Firewall Wizards mailing list archives

Attack pattern?


From: Eduardo.Martin () icex es
Date: Mon, 21 Dec 1998 13:29:52 +0100

Hi all,

During this very late days I've seen a strange pattern of comms against
a web server. Here it is:

1.- ICMP TYPE 15 (Information Request)
2.- UDP port 161 (snmp)
3.- ICMP TYPE 8 (Echo Request)
4.- TCP port 280 (http-mgmt)
5.- TCP port 80 (http)

It happens every two/three days from different IP's. Has anyone seen
this before?. Any ideas?

Help would be appreciated. Thanks in advance.

Eduardo Martin.



Current thread: