Intrusion PreventionISF.Creds.SNMP.BruteForce
Description
This indicates detection of BruteForce attack for SNMP service.
The repeated login attempts, at a rate of about 60 times in 10 seconds, may indicate that an attacker is attempting a brute force attack.
Affected Products
SNMP service
Impact
Impact of a successful attack could vary, with the worse case being a system compromise.
Recommended Actions
Adjust the threshold to your network.
Monitor the traffic from that network for any suspicious activity.
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
References
https://github.com/dark-lbp/isf| ID | 49360 |
| Created | Jul 20, 2020 |
| Updated | Aug 30, 2020 |
| Risk |
|
| Default Action | drop |
| Active | |
| Affected OS | Other |
| Affected App | SCADA |
| Profile Type | Anomaly |