Todd,

         Same here. Doesn't look like the 20th cut off date applies. As I stated before, perhaps a default.ida file with an advertisement would at least generate revnue? lol..

such is life.

-Joe

-----Original Message-----
From: Todd Suiter [mailto:todd@s4r.com]
Sent: Saturday, August 25, 2001 1:34 PM
To: nanog@merit.edu
Subject: CR2 question

Folks,

        Its been almost a month, and my IDS is still picking up several hundred CodeRed 2 attacks a day. Is anyone else seeing this same level of continued

activity of this worm? I personally am somewhat at a loss as to how to contact
people who are affected, as automated broadcasts to people, in my opinion, are
NOT the way to go. BUT, going through several hundred IPs, a day, and trying
to find someone at those organizations to speak to is A LOT of work. Any ideas?

Thanks!

todd