RE: CR2 question

[Joe Blanchard <jblanchard () wyse com>]

Todd,


         Same here. Doesn't look like the 20th cut off date applies. As I
stated before, perhaps a default.ida file with an advertisement would at
least generate revnue? lol..

such is life. 

-Joe


-----Original Message-----
From: Todd Suiter [mailto:todd () s4r com]
Sent: Saturday, August 25, 2001 1:34 PM
To: nanog () merit edu
Subject: CR2 question



Folks,


        Its been almost a month, and my IDS is still picking up several
hundred CodeRed 2 attacks a day. Is anyone else seeing this same level of
continued
activity of this worm? I personally am somewhat at a loss as to how to
contact
people who are affected, as automated broadcasts to people, in my opinion,
are
NOT the way to go. BUT, going through several hundred IPs, a day, and trying
to find someone at those organizations to speak to is A LOT of work. Any
ideas?

Thanks!

todd