Threat Encyclopedia

tcp_port_scan

description-logoDescription

This indicates the rate of TCP packet from an IP address is above specified threshold level.
This indicate a possible port scan attack that is one of the most common and most well understood techniques for discovering and mapping services that are listening on a specified port on a target host. It is typically used by attackers to gather information about the target so as to plan the attack approach.

affected-products-logoAffected Products

Any unprotected system that is connected to the Internet and provides TCP-based services

Impact logoImpact

Information Disclosure

recomended-action-logoRecommended Actions

Examine the source IP host for the cause of the traffic.

Telemetry logoTelemetry