<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>RE: CR2 question</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>Todd,</FONT>
</P>
<BR>
<P> <FONT SIZE=2> Same here. Doesn't look like the 20th cut off date applies. As I stated before, perhaps a default.ida file with an advertisement would at least generate revnue? lol..</FONT></P>
<P><FONT SIZE=2>such is life. </FONT>
</P>
<P><FONT SIZE=2>-Joe</FONT>
</P>
<BR>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Todd Suiter [<A HREF="mailto:todd@s4r.com">mailto:todd@s4r.com</A>]</FONT>
<BR><FONT SIZE=2>Sent: Saturday, August 25, 2001 1:34 PM</FONT>
<BR><FONT SIZE=2>To: nanog@merit.edu</FONT>
<BR><FONT SIZE=2>Subject: CR2 question</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=2>Folks,</FONT>
</P>
<BR>
<P> <FONT SIZE=2>Its been almost a month, and my IDS is still picking up several hundred CodeRed 2 attacks a day. Is anyone else seeing this same level of continued</FONT></P>
<P><FONT SIZE=2>activity of this worm? I personally am somewhat at a loss as to how to contact</FONT>
<BR><FONT SIZE=2>people who are affected, as automated broadcasts to people, in my opinion, are</FONT>
<BR><FONT SIZE=2>NOT the way to go. BUT, going through several hundred IPs, a day, and trying</FONT>
<BR><FONT SIZE=2>to find someone at those organizations to speak to is A LOT of work. Any ideas?</FONT>
</P>
<P><FONT SIZE=2>Thanks!</FONT>
</P>
<P><FONT SIZE=2>todd</FONT>
</P>
</BODY>
</HTML>