6.1.6.2. Observed Network Activity

6.1.6.2.1. Significantly increased network usage

	6.1.6.2.1.1. Network Service Worm
	6.1.6.2.1.2. Mass Mailing Worm
	6.1.6.2.1.3. Backdoor
	6.1.6.2.1.4. E-mail Generators
	6.1.6.2.1.5. Bot/Downloader

6.1.6.2.2. Port scans and failed connection attempts targeted at the

6.1.6.2.3. Network connections between the host and unknown remote systems