mailing list archives
From: "BillyBob" <billybobknob () hotmail com>
Date: Tue, 13 Jul 2004 11:04:52 -0300
For the past 12 hours my external IP has been bombarded with SNMP
Broadcasts, I have sent complaints to my ISP and the ISP of the originating
The attacking IP must have some sort of worm or automated script to go
through all the port numbers as his remote port starts at 60001 and goes up
to 64087 but it hits my local ports 1-highest port # (65535) if I let my
logs record that much.
Could this be some kind of SNMP DoS as I get several/second ?
Full-Disclosure - We believe in it.