Home page logo

fulldisclosure logo Full Disclosure mailing list archives

SNMP Broadcasts
From: "BillyBob" <billybobknob () hotmail com>
Date: Tue, 13 Jul 2004 11:04:52 -0300

For the past 12 hours my external IP has been bombarded with SNMP
Broadcasts, I have sent complaints to my ISP and the ISP of the originating
The attacking IP must have some sort of worm or automated script to go
through all the port numbers as his remote port starts at 60001 and goes up
to 64087 but it hits my local ports 1-highest port # (65535) if I let my
logs record that much.

Could this be some kind of SNMP DoS as I get several/second ?

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]