Todd, Same here. Doesn't look like the 20th cut off date applies. As I stated before, perhaps a default.ida file with an advertisement would at least generate revnue? lol.. such is life. -Joe -----Original Message----- From: Todd Suiter [mailto:todd@s4r.com] Sent: Saturday, August 25, 2001 1:34 PM To: nanog@merit.edu Subject: CR2 question Folks, Its been almost a month, and my IDS is still picking up several hundred CodeRed 2 attacks a day. Is anyone else seeing this same level of continued activity of this worm? I personally am somewhat at a loss as to how to contact people who are affected, as automated broadcasts to people, in my opinion, are NOT the way to go. BUT, going through several hundred IPs, a day, and trying to find someone at those organizations to speak to is A LOT of work. Any ideas? Thanks! todd