RE: Increase in nmap pings

[Frank Knobbe <frank () knobbe us>]

On Mon, 2004-05-03 at 10:17, Chuck Holley wrote:
> I noticed some too. Not a whole lot but about a dozen.  Out of france?

We seeing tons of these as well. I'm not sure which malware is
responsible, but it looks like a worm and not like a decoy scan. The
info about Sasser doesn't mention ICMP pings, but it is still a
candidate. Perhaps a new Agobot variant that pings first?

Regards,
Frank

Attachment: signature.asc
Description: This is a digitally signed message part