What does the following entry mean?
Is that mean someone has connected to the server from this IP or somthing else?Nov 23 15:33:54 www-prod-2 snmpd[1573]: Connection from UDP: [66.151.147.194]:47011->[xxx.xxx.xxx.xxx]:161
Answer
This looks like a connection or connection attempt from ip 66.151.147.194 to the SNMP port of the Computer. SNMP uses Port 161 (TCP/UDP).
Simple Network Management Protocol (SNMP) is a popular protocol for
network management. It is used for collecting information from, and
configuring, network devices, such as servers, printers, hubs,
switches, and routers on an Internet Protocol (IP) network.
https://technet.microsoft.com/en-us/library/cc776379%28v=ws.10%29.aspx
If you have no idea what it is, then you better check your server’s configuration for SNMP service and make sure it is secured or properly configured.
Attribution
Source : Link , Question Author : 1Bladesforhire , Answer Author : Diamond
