|
Examples of security actions that will trigger security alarms to our 24 hour / 7 day staffed network operations center are, but are not limited to:
- Satan or port scans, full, half, fin or stealth
- Vulnerability probing of any kind on any machines or devices.
- Ping scans and Ping Floods and ICMP abuses
- SNMP attempts
- Mail host relay use or hi-jacking
- Telnet, FTP, R-commands, etc. to internal systems
- Attempts to access privileged or private TCP or UDP ports
- HTTP access without the use of a Web browser
- Multiple and frequent Finger attempts
- Excessive resource utilization
- Source route spoofing
- Smurf attacks
- IP number spoofing or masquerading
- Forging TCP packets or email header information
- Syn Floods
- OOB attacks
- Password cracking or guessing schemes
- Excessive email postings (SPAM)
|