Can someone please help me! Approximately 3-5 times a day I have an APC Smart UPS that is sending 3-4 email notifications (at the same time) that an unauthorized user trying to connect over SNMP. Each time this happens the source IP is different. The source is always coming from an end user machine.
It has been happening for a couple weeks and we are testing out PRTG for log management but we turned the server off that was running that software for a couple days and still got the notification.
Please see below to see what Wireshark is showing me. I have tried some things but with no success. Any direction would be greatly appreciated!
asked 26 Oct '17, 13:10