Security Incidents mailing list archives

Re: UDP to 161

From: peak () ARGO TROJA MFF CUNI CZ (Pavel Kankovsky)
Date: Tue, 15 Feb 2000 09:51:09 +0100


On Thu, 10 Feb 2000, CL: Nelson, Jeff wrote:

Can I be sure that 161, in this instance, is still SNMP?


Yes. UDP port 161 has always been SNMP.

I figure somebody is probing to find out information for future
attempts.


Either that or the "attacker" has installed some runaway network mapping
tool (it happened to me several times).

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."

Current thread:

Re: SSH2 Exploit?, (continued)
- - - Re: SSH2 Exploit? Alexander Kiwerski (Feb 10)
    - Re: SSH2 Exploit? Richard Trott (Feb 10)
    - Re: SSH2 Exploit? Thiago/c0nd0r (Feb 11)
    - Re: SSH2 Exploit? Jonathan A. Zdziarski (Feb 11)
    - Re: SSH2 Exploit? Thiago/c0nd0r (Feb 11)
    - Re: SSH2 Exploit? Mike Tancsa (Feb 15)
    - Re: SSH2 Exploit? //Stany (Feb 16)
    - Re: SSH2 Exploit? sysadmin (Feb 16)
    - AdForce hitting odd ports Rick Tortorella (Feb 11)
    - UDP to 161 CL: Nelson, Jeff (Feb 10)
    - Re: UDP to 161 Pavel Kankovsky (Feb 15)
    - Re: UDP to 161 Ryan Russell (Feb 15)
    - Re: UDP to 161 CyberPsychotic (Feb 16)
    - Re: UDP to 161 Russell Fulton (Feb 15)
    - Re: Private networks and home.{net|com} Andy Smith (Feb 09)
    - massive unapproved AXFR's and odd rcvd NOTIFY's Paul Wouters (Feb 09)
    - Re: massive unapproved AXFR's and odd rcvd NOTIFY's Francis A. Vidal (Feb 09)
    - [UPDATE]Dos Trojan on Solaris Roderick Padilla (Feb 09)
    - Re: [UPDATE]Dos Trojan on Solaris Ross Mueller (Feb 09)
    - a very strange scan Boris Badenov (Feb 09)
    - Re: a very strange scan Russell Fulton (Feb 10)

(Thread continues...)