Honeypots mailing list archives
recent scannin activitty
From: John Levine <levine () ece gatech edu>
Date: Thu, 28 Aug 2003 18:37:07 -0400 (EDT)
To all, I have noticed an increase in ICMP scans from early summer. What I have noticed here on the Georgia Tech Honeynet lately is a large increase in ICMP scans triggering the SNORT ICMP ping Cyberkit 2.2 Windows signature from blaster infected machines (i.e. these same machines try to connect on port 135). John Levine School Of Electrical and Computer Engineering Georgia Institute of Technology
Current thread:
- recent scannin activitty John Levine (Aug 29)
- Re: recent scannin activitty John Lyons (Aug 29)
- <Possible follow-ups>
- RE: recent scannin activitty Chan Kien Eng (Aug 29)