3
gtconnect.net.
gtei.net.	2
hinet.net.	3
knology.net.
level3.net. 2
mediaone.net.	5
megapath.net.
pacbell.net.	5
shawcable.net. 2
sprint-hsd.net.
swbell.net.	2
t-dialin.net.	4
da.uu.net.
chello.no.
gcn.net.tw.
giga.net.tw.
is.net.tw. 2
demon.co.uk. 	2


			


			


			

Sites seemed to be polluted by Code RedII:
telesp.net.br.
il.home.com.
nj.home.com.
wa.home.com.
wave.home.com.
rr.com.
telocity.com.
pppool.de.
worldonline.dk.
bellsouth.net.
lft.bellsouth.net.
cnc.net.
gtei.net.
level3.net.
mediaone.net.
optonline.net.
pacbell.net.	2
shawcable.net.
sprint-hsd.net.
swbell.net.
t-dialin.net 2
uswest.net



			


			


			

		



			
M. Oshima home page ( English edition )