Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- alert icmp any any -> any any (msg:"Unusual L3retriever Ping detected"; icode:0; itype:8; content:"ABCDEFGHIJKLMNOPQRSTUVWABCDEFGHI"; depth:32; dsize:>32; classtype:bad-unknown; sid:10000116; rev:1;)
- alert icmp any any -> any any (msg:"Unusual Microsoft Windows Ping detected"; icode:0; itype:8; content:"0123456789abcdefghijklmnopqrstu"; depth:32; dsize:>32; classtype:bad-unknown; sid:10000117; rev:1;)
- alert icmp any any -> any any (msg:"Unusual Microsoft Windows 7/2008 Ping detected"; icode:0; itype:8; content:"abcdefghijklmnopqrstuvwabcdefghi"; depth:52; dsize:>52; classtype:bad-unknown; sid:10000118; rev:1;)
- alert icmp any any -> any any (msg:"Unusual abcd ping detected"; icode:0; itype:8; content:"|abcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcd|"; depth:114; dsize:>114; classtype:bad-unknown; sid:10000120; rev:1;)
- alert icmp any any -> any any (msg:"Unusual EPO ping detected"; icode:0; itype:8; content:"|4545454545454545454545454545454545454545454545454545454545454545|"; depth:36; dsize:>36; classtype:bad-unknown; sid:10000122; rev:1;)
- alert icmp any any -> any any (msg:"Unusual Windows 2008 Ping detected"; icode:0; itype:8; content:"ABCDEFGH01234567ABCDEFGH0123456"; depth:33; dsize:>33; classtype:bad-unknown; sid:10000151; rev:1;)
- alert icmp any any -> any any (msg:"Unusual Windows 2008 Ping All Zeros detected"; icode:0; itype:8; content:"|0000000000000000000000000000000000000000000000000000000000000000|"; depth:64; dsize:>64; classtype:bad-unknown; sid:10000156; rev:1;)
- alert icmp any any -> any any (msg:"Unusual PING detected"; icode:0; itype:8; fragbits:!M; ttl:>10; dsize:>10; content:!"ABCDEFGHIJKLMNOPQRSTUVWABCDEFGHI"; depth:32; nocase; content:!"|4545454545454545454545454545454545454545454545454545454545454545|"; depth:36; content:!"0123456789abcdefghijklmnopqrstu"; depth:32; content:!"WANG2"; content:!"SolarWinds"; depth:72; content:!"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"; depth:32; content:!"ABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCDABCD"; depth:128; content:!"|abcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcdabcd|"; depth:114; content:!"ABCDEFGH01234567ABCDEFGH0123456"; depth:33; content:!"|0000000000000000000000000000000000000000000000000000000000000000|"; depth:64; content:!"abcdefghijklmnopqrstuvwabcdefghi"; depth:52; content:!"|00000000000000000000000000000000000000000000000000000000000000|"; depth:31; classtype:bad-unknown; sid:10000119; rev:5;)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
