Rule History

SID: 2011011 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 2 • Jul 30, 2010, 12:00 PM

Message:

ET SNMP Attempted UDP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String ILMI

Rule:

alert udp $EXTERNAL_NET any -> $HOME_NET 161 (msg:"ET SNMP Attempted UDP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String ILMI"; content:"ILMI"; nocase; reference:url,www.cisco.com/warp/public/707/cisco-sa-20010228-ios-snmp-community.shtml; reference:url,www.cisco.com/warp/public/707/cisco-sa-20010227-ios-snmp-ilmi.shtml; classtype:attempted-admin; sid:2011011; rev:2; metadata:created_at 2010_07_30, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_07_26;)

Created:

Jul 30, 2010, 12:00 PM

Updated:

Jul 26, 2019, 12:00 PM

DB Created:

Sep 21, 2024, 3:00 AM

DB Updated:

Jan 5, 2026, 10:34 PM

Filename:

rules/emerging-snmp.rules