recent scannin activitty

[John Levine <levine () ece gatech edu>]

To all,
        I have noticed an increase in ICMP scans from early summer.  What
I have noticed here on the Georgia Tech Honeynet lately is a large increase
in ICMP scans triggering the SNORT ICMP ping Cyberkit 2.2 Windows
signature from blaster infected machines (i.e. these same machines try to
connect on port 135).


John Levine
School Of Electrical and Computer Engineering
Georgia Institute of Technology