[40943] in North American Network Operators' Group
RE: CR2 question
daemon@ATHENA.MIT.EDU (Joe Blanchard)
Mon Aug 27 01:09:27 2001
Message-ID: <E9BBE0941932D511934C0002A52CDB4E2D085D@sj-exchange.wyse.com>
From: Joe Blanchard <jblanchard@wyse.com>
To: nanog@merit.edu
Date: Sun, 26 Aug 2001 22:07:04 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C12EB6.1CC4F540"
Errors-To: owner-nanog-outgoing@merit.edu
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
------_=_NextPart_001_01C12EB6.1CC4F540
Content-Type: text/plain;
charset="iso-8859-1"
Todd,
Same here. Doesn't look like the 20th cut off date applies. As I
stated before, perhaps a default.ida file with an advertisement would at
least generate revnue? lol..
such is life.
-Joe
-----Original Message-----
From: Todd Suiter [mailto:todd@s4r.com]
Sent: Saturday, August 25, 2001 1:34 PM
To: nanog@merit.edu
Subject: CR2 question
Folks,
Its been almost a month, and my IDS is still picking up several
hundred CodeRed 2 attacks a day. Is anyone else seeing this same level of
continued
activity of this worm? I personally am somewhat at a loss as to how to
contact
people who are affected, as automated broadcasts to people, in my opinion,
are
NOT the way to go. BUT, going through several hundred IPs, a day, and trying
to find someone at those organizations to speak to is A LOT of work. Any
ideas?
Thanks!
todd
------_=_NextPart_001_01C12EB6.1CC4F540
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
charset=3Diso-8859-1">
<META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
5.5.2653.12">
<TITLE>RE: CR2 question</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=3D2>Todd,</FONT>
</P>
<BR>
<P> <FONT SIZE=3D2> Same =
here. Doesn't look like the 20th cut off date applies. As I stated =
before, perhaps a default.ida file with an advertisement would at least =
generate revnue? lol..</FONT></P>
<P><FONT SIZE=3D2>such is life. </FONT>
</P>
<P><FONT SIZE=3D2>-Joe</FONT>
</P>
<BR>
<P><FONT SIZE=3D2>-----Original Message-----</FONT>
<BR><FONT SIZE=3D2>From: Todd Suiter [<A =
HREF=3D"mailto:todd@s4r.com">mailto:todd@s4r.com</A>]</FONT>
<BR><FONT SIZE=3D2>Sent: Saturday, August 25, 2001 1:34 PM</FONT>
<BR><FONT SIZE=3D2>To: nanog@merit.edu</FONT>
<BR><FONT SIZE=3D2>Subject: CR2 question</FONT>
</P>
<BR>
<BR>
<P><FONT SIZE=3D2>Folks,</FONT>
</P>
<BR>
<P> <FONT SIZE=3D2>Its been =
almost a month, and my IDS is still picking up several hundred CodeRed =
2 attacks a day. Is anyone else seeing this same level of =
continued</FONT></P>
<P><FONT SIZE=3D2>activity of this worm? I personally am somewhat at a =
loss as to how to contact</FONT>
<BR><FONT SIZE=3D2>people who are affected, as automated broadcasts to =
people, in my opinion, are</FONT>
<BR><FONT SIZE=3D2>NOT the way to go. BUT, going through several =
hundred IPs, a day, and trying</FONT>
<BR><FONT SIZE=3D2>to find someone at those organizations to speak to =
is A LOT of work. Any ideas?</FONT>
</P>
<P><FONT SIZE=3D2>Thanks!</FONT>
</P>
<P><FONT SIZE=3D2>todd</FONT>
</P>
</BODY>
</HTML>
------_=_NextPart_001_01C12EB6.1CC4F540--
