-----BEGIN PGP SIGNED MESSAGE----- The CERT Coordination Center is aware of the widespread scanning activity which has been discussed in the past 24 hours on the NANOG mailing list. The CERT/CC has published two incidents note containing details about scanning techniques which may be of interest. * IN-98.04, "Advanced Scanning" http://www.cert.org/incident_notes/IN-98.04.html * IN-98.02, "New Tools Used for Widespread Scans" http://www.cert.org/incident_notes/IN-98.02.html Based on the reports we have received directly, the activity appears to fall within the scope of these two documents. If there is activity which appears to be different than what's covered in these documents, we'd certainly like to receive detailed reports from sites involved. In general, we encourage sites to report scanning activity to the CERT/CC to aid us in understanding the nature and scope of security incidents on the Internet. Our incident reporting guidelines can be found at: http://www.cert.org/tech_tips/incident_reporting.html Regards, Kevin - -- Kevin J. Houle Technical Coordinator _________________________________________________________ CERT* Coordination Center | cert@cert.org Software Engineering Institute | Hotline: +1-412-268-7090 Carnegie Mellon University | Fax: +1-412-268-6989 - --------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: PGP for Business Security 5.5 iQCVAwUBNlHrn3VP+x0t4w7BAQEvfAP/TbrJozmQZ/4UUrn/pCO7QiSrTzla74YK NLy1o1hkbmsPOSU91x0ShqG0CKGjlaZu+DQrEnJHJY7q1zgUa+UVF/CPNvRGJhyc MpbOa1ZgSy1wVhS5FCKbc0kBDcgQVDgjvfkizSgX38RlCviGN5jaaQgsutimRfFT 8LVFgFS2Rig= =rUg5 -----END PGP SIGNATURE-----