Full Disclosure mailing list archives

SNMP Broadcasts


From: "BillyBob" <billybobknob () hotmail com>
Date: Tue, 13 Jul 2004 11:04:52 -0300

For the past 12 hours my external IP has been bombarded with SNMP
Broadcasts, I have sent complaints to my ISP and the ISP of the originating
IP.
The attacking IP must have some sort of worm or automated script to go
through all the port numbers as his remote port starts at 60001 and goes up
to 64087 but it hits my local ports 1-highest port # (65535) if I let my
logs record that much.

Could this be some kind of SNMP DoS as I get several/second ?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: