IP.Protocol.Scan

Description

This indicates detection of an attempted IP protocol scan.
IP protocol scans, such as from Nmap, can probe a target machine to determine which IP protocols (TCP, ICMP, IGMP, etc.) are supported.

Affected Products

All web servers

Impact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

Recommended Actions

Monitor the traffic from the network for any suspicious activity.

References