DocsAttack Types

Vulnerability & Exploit Scanning

Probing other machines for known weaknesses.

A VM probes other machines for known weaknesses, such as vulnerable web apps, exposed admin panels or old software versions. This is usually an automated attack tool running on a compromised or rented VM. Frabs recognises the probing patterns and the services being targeted.

Detectors (11)

Detector	Measures	Warning	Incident	Critical
Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
Network Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
Service Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
Web Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
SSH Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
RDP Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
FTP Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
SMB Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
Database Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
CMS Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h
IoT Vulnerability Scanning	Distinct targets on the service's ports (targets)	50 in 10 min	250 in 30 min	1,000 in 1 h

Change the thresholds

Use Custom Protection to change any of these, or set them for one VM. See Detectors and Thresholds.

PreviousHost & Network Discovery NextBrute Force & Credential Attacks