SNMP DDoS Vector - Secure Your Network NOW!

Spamhaus describes a new SNMP-based DDoS amplification attack observed in December 2011, where attackers send spoofed SNMP requests to public SNMP servers that then reply with amplified UDP traffic to a victim, producing very large attack volumes. The report explains detection and mitigation steps—identifying and filtering large/fragmented packets, implementing BCP38 ingress/egress filtering, restricting SNMP access, and coordinating with upstream providers and law enforcement.