Attack pattern?

Eduardo.Martinicex.es
Mon, 21 Dec 1998 13:29:52 +0100

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: antirez: "new tcp scan method"
• Previous message: Stefan Norberg: "Re: NAT and NetBios"
• Next in thread: Eduardo.Martinicex.es: "Re: Attack pattern?"
• Maybe reply: Eduardo.Martinicex.es: "Re: Attack pattern?"

Hi all,

During this very late days I've seen a strange pattern of comms against
a web server. Here it is:

1.- ICMP TYPE 15 (Information Request)
2.- UDP port 161 (snmp)
3.- ICMP TYPE 8 (Echo Request)
4.- TCP port 280 (http-mgmt)
5.- TCP port 80 (http)

It happens every two/three days from different IP's. Has anyone seen
this before?. Any ideas?

Help would be appreciated. Thanks in advance.

Eduardo Martin.

• Next message: antirez: "new tcp scan method"
• Previous message: Stefan Norberg: "Re: NAT and NetBios"
• Next in thread: Eduardo.Martinicex.es: "Re: Attack pattern?"
• Maybe reply: Eduardo.Martinicex.es: "Re: Attack pattern?"

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:12:10 CDT