ICMP_webtrends scanner

 

Code: p482

Severity: Warning

 

Description: This event is generated when Webtrends Security Scanner generates an ICMP echo request message.

Impact: ICMP echo requests are used to determine if a host is running at a specific IP address. A remote attacker can scan a large range of hosts using ICMP echo requests to determine what hosts are operational on the network.

Corrective: To prevent information gathering, use a firewall to block incoming ICMP Type 8 Code 0 traffic.