Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 1418 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IPS: Many, many mails

alasc
Hello,

just a question. The last days we recognize many mails
[1:469:0] D ICMP PING NMAP [Classification: Attempted Information Leak] [Priority: 2]:  {PROTO001} 212.152.39.1xx -> 212.114.235.xx

Sometimes every 2 minutes! What´s that? "Sasser and frinds" which scan IP´s ?

Who can give an advice?

Alex


This thread was automatically locked due to age.
Parents
  • 0
    Hi Alex,
    do you find more information in your IPS-Log?Somebody pings your IP-Address with nmap. Have a look in the WebAdmin which pattern matched and click on the link for more informations.
    /bagira
  • 0 in reply to bagira
    Hello bagira,

    no more Info from logs ! I cannot imagine that the number of pings increased so much. Especially since the time Sasser came to germany.... Cause of that I think these pings come from infected pc´s . 

    Who can help?

    Alex
Reply
  • 0 in reply to bagira
    Hello bagira,

    no more Info from logs ! I cannot imagine that the number of pings increased so much. Especially since the time Sasser came to germany.... Cause of that I think these pings come from infected pc´s . 

    Who can help?

    Alex
Children