sid-msg.map
来自「入侵检测系统.linux下与MySql连用的例子」· MAP 代码 · 共 1,162 行 · 第 1/3 页
MAP
1,162 行
484 || ICMP PING Sniffer Pro/NetXRay network scan485 || ICMP Destination Unreachable (Communication Administratively Prohibited)486 || ICMP Destination Unreachable (Communication with Destination Host is Administratively Prohibited)487 || ICMP Destination Unreachable (Communication with Destination Network is Administratively Prohibited)488 || INFO Connection Closed MSG from Port 80489 || INFO FTP No Password490 || INFO battle-mail traffic491 || FTP Bad login492 || TELNET Bad Login493 || INFO psyBNC access494 || INFO Web Cmd completed495 || INFO Web Command Error496 || INFO Web Dir listing497 || INFO Web File Copied ok498 || INFO id check returned root499 || MISC Large ICMP Packet500 || MISC source route lssr501 || MISC source route lssre502 || MISC source route ssrr503 || MISC Source Port 20 to <1024504 || MISC source port 53 to <1024505 || MISC Insecure TIMBUKTU Password506 || MISC ramen worm incoming507 || MISC PCAnywhere Attempted Administrator Login508 || MISC gopher proxy509 || MISC PCCS mysql database admin tool510 || INFO hp jetdirect LCD modification attempt || bugtraq,2245 || arachnids,302511 || MISC Invalid PCAnywhere Login512 || MISC PCAnywhere Failed Login513 || MISC Cisco Catalyst Remote Access514 || MISC ramen worm outgoing515 || MISC source port 53 to <1024516 || MISC - SNMP NT UserList517 || MISC xdmcp query518 || MISC TFTP Write519 || TFTP parent directory520 || TFTP rootdirectory521 || MISC Large UDP Packet522 || MISC Tiny Fragments523 || MISC IP Reserved bit set524 || MISC TCP port 0 traffic525 || MISC UDP port 0 traffic526 || MISC data in TCP SYN packet527 || MISC same SRC/DST528 || MISC loopback traffic529 || NETBIOS DOS RFPoison530 || NETBIOS NT NULL session531 || NETBIOS RFParalyze Attempt532 || NETBIOS SMB ADMIN$access533 || NETBIOS SMB C$ access534 || NETBIOS SMB CD..535 || NETBIOS SMB CD...536 || NETBIOS SMB D$access537 || NETBIOS SMB IPC$access538 || NETBIOS SMB IPC$access539 || NETBIOS Samba clientaccess540 || INFO MSN IM Chat data541 || INFO - ICQ Access542 || INFO Possible IRC Access543 || FTP STOR 1MB possible warez site544 || FTP RETR 1MB possible warez site545 || FTP CWD / - possible warez site546 || FTP CWD - possible warez site547 || FTP MKD - possible warez site548 || FTP MKD . - possible warez site549 || INFO napster login550 || INFO napster new user login551 || INFO napster download attempt552 || INFO napster upload request553 || INFO FTP anonymous FTP554 || FTP MKD / - possible warez site555 || INFO wingate telnet active556 || INFO Outbound GNUTella Connect request557 || INFO Inbound GNUTella Connect accept558 || INFO Outbound GNUTella Connect accept559 || INFO Inbound GNUTella Connect request560 || INFO VNC Active on Network561 || INFO Napster Client Data562 || INFO Napster Client Data563 || INFO Napster Client Data564 || INFO Napster Client Data565 || INFO Napster Server Login566 || MISC PCAnywhere Startup567 || SMTP relaying denied568 || INFO hp jetdirect LCD modification attempt || bugtraq,2245 || arachnids,302569 || RPC snmpXdmi overflow attempt570 || RPC EXPLOIT ttdbserv solaris overflow571 || RPC EXPLOIT ttdbserv Solaris overflow572 || RPC DOS ttdbserv solaris573 || RPC AMD Overflow574 || RPC NFS Showmount575 || RPC portmap request admind576 || RPC portmap request amountd577 || RPC portmap request bootparam578 || RPC portmap request cmsd579 || RPC portmap request mountd580 || RPC portmap request nisd581 || RPC portmap request pcnfsd582 || RPC portmap request rexd583 || RPC portmap request rstatd584 || RPC portmap request rusers585 || RPC portmap request sadmind586 || RPC portmap request selection_svc587 || RPC portmap request status588 || RPC portmap request ttdbserv589 || RPC portmap request yppasswd590 || RPC portmap request ypserv591 || RPC portmap request ypupdated592 || RPC rstatd query593 || RPC snmpXdmi query594 || RPC espd query595 || RPC espd query596 || RPC portmap listing597 || RPC portmap listing598 || RPC portmap listing599 || RPC portmap listing600 || RPC EXPLOIT statdx601 || RSERVICES rsh LinuxNIS602 || RSERVICES rsh bin603 || RSERVICES rsh echo++604 || RSERVICES rsh froot605 || RSERVICES rsh login failure606 || RSERVICES rsh root607 || RSERVICES rlogin bin608 || RSERVICES rlogin echo++609 || RSERVICES rlogin froot610 || RSERVICES rlogin root611 || RSERVICES rsh login failure612 || RPC rusers query613 || SCAN myscan614 || SCAN trojan hack-a-tack probe615 || SCAN Proxy attempt616 || SCAN ident version617 || SCAN ssh-research-scanner618 || INFO - Possible Squid Scan619 || SCAN cybercop os probe620 || SCAN Proxy attempt621 || SCAN FIN622 || SCAN IP Eye SYN Scan623 || SCAN NULL624 || SCAN SYN FIN625 || SCAN XMAS626 || SCAN cybercop os probe627 || SCAN cybercop os probe628 || SCAN nmap TCP629 || SCAN nmap fingerprint attempt630 || SCAN synscan portscan631 || SMTP cybercop scan ehlo632 || SMTP cybercop scan expn633 || SCAN synscan microsoft634 || SCAN Amanda client version635 || SCAN XTACACS logout636 || SCAN cybercop udp bomb637 || SCAN Webtrends Scanner UDP Probe638 || SHELLCODE SGI NOOP639 || SHELLCODE SGI NOOP640 || SHELLCODE aix NOOP641 || SHELLCODE digital unix NOOP642 || SHELLCODE hpux NOOP643 || SHELLCODE hpux NOOP644 || SHELLCODE sparc NOOP645 || SHELLCODE sparc NOOP646 || SHELLCODE sparc NOOP647 || SHELLCODE sparc setuid 0648 || SHELLCODE x86 NOOP649 || SHELLCODE x86 setgid 0650 || SHELLCODE x86 setuid 0651 || SHELLCODE x86 stealth NOOP652 || SHELLCODE linux shellcode653 || SHELLCODE x86 unicode NOOP654 || SMTP RCPT TO overflow655 || SMTP sendmail 8.6.9 exploit656 || SMTP EXPLOIT x86 windows CSMMail overflow657 || SMTP chameleon overflow658 || SMTP exchange mime DOS659 || SMTP expn decode660 || SMTP expn root661 || SMTP majordomo ifs662 || SMTP sendmail 5.5.5 exploit663 || SMTP sendmail 5.5.8 overflow664 || SMTP sendmail 5.6.4 exploit665 || SMTP sendmail 5.6.5 exploit666 || SMTP sendmail 8.4.1 exploit667 || SMTP sendmail 8.6.10 exploit668 || SMTP sendmail 8.6.10 exploit669 || SMTP sendmail 8.6.9 exploit670 || SMTP sendmail 8.6.9 exploit671 || SMTP sendmail 8.6.9c exploit672 || SMTP vrfy decode673 || MS-SQL sp_start_job - program execution674 || MS-SQL - xp_displayparamstmt possible buffer overflow675 || MS-SQL - xp_setsqlsecurity possible buffer overflow676 || MS-SQL sp_start_job - program execution677 || MS-SQL PIPES sp_password - password change678 || MS-SQL PIPES sp_delete_alert - log file deletion679 || MS-SQL PIPES sp_adduser - database user creation680 || MS-SQL sa logon failed681 || MS-SQL PIPES xp_cmdshell - program execution682 || MS-SQL - xp_enumresultset possible buffer overflow683 || MS-SQL sp_password - password change684 || MS-SQL sp_delete_alert - log file deletion685 || MS-SQL sp_adduser - database user creation686 || MS-SQL xp_reg* - registry access687 || MS-SQL xp_cmdshell - program execution688 || MS-SQL sa logon failed689 || MS-SQL PIPES xp_reg* - registry access690 || MS-SQL - xp_printstatements possible buffer overflow691 || MS-SQL Buffer overflow shellcode ACTIVE ATTACK692 || MS-SQL Buffer overflow shellcode ACTIVE ATTACK693 || MS-SQL Buffer overflow shellcode ACTIVE ATTACK694 || MS-SQL Buffer overflow shellcode ACTIVE ATTACK695 || MS-SQL - xp_sprintf possible buffer overflow696 || MS-SQL - xp_showcolv possible buffer overflow697 || MS-SQL - xp_peekqueue possible buffer overflow698 || MS-SQL - xp_proxiedmetadata possible buffer overflow699 || MS-SQL - xp_printstatements possible buffer overflow700 || MS-SQL - xp_updatecolvbm possible buffer overflow701 || MS-SQL - xp_updatecolvbm possible buffer overflow702 || MS-SQL - xp_displayparamstmt possible buffer overflow703 || MS-SQL - xp_setsqlsecurity possible buffer overflow704 || MS-SQL - xp_sprintf possible buffer overflow705 || MS-SQL - xp_showcolv possible buffer overflow706 || MS-SQL - xp_peekqueue possible buffer overflow707 || MS-SQL - xp_proxiedmetadata possible buffer overflow708 || MS-SQL - xp_enumresultset possible buffer overflow709 || TELNET 4Dgifts SGI account attempt710 || TELNET EZsetup account attempt711 || TELNET SGI telnetd format bug712 || TELNET ld_library_path713 || TELNET livingston DOS714 || TELNET resolv_host_conf715 || TELNET Attempted SU from wrong group716 || TELNET access717 || TELNET not on console718 || TELNET login incorrect719 || TELNET root login720 || Virus - SnowWhite Trojan Incoming721 || Virus - Possible pif Worm722 || Virus - Possible NAVIDAD Worm723 || Virus - Possible MyRomeo Worm724 || Virus - Possible MyRomeo Worm725 || Virus - Possible MyRomeo Worm726 || Virus - Possible MyRomeo Worm727 || Virus - Possible MyRomeo Worm728 || Virus - Possible MyRomeo Worm729 || Virus - Possible scr Worm730 || Virus - Possible shs Worm731 || Virus - Possible QAZ Worm732 || Virus - Possible QAZ Worm Infection733 || Virus - Possible QAZ Worm Calling Home734 || Virus - Possible Matrix worm735 || Virus - Possible MyRomeo Worm736 || Virus - Successful eurocalculator execution737 || Virus - Possible eurocalculator.exe file738 || Virus - Possible Pikachu Pokemon Virus739 || Virus - Possible Triplesix Worm740 || Virus - Possible Tune.vbs741 || Virus - Possible NAIL Worm742 || Virus - Possible NAIL Worm743 || Virus - Possible NAIL Worm744 || Virus - Possible NAIL Worm745 || Virus - Possible Papa Worm746 || Virus - Possible Freelink Worm747 || Virus - Possible Simbiosis Worm748 || Virus - Possible BADASS Worm749 || Virus - Possible ExploreZip.B Worm750 || Virus - Possible Video Worm751 || Virus - Possible wscript.KakWorm752 || Virus - Virus - Possible Suppl Worm753 || Virus - Possible NewApt.Worm - theobbq.exe754 || Virus - Possible Word Macro - VALE755 || Virus - Possible IROK Worm756 || Virus - Possible Fix2001 Worm757 || Virus - Possible Y2K Zelu Trojan758 || Virus - Possible The_Fly Trojan759 || Virus - Possible Word Macro - VALE760 || Virus - Possible Passion Worm761 || Virus - Possible NewApt.Worm - cooler3.exe762 || Virus - Possible NewApt.Worm - party.exe763 || Virus - Possible NewApt.Worm - hog.exe764 || Virus - Possible NewApt.Worm - goal1.exe765 || Virus - Possible NewApt.Worm - pirate.exe766 || Virus - Possible NewApt.Worm - video.exe767 || Virus - Possible NewApt.Worm - baby.exe768 || Virus - Possible NewApt.Worm - cooler1.exe769 || Virus - Possible NewApt.Worm - boss.exe770 || Virus - Possible NewApt.Worm - g-zilla.exe771 || Virus - Possible ToadieE-mail Trojan772 || Virus - Possible PrettyPark Trojan773 || Virus - Possible Happy99 Virus774 || Virus - Possible CheckThis Trojan775 || Virus - Possible Bubbleboy Worm776 || Virus - Possible NewApt.Worm - copier.exe777 || Virus - Possible MyPics Worm778 || Virus - Possible Babylonia - X-MAS.exe779 || Virus - Possible NewApt.Worm - gadget.exe780 || Virus - Possible NewApt.Worm - irnglant.exe781 || Virus - Possible NewApt.Worm - casper.exe782 || Virus - Possible NewApt.Worm - fborfw.exe783 || Virus - Possible NewApt.Worm - saddam.exe784 || Virus - Possible NewApt.Worm - bboy.exe785 || Virus - Possible NewApt.Worm - monica.exe786 || Virus - Possible NewApt.Worm - goal.exe787 || Virus - Possible NewApt.Worm - panther.exe788 || Virus - Possible NewApt.Worm - chestburst.exe789 || Virus - Possible NewApt.Worm - farter.exe790 || Virus - Possible Common Sense Worm791 || Virus - Possible NewApt.Worm - cupid2.exe792 || Virus - Possible Resume Worm793 || Virus - Mail .VBS794 || Virus - Possible Resume Worm795 || Virus - Possible Worm - txt.vbs file796 || Virus - Possible Worm - xls.vbs file797 || Virus - Possible Worm - jpg.vbs file798 || Virus - Possible Worm - gif.vbs file799 || Virus - Possible Timofonica Worm800 || Virus - Possible Resume Worm801 || Virus - Possible Worm - doc.vbs file802 || Virus - Possbile Zipped Files Trojan803 || WEB-CGI HyperSeek directory traversal attempt804 || WEB-CGI SWSoft ASPSeek Overflow attempt805 || WEB-CGI webspeed access806 || WEB-CGI yabb access807 || WEB-CGI wwwboard passwd access808 || WEB-CGI webdriver access809 || WEB-CGI whoisraw attempt810 || WEB-CGI whoisraw access811 || WEB-CGI websitepro path access812 || WEB-CGI webplus version access813 || WEB-CGI webplus directory trasversal814 || WEB-CGI webgais access815 || WEB-CGI websendmail access816 || WEB-CGI windmail access817 || WEB-CGI dcforum.cgi invalid user addition attempt818 || WEB-CGI dcforum.cgi access819 || WEB-CGI mmstdod.cgi access820 || WEB-CGI anaconda directory transversal attempt821 || WEB-CGI imagemap overflow attempt822 || WEB-CGI infosearch fname823 || WEB-CGI cvsweb.cgi access824 || WEB-CGI php access825 || WEB-CGI glimpse access826 || WEB-CGI htmlscript access827 || WEB-CGI info2www access828 || WEB-CGI maillist.pl access829 || WEB-CGI nph-test-cgi access830 || WEB-CGI NPH-publish access831 || WEB-CGI websendmail access832 || WEB-CGI perl.exe access833 || WEB-CGI rguest.exe access834 || WEB-CGI rwwwshell.pl access835 || WEB-CGI test-cgi access836 || WEB-CGI testcounter.pl access837 || WEB-CGI uploader.exe access838 || WEB-CGI webgais access839 || WEB-CGI finger access840 || WEB-CGI perlshop.cgi access841 || WEB-CGI pfdisplay.cgi access842 || WEB-CGI aglimpse access || bugtraq,2026 || cve,CVE-1999-0147843 || WEB-CGI anform2 access844 || WEB-CGI args.bat access845 || WEB-CGI AT-admin.cgi access846 || WEB-CGI bnbform.cgi access847 || WEB-CGI campas access848 || WEB-CGI view-source directory traversal849 || WEB-CGI view-source access850 || WEB-CGI wais.p access851 || WEB-CGI files.pl access852 || WEB-CGI wguest.exe access853 || WEB-CGI wrap access854 || WEB-CGI classifieds.cgi access855 || WEB-CGI edit.pl access856 || WEB-CGI environ.cgi access857 || WEB-CGI faxsurvey access858 || WEB-CGI filemail access859 || WEB-CGI man.sh access860 || WEB-CGI snork.bat access861 || WEB-CGI w3-msql access862 || WEB-CGI csh access863 || WEB-CGI day5datacopier.cgi access864 || WEB-CGI day5datanotifier.cgi access865 || WEB-CGI ksh access866 || WEB-CGI post-query access867 || WEB-CGI visadmin.exe access868 || WEB-CGI rsh access869 || WEB-CGI dumpenv.pl access870 || WEB-CGI snorkerz.cmd access871 || WEB-CGI survey.cgi access
⌨️ 快捷键说明
复制代码Ctrl + C
搜索代码Ctrl + F
全屏模式F11
增大字号Ctrl + =
减小字号Ctrl + -
显示快捷键?