""ET SNMP Attempted UDP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String ILMI""

SID: 2011011

Revision: 3

Class Type: attempted-admin

Metadata: created_at 2010_07_30, updated_at 2010_08_27

Reference:

Protocol: udp

Source Network: $EXTERNAL_NET

Source Port: any

Destination Network: $HOME_NET

Destination Port: 161

Flow:

Contents:

  • Value: "ILMI"

Within:

PCRE:

Special Options:

  • nocase

source