cancel
Showing results for 
Search instead for 
Did you mean: 

new worm/virus hitting UDP 161?

Community Veteran
Posts: 3,181
Thanks: 19
Fixes: 2
Registered: 31-07-2007

new worm/virus hitting UDP 161?

I've got a PN customer hitting my FW on that port, could it be a misconfigered server or new virus/worm?

and yes I've mailed him and abuse already
Unvalued customer since 2001 funding cheap internet for others / DSL/Fibre house move 24 month regrade from 8th May 2017
3 REPLIES
thejudge
Grafter
Posts: 571
Thanks: 1
Registered: 01-08-2007

new worm/virus hitting UDP 161?

There's a mass outbreak of infected spam about. The standard pattern, claiming to be security patches from M$. Evil

I've had to clear a hundred or so off my mailboxes this afternoon. :x
N/A

new worm/virus hitting UDP 161?

Just the one? It would be a very low-scale virus/worm if that's what it was. According to google, udp 161 is used for SNMP [Simple Network Management Protocol]. It rather sounds like someone scanning for a vulnerability. There are a few small details on this mailling-list.
Community Veteran
Posts: 3,181
Thanks: 19
Fixes: 2
Registered: 31-07-2007

new worm/virus hitting UDP 161?

well lookie at my FW the PN user is back again. Second strike now, third and its name and shame, but guess that wont matter.

Anyone else getting this?
Unvalued customer since 2001 funding cheap internet for others / DSL/Fibre house move 24 month regrade from 8th May 2017