https://community.cisco.com/t5/network-security/http-flood-attack/m-p/3737230#M15545 <P>Dear reader/s,</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; I have been asked to investigate the attached. This seems like a http flood attack to me. Please correct me if i am wrong. I have enabled http inspect on the ASA under default global_policy. Can you please suggest what else should i do in order to prevent happening again?&nbsp;</P> <P>Many thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</P> Fri, 21 Feb 2020 16:25:43 GMT Shaiz 2020-02-21T16:25:43Z https://community.cisco.com/t5/network-security/http-flood-attack/m-p/3737230#M15545 <P>Dear reader/s,</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; I have been asked to investigate the attached. This seems like a http flood attack to me. Please correct me if i am wrong. I have enabled http inspect on the ASA under default global_policy. Can you please suggest what else should i do in order to prevent happening again?&nbsp;</P> <P>Many thanks</P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;</P> Fri, 21 Feb 2020 16:25:43 GMT https://community.cisco.com/t5/network-security/http-flood-attack/m-p/3737230#M15545 Shaiz 2020-02-21T16:25:43Z https://community.cisco.com/t5/network-security/http-flood-attack/m-p/3738354#M15546 <P>192.168.200.73 - this looks like local IP address. investigate what is this device and why it generating http flood request on port 80 ?</P> Sat, 03 Nov 2018 00:53:50 GMT https://community.cisco.com/t5/network-security/http-flood-attack/m-p/3738354#M15546 balaji.bandi 2018-11-03T00:53:50Z