Security Incidents mailing list archives

SNMP worm?

From: "David Gillett" <gillettdavid () fhda edu>
Date: Wed, 26 Oct 2005 13:56:38 -0700

  We're suddenly seeing a lot of unauthorized SNMP traffic, including 
some to broadcast destinations, from stations on our network that have
no business doing that.  Anyone know of a new virus/worm with that
behaviour?  (Details are still sketchy here -- I'm hoping someone else
has seen this and can provide clues of additional symptoms to look for.)

David Gillett

Current thread:

Re: SSH bruteforce on its way..., (continued)
- - Re: SSH bruteforce on its way... Justin (Oct 24)
    - Re: SSH bruteforce on its way... Russell Fulton (Oct 25)
    - Re: SSH bruteforce on its way... Valdis . Kletnieks (Oct 26)
    - Re: SSH bruteforce on its way... Kurt Seifried (Oct 26)
    - Re: SSH bruteforce on its way... Justin (Oct 26)
    - Re: SSH bruteforce on its way... Daniel Cid (Oct 26)
  - Re: SSH bruteforce on its way... Valdis . Kletnieks (Oct 25)
- Re: SSH bruteforce on its way... Michael . Lang (Oct 25)
  - Re: SSH bruteforce on its way... Javier Fernandez-Sanguino (Oct 26)
    - Re: SSH bruteforce on its way... Volker Tanger (Oct 26)
    - SNMP worm? David Gillett (Oct 26)
    - Re: SNMP worm? Mark Ryan del Moral Talabis (Oct 26)
    - RE: SNMP worm? David Gutierrez (Oct 26)
    - Re: SSH bruteforce on its way... Christine Kronberg (Oct 31)
  - Re: SSH bruteforce on its way... Lionel Ferette (Oct 26)
    - Re: SSH bruteforce on its way... Michael Lang (Oct 26)
  - Re: SSH bruteforce on its way... Bryan Hatter (Oct 26)