I have asked for any further information they will share with us. These programs generate a lot of icmp traffic while downloading. I don't think they are written all that well. I blocked ALL icmp to my network. The sources all originate with the same service provider.
All times are eastern.
Be on the lookout for new CGI-BIN scans. A web based scanner was placed online yesterday. This isn't enough traffic to be considered a DoS, but I keep wondering what the meaning of this is.