Unusual Activity by ICIR Hosts

ICIR is a network research institution. In the course of our research, we may run experiments to monitor network performance, server behavior, and so forth. To get realistic information, such experiments sometimes need to be performed on the public Internet. Occasionally these activities may trigger Network Intrusion Detection systems at remote sites. None of our experiements involve trying to break in to remote systems, but we may sometimes generate traffic that is detected as a port scan or nmap-like OS detection probe.

If you detect unusual activity including scanning behavior by any host on the subnet, please report it to abuse@icir.org. We will treat all such reports with the utmost seriousness, and investigate to ensure that it was a legitimate experiment that caused the activity in question.