### ARACHNIDS
BACKDOOR subseven 22 {TCP}				arachnids,485
BACKDOOR - Dagger_1.4.0_client_connect {TCP}		arachnids,483
BACKDOOR - Dagger_1.4.0 {TCP}				arachnids,484
BACKDOOR ACKcmdC trojan scan {TCP}			arachnids,445
BACKDOOR netbus active {TCP}				arachnids,401
BACKDOOR netbus getinfo {TCP}				arachnids,403
BACKDOOR netbus getinfo {TCP}				arachnids,403
BACKDOOR BackOrifice access {TCP}			arachnids,400
BACKDOOR DeepThroat access {UDP}			arachnids,405
BACKDOOR netbus active {TCP}				arachnids,401
BACKDOOR netbus active {TCP}				arachnids,401
BACKDOOR BackOrifice access {UDP}			arachnids,399
BACKDOOR Infector.1.x {TCP}				arachnids,315
BACKDOOR SatansBackdoor.2.0.Beta {TCP}		arachnids,316
BACKDOOR Doly 2.0 access {TCP}			arachnids,312
BACKDOOR DeepThroat 3.1 System Info Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 FTP Status Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 E-Mail Info From Server {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 E-Mail Info Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Server Status From Server {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Server Status Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Drive Info From Server {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 System Info From Server {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Drive Info Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Server FTP Port Change From Server {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Cached Passwords Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 RAS Passwords Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Server Password Change Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Server Password Remove Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Rehash Client Request {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Server Rehash Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 ICQ Alert OFF Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 ICQ Alert ON Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Change Wallpaper Client Request {UDP}		arachnids,106
BACKDOOR GirlFriendaccess {TCP}			arachnids,98
BACKDOOR NetSphere access {TCP}			arachnids,76
BACKDOOR GateCrasher {TCP}				arachnids,99
BACKDOOR DeepThroat 3.1 Keylogger Active on Network {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Server Active on Network {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Client Sending Data to Server on Network {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Wrong Password {UDP}				arachnids,106
BACKDOOR NetSphere 1.31.337 access {TCP}				arachnids,76
BACKDOOR DeepThroat 3.1 Visible Window List Client Request {UDP}	arachnids,106
BACKDOOR NetMetro File List {TCP}					arachnids,79
BACKDOOR NetMetro Incoming Traffic {TCP}				arachnids,79
BACKDOOR Matrix 2.0 Client connect {UDP}				arachnids,83
BACKDOOR Matrix 2.0 Server access {UDP}				arachnids,83
BACKDOOR WinCrash 1.0 Server Active {TCP}				arachnids,36
BACKDOOR DeepThroat 3.1 Server Active on Network {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Keylogger on Server ON {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Show Picture Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Hide/Show Clock Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Hide/Show Desktop Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Swap Mouse Buttons Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Enable/Disable CTRL-ALT-DEL Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Freeze Mouse Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Show Dialog Box Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Show Replyable Dialog Box Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Resolution Change Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Hide/Show Start Button Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Keylogger on Server OFF {UDP}				arachnids,106
BACKDOOR DeepThroat 3.1 FTP Server Port Client Request {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Process List Client request {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Close Port Scan Client Request {UDP}			arachnids,106
BACKDOOR DeepThroat 3.1 Registry Add Client Request {UDP}			arachnids,106
BACKDOOR SIGNATURE - Q ICMP {ICMP}			arachnids,202
BACKDOOR Q access {TCP}				arachnids,203
BACKDOOR CDK {TCP}					arachnids,263
BACKDOOR DeepThroat 3.1 Monitor on/off Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Delete File Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Kill Window Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Disable Window Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Enable Window Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Change Window Title Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Hide Window Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Show Window Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Send Text to Window Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Server Response {UDP}				arachnids,106
BACKDOOR DeepThroat 3.1 Hide/Show Systray Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Create Directory Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 All Window List Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Play Sound Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Run Program Normal Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Run Program Hidden Client Request {UDP}	arachnids,106
BACKDOOR DeepThroat 3.1 Get NET File Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Find File Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 Find File Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 HUP Modem Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 CD ROM Open Client Request {UDP}		arachnids,106
BACKDOOR DeepThroat 3.1 CD ROM Close Client Request {UDP}		arachnids,106
BACKDOOR w00w00 attempt {TCP}				arachnids,510
BACKDOOR MISC linux rootkit satori attempt {TCP}	arachnids,516
BACKDOOR hack-a-tack attempt {TCP}			arachnids,314
DDOS TFN Probe {ICMP}					arachnids,443
DDOS tfn2k icmp possible communication {ICMP}		arachnids,425
DDOS Trin00\:DaemontoMaster(PONGdetected) {UDP}	arachnids,187
DDOS Stacheldraht server-spoof {ICMP}			arachnids,193
DDOS Stacheldraht server-response-gag {ICMP}		arachnids,195
DDOS Stacheldraht server-response {ICMP}		arachnids,191
DDOS Stacheldraht client-spoofworks {ICMP}		arachnids,192
DDOS TFN client command BE {ICMP}			arachnids,184
DDOS Stacheldraht client-check {ICMP}			arachnids,190
DDOS shaft client to handler {TCP}			arachnids,254
DDOS Trin00\:DaemontoMaster(messagedetected) {UDP}	arachnids,186
DDOS Trin00\:DaemontoMaster(*HELLO*detected) {UDP}	arachnids,185
DDOS Trin00\:Attacker to Master default startup password {UDP}	arachnids,197
DDOS Stacheldraht client-check-gag {ICMP}		arachnids,194
DDOS Trin00\:MastertoDaemon(defaultpassdetected!) {UDP}		arachnids,197
DDOS TFN server response {ICMP}			arachnids,182
DDOS shaft handler to agent {UDP}			arachnids,255
DDOS shaft agent to handler {UDP}			arachnids,256
DDOS shaft synflood {TCP}				arachnids,253
DDOS mstream client to handler {TCP}			arachnids,111
DDOS - TFN client command LE {TCP}			arachnids,183
FINGER probe 0 attempt {TCP}				arachnids,378
MISC ramen worm incoming {TCP}			arachnids,460
X11 outbound client connection detected {TCP}		arachnids,126
DNS named iquery attempt {UDP}			arachnids,277
DNS zone transfer {TCP}				arachnids,212
DNS named authors attempt {UDP}			arachnids,480
DNS named version attempt {UDP}			arachnids,278
DNS EXPLOIT named tsig overflow attempt {TCP}		arachnids,482
DOS ath {ICMP}						arachnids,264
DOS Real Audio Server {TCP}				arachnids,411
DOS Ascend Route {UDP}				arachnids,262
DOS arkiea backup {TCP}				arachnids,261
EXPLOIT netscape 4.7 client overflow {TCP}		arachnids,215
EXPLOIT delegate proxy overflow {TCP}			arachnids,267
EXPLOIT sniffit overflow {TCP}			arachnids,273
EXPLOIT netscape 4.7 unsucessful overflow {TCP}	arachnids,214
EXPLOIT ntpdx overflow attempt {UDP}			arachnids,492
FINGER search query {TCP}				arachnids,375
FINGER root query {TCP}				arachnids,376
FINGER null request {TCP}				arachnids,377
FINGER remote command \; execution attempt {TCP}	arachnids,379
FINGER remote command pipe execution attempt {TCP}	arachnids,380
FINGER bomb attempt {TCP}				arachnids,381
FINGER cybercop redirection {TCP}			arachnids,11
FINGER redirection attempt {TCP}			arachnids,251
FINGER cybercop query {TCP}				arachnids,132
FINGER 0 query {TCP}					arachnids,378
FINGER . query {TCP}					arachnids,130
FTP .forward {TCP}					arachnids,319
FTP .rhosts {TCP}					arachnids,328
FTP CWD ~root attempt {TCP}				arachnids,318
FTP EXPLOIT aix overflow {TCP}			arachnids,257
FTP EXPLOIT format string {TCP}			arachnids,453
FTP EXPLOIT OpenBSD x86 ftpd {TCP}			arachnids,446
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Solaris 2.8 {TCP}		arachnids,451
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow FreeBSD {TCP}		arachnids,228
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Linux {TCP}		arachnids,287
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow generic {TCP}		arachnids,285
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string check {TCP}				arachnids,286
FTP EXPLOIT wu-ftpd 2.6.0 {TCP}			arachnids,440
FTP adm scan {TCP}					arachnids,332
FTP iss scan {TCP}					arachnids,331
FTP pass wh00t {TCP}					arachnids,324
FTP passwd retreval attempt {TCP}			arachnids,213
FTP saint scan {TCP}					arachnids,330
FTP satan scan {TCP}					arachnids,329
FTP site exec {TCP}					arachnids,317
FTP tar parameters {TCP}				arachnids,134
FTP ADMw0rm ftp login attempt {TCP}			arachnids,01
ICMP IRDP router advertisement {ICMP}			arachnids,173
ICMP IRDP router selection {ICMP}			arachnids,174
ICMP PING BSDtype {ICMP}				arachnids,152
ICMP PING BayRS Router {ICMP}				arachnids,438
ICMP PING BeOS4.x {ICMP}				arachnids,151
ICMP PING Cisco Type.x {ICMP}				arachnids,153
ICMP PING Delphi-Piette Windows {ICMP}			arachnids,155
ICMP PING Flowpoint2200 or Network Management Software {ICMP}			arachnids,156
ICMP PING IP NetMonitor Macintosh {ICMP}		arachnids,157
ICMP PING LINUX/*BSD {ICMP}				arachnids,447
ICMP PING Microsoft Windows {ICMP}			arachnids,159
ICMP PING Network Toolbox 3 Windows {ICMP}		arachnids,161
ICMP PING Ping-O-MeterWindows {ICMP}			arachnids,164
ICMP PING Pinger Windows {ICMP}			arachnids,163
ICMP PING Seer Windows {ICMP}				arachnids,166
ICMP PING Sun Solaris {ICMP}				arachnids,448
ICMP PING Windows {ICMP}				arachnids,169
ICMP traceroute {ICMP}					arachnids,118
ICMP Router Advertisment {ICMP}			arachnids,173
ICMP Router Selection {ICMP}				arachnids,174
ICMP Traceroute ipopts {ICMP}				arachnids,238
ICMP ISS Pinger {ICMP}					arachnids,158
ICMP L3retriever {ICMP}				arachnids,311
ICMP Nemesis v1.1 Echo {ICMP}				arachnids,449
ICMP PING NMAP {ICMP}					arachnids,162
ICMP icmpenum v1.1.1 {ICMP}				arachnids,450
ICMP redirect host {ICMP}				arachnids,135
ICMP redirect net {ICMP}				arachnids,199
ICMP traceroute ipopts {ICMP}				arachnids,238
ICMP webtrends scanner {ICMP}				arachnids,307
ICMP TJPingPro1.1Build 2 Windows {ICMP}		arachnids,167
ICMP PING WhatsupGold Windows {ICMP}			arachnids,168
ICMP PING CyberKit 2.2 Windows {ICMP}			arachnids,154
ICMP Large ICMP Packet {ICMP}				arachnids,246
INFO FTP No Password {TCP}				arachnids,322
MISC source route lssr {TCP}				arachnids,418
MISC source route lssre {TCP}				arachnids,420
MISC source route ssrr {TCP}				arachnids,422
MISC Source Port 20 to <1024 {TCP}			arachnids,06
MISC source port 53 to <1024 {TCP}			arachnids,07
MISC Insecure TIMBUKTU Password {TCP}			arachnids,229
MISC gopher proxy {TCP}				arachnids,409
MISC PCAnywhere Failed Login {TCP}			arachnids,240
MISC Cisco Catalyst Remote Access {TCP}		arachnids,129
MISC ramen worm {TCP}					arachnids,461
MISC xdmcp query {UDP}				arachnids,476
MISC Large UDP Packet {UDP}				arachnids,247
NETBIOS DOS RFPoison {TCP}				arachnids,454
NETBIOS NT NULL session {TCP}				arachnids,204
NETBIOS SMB ADMIN$access {TCP}			arachnids,340
NETBIOS SMB C$ access {TCP}				arachnids,339
NETBIOS SMB CD.. {TCP}				arachnids,338
NETBIOS SMB CD... {TCP}				arachnids,337
NETBIOS SMB D$access {TCP}				arachnids,336
NETBIOS SMB IPC$access {TCP}				arachnids,335
NETBIOS SMB IPC$access {TCP}				arachnids,334
NETBIOS Samba clientaccess {TCP}			arachnids,341
NNTP Cassandra Overflow {TCP}				arachnids,274
X11 MIT Magic Cookie detected {TCP}			arachnids,396
X11 xopen {TCP}					arachnids,395
POLICY WinGate telnet server response {TCP}		arachnids,366
POLICY PCAnywhere server response {UDP}		arachnids,239
POLICY SMTP relaying denied {TCP}			arachnids,249
POLICY HP JetDirect LCD modification attempt {TCP}	arachnids,302
RPC EXPLOIT ttdbserv solaris overflow {TCP}		arachnids,242
RPC DOS ttdbserv solaris {TCP}			arachnids,241
RPC AMD Overflow {TCP}				arachnids,217
RPC NFS Showmount {TCP}				arachnids,26
RPC portmap request admind {UDP}			arachnids,18
RPC portmap request amountd {UDP}			arachnids,19
RPC portmap request bootparam {UDP}			arachnids,16
RPC portmap request cmsd {UDP}			arachnids,17
RPC portmap request mountd {UDP}			arachnids,13
RPC portmap request nisd {UDP}			arachnids,21
RPC portmap request pcnfsd {UDP}			arachnids,22
RPC portmap request rexd {UDP}			arachnids,23
RPC portmap request rstatd {UDP}			arachnids,10
RPC portmap request rusers {UDP}			arachnids,133
RPC portmap request sadmind {UDP}			arachnids,20
RPC portmap request selection_svc {UDP}		arachnids,25
RPC portmap request status {UDP}			arachnids,15
RPC portmap request ttdbserv {UDP}			arachnids,24
RPC portmap request yppasswd {UDP}			arachnids,14
RPC portmap request ypserv {UDP}			arachnids,12
RPC portmap request ypupdated {UDP}			arachnids,125
RPC rstatd query {UDP}				arachnids,9
RPC portmap listing {UDP}				arachnids,429
RPC EXPLOIT statdx {UDP}				arachnids,442
RPC rusers query {UDP}				arachnids,136
RSERVICES rlogin bin {TCP}				arachnids,384
RSERVICES rlogin echo++ {TCP}				arachnids,385
RSERVICES rsh froot {TCP}				arachnids,386
RSERVICES rlogin login failure {TCP}			arachnids,392
RSERVICES rlogin root {TCP}				arachnids,389
RSERVICES rsh bin {TCP}				arachnids,390
RSERVICES rsh echo + + {TCP}				arachnids,388
RSERVICES rsh froot {TCP}				arachnids,387
RSERVICES rsh root {TCP}				arachnids,391
SCAN myscan {TCP}					arachnids,439
SCAN ident version request {TCP}			arachnids,303
SCAN cybercop os probe {TCP}				arachnids,146
SCAN FIN {TCP}					arachnids,27
SCAN ipEye SYN scan {TCP}				arachnids,236
SCAN NULL {TCP}					arachnids,4
SCAN SYN FIN {TCP}					arachnids,198
SCAN XMAS {TCP}					arachnids,144
SCAN nmap XMAS {TCP}					arachnids,30
SCAN nmap TCP {TCP}					arachnids,28
SCAN nmap fingerprint attempt {TCP}			arachnids,05
SCAN synscan portscan {TCP}				arachnids,441
SCAN cybercop os PA12 attempt {TCP}			arachnids,149
SCAN cybercop os SFU12 probe {TCP}			arachnids,150
SCAN XTACACS logout {UDP}				arachnids,408
SCAN cybercop udp bomb {UDP}				arachnids,363
SCAN Webtrends Scanner UDP Probe {UDP}		arachnids,308
SHELLCODE sparc setuid 0 {TCP}			arachnids,282
SHELLCODE x86 setgid 0 {TCP}				arachnids,284
SHELLCODE x86 setuid 0 {TCP}				arachnids,436
SHELLCODE SGI NOOP {TCP}				arachnids,356
SHELLCODE SGI NOOP {TCP}				arachnids,357
SHELLCODE digital unix NOOP {TCP}			arachnids,352
SHELLCODE hpux NOOP {TCP}			arachnids,358
SHELLCODE hpux NOOP {TCP}			arachnids,359
SHELLCODE sparc NOOP {TCP}				arachnids,345
SHELLCODE sparc NOOP {TCP}				arachnids,353
SHELLCODE sparc NOOP {TCP}				arachnids,355
SHELLCODE x86 NOOP {TCP}				arachnids,181
SHELLCODE x86 stealth NOOP {TCP}			arachnids,291
SHELLCODE linux shellcode {TCP}			arachnids,343
SMTP sendmail 8.6.9 exploit {TCP}			arachnids,140
SMTP chameleon overflow {TCP}				arachnids,266
SMTP expn decode {TCP}				arachnids,32
SMTP expn root {TCP}					arachnids,31
SMTP majordomo ifs {TCP}				arachnids,143
SMTP sendmail 5.5.5 exploit {TCP}			arachnids,119
SMTP sendmail 5.5.8 overflow {TCP}			arachnids,172
SMTP sendmail 5.6.4 exploit {TCP}			arachnids,121
SMTP sendmail 5.6.5 exploit {TCP}			arachnids,122
SMTP sendmail 8.4.1 exploit {TCP}			arachnids,120
SMTP sendmail 8.6.10 exploit {TCP}			arachnids,123
SMTP sendmail 8.6.10 exploit {TCP}			arachnids,124
SMTP sendmail 8.6.9 exploit {TCP}			arachnids,142
SMTP sendmail 8.6.9 exploit {TCP}			arachnids,139
SMTP sendmail 8.6.9c exploit {TCP}			arachnids,141
SMTP vrfy decode {TCP}				arachnids,373
SMTP ehlo cybercop attempt {TCP}			arachnids,372
SMTP expn cybercop attempt {TCP}			arachnids,371
TELNET SGI telnetd format bug {TCP}			arachnids,304
TELNET ld_library_path {TCP}				arachnids,367
TELNET livingston DOS {TCP}				arachnids,370
TELNET resolv_host_conf {TCP}				arachnids,369
TELNET not on console {TCP}				arachnids,365
TELNET login incorrect {TCP}				arachnids,127
TELNET access {TCP}					arachnids,08
TFTP parent directory {UDP}				arachnids,137
TFTP root directory {UDP}				arachnids,138
TFTP Put"; content {UDP}				arachnids,148
WEB-CGI webspeed access {TCP}				arachnids,467
WEB-CGI yabb.cgi directory traversal attempt {TCP}	arachnids,462
WEB-CGI yabb.cgi access {TCP}				arachnids,462
WEB-CGI /wwwboard/passwd.txt access {TCP}		arachnids,463
WEB-CGI webdriver access {TCP}			arachnids,473
WEB-CGI whois_raw.cgi arbitrary command execution attempt {TCP}		arachnids,466
WEB-CGI whois_raw.cgi access {TCP}			arachnids,466
WEB-CGI websitepro path access {TCP}			arachnids,468
WEB-CGI webplus version access {TCP}			arachnids,470
WEB-CGI webplus directory traversal {TCP}		arachnids,471
WEB-CGI websendmail access {TCP}			arachnids,469
WEB-CGI imagemap.exe overflow attempt {TCP}		arachnids,412
WEB-CGI imagemap.exe access {TCP}			arachnids,412
WEB-CGI php.cgi access {TCP}				arachnids,232
WEB-CGI nph-test-cgi access {TCP}			arachnids,224
WEB-CGI test-cgi attempt {TCP}			arachnids,218
WEB-CGI test-cgi access {TCP}				arachnids,218
WEB-CGI webgais access {TCP}				arachnids,472
WEB-CGI finger access {TCP}				arachnids,221
WEB-CGI anform2 access {TCP}				arachnids,225
WEB-CGI wrap access {TCP}				arachnids,234
WEB-CGI snork.bat access {TCP}			arachnids,220
WEB-CGI w3-msql access {TCP}				arachnids,210
WEB-CGI scriptalias access {TCP}			arachnids,227
WEB-CGI w3-msql solaris x86  access {TCP}		arachnids,211
WEB-CGI win-c-sample.exe access {TCP}			arachnids,231
WEB-CGI formmail arbitrary command execution attempt {TCP}			arachnids,226
WEB-CGI formmail access {TCP}				arachnids,226
WEB-CGI phf arbitrary command execution attempt {TCP}				arachnids,128
WEB-CGI phf access {TCP}				arachnids,128
WEB-CGI perl.exe command attempt {TCP}		arachnids,219
WEB-CGI perl.exe access {TCP}				arachnids,219
WEB-CGI perl command attempt {TCP}			arachnids,219
WEB-CGI SGI InfoSearch fname attempt {TCP}		arachnids,290
WEB-CGI SGI InfoSearch fname access {TCP}		arachnids,290
WEB-COLDFUSION application.cfm access {TCP}		arachnids,268
WEB-COLDFUSION onrequestend.cfm access {TCP}		arachnids,269
WEB-FRONTPAGE rad overflow attempt {TCP}		arachnids,555
WEB-FRONTPAGE rad fp30reg.dll access {TCP}		arachnids,555
WEB-FRONTPAGE shtml.dll access {TCP}			arachnids,292
WEB-FRONTPAGE fourdots request {TCP}			arachnids,248
WEB-FRONTPAGE dvwssr.dll access {TCP}			arachnids,271
WEB-IIS ISAPI .printer access {TCP}			arachnids,533
WEB-IIS ISAPI .ida attempt {TCP}			arachnids,552
WEB-IIS ISAPI .ida access {TCP}			arachnids,552
WEB-IIS ISAPI .idq attempt {TCP}			arachnids,553
WEB-IIS ISAPI .idq access {TCP}			arachnids,553
WEB-IIS encoding access {TCP}				arachnids,200
WEB-IIS view source via translate header {TCP}	arachnids,305
WEB-IIS webhits access {TCP}				arachnids,237
WEB-MISC webdav search access {TCP}			arachnids,474
WEB-MISC PHP strings overflow {TCP}			arachnids,431
WEB-MISC PHP strings overflow {TCP}			arachnids,430
WEB-MISC cybercop scan {TCP}				arachnids,374
WEB-MISC L3retriever HTTP Probe {TCP}			arachnids,310
WEB-MISC Webtrends HTTP probe {TCP}			arachnids,309
WEB-MISC Nessus 404 probe {TCP}			arachnids,301
WEB-MISC http directory traversal {TCP}		arachnids,298
SCAN cybercop os probe {TCP}				arachnids,145
WEB-MISC Phorum admin access {TCP}			arachnids,205
WEB-MISC Phorum auth access {TCP}			arachnids,206
WEB-MISC Cisco Web DOS attempt {TCP}			arachnids,275
WEB-MISC guestbook.pl access {TCP}			arachnids,228
WEB-MISC handler attempt {TCP}			arachnids,235
WEB-MISC handler access {TCP}				arachnids,235
WEB-MISC windmail.exe access {TCP}			arachnids,465
WEB-MISC netscape dir index wp {TCP}			arachnids,270
WEB-MISC piranha passwd.php3 access {TCP}		arachnids,272
WEB-MISC Phorum read access {TCP}			arachnids,208
WEB-MISC Phorum violation access {TCP}		arachnids,209
WEB-MISC get32.exe access {TCP}			arachnids,258
WEB-MISC Annex Terminal DOS attempt {TCP}		arachnids,260
WEB-MISC cgitest.exe attempt {TCP}			arachnids,265
WEB-MISC cgitest.exe access {TCP}			arachnids,265
WEB-MISC Phorum code access {TCP}			arachnids,207
WEB-MISC whisker space splice attack {TCP}		arachnids,296
WEB-MISC whisker tab splice attack {TCP}		arachnids,415
WEB-MISC http directory traversal {TCP}		arachnids,297
WEB-MISC PCCS mysql database admin tool access {TCP}	arachnids,300
WEB-MISC netscape unixware overflow {TCP}		arachnids,180
WEB-MISC Compaq Insight directory traversal {TCP}	arachnids,244
X11 MIT Magic Cookie detected {TCP}			arachnids,396
X11 xopen {TCP}					arachnids,395

:
### BUGTRAQ
CHAT IRC EXPLOIT topic overflow {TCP}				bugtraq,573
WEB-CGI edit.pl access {TCP}					bugtraq,2713
EXPERIMENTAL WEB-IIS .htr request {TCP}				bugtraq,4474
WEB-MISC iPlanet ../../ DOS attempt {TCP}			bugtraq,2282
WEB-IIS header field buffer overflow attempt {TCP}		bugtraq,4476
DNS named iquery attempt {UDP}					bugtraq,134
DNS EXPLOIT named tsig overflow attempt {TCP}			bugtraq,2302
DNS EXPLOIT named tsig overflow attempt {UDP}			bugtraq,2303
DNS EXPLOIT named 8.2->8.2.1 {TCP}				bugtraq,788
DNS EXPLOIT named overflow (ADM) {TCP}				bugtraq,788
DNS EXPLOIT named overflow (ADMROCKS) {TCP}			bugtraq,788
DOS Teardrop attack {UDP}					bugtraq,124
DOS NAPTHA {TCP}						bugtraq,2022
DOS Real Audio Server {TCP}					bugtraq,1288
DOS Real Server template.html {TCP}				bugtraq,1288
DOS Bay/Nortel Nautica Marlin {UDP}				bugtraq,1009
DOS Ascend Route {UDP}						bugtraq,714
DOS arkiea backup {TCP}						bugtraq,662
DOS MSDTC attempt {TCP}						bugtraq,4006
MISC Xtramail Username overflow attempt {TCP}			bugtraq,791
EXPERIMENTAL TROJAN fragroute trojan connection attempt {IP}	bugtraq,4898
EXPERIMENTAL WEB-IIS .asp HTTP header buffer overflow attempt {TCP} 	bugtraq,4476
EXPERIMENTAL WEB-IIS .asa HTTP header buffer overflow attempt {TCP}	bugtraq,4476
EXPERIMENTAL WEB-IIS .cer HTTP header buffer overflow attempt {TCP}	bugtraq,4476
EXPERIMENTAL WEB-IIS .cdx HTTP header buffer overflow attempt {TCP}	bugtraq,4476
EXPERIMENTAL WEB-MISC apache chunked encoding memory corruption exploit attempt {TCP}	bugtraq,5033
EXPERIMENTAL MISC successful gobbles ssh exploit (GOBBLE) {TCP}		bugtraq,5093
EXPERIMENTAL MISC successful gobbles ssh exploit (uname) {TCP}		bugtraq,5093
EXPERIMENTAL MISC gobbles SSH exploit attempt {TCP}		bugtraq,5093
EXPERIMENTAL WEB-MISC CISCO VoIP DOS ATTEMPT {TCP}		bugtraq,4794
EXPERIMENTAL WEB-PHP directory.php arbitrary command attempt {TCP}	bugtraq,4278
EXPERIMENTAL WEB-PHP directory.php access {TCP}			bugtraq,4278
EXPERIMENTAL WEB-CGI alienform.cgi directory traversal attempt {TCP}	bugtraq,4983
EXPERIMENTAL WEB-CGI AlienForm af.cgi directory traversal attempt {TCP}	bugtraq,4983
EXPERIMENTAL WEB-CGI alienform.cgi access {TCP}			bugtraq,4983
EXPERIMENTAL WEB-CGI AlienForm af.cgi access {TCP}		bugtraq,4983
EXPERIMENTAL WEB-MISC tomcat servlet mapping cross site scripting attempt {TCP}	bugtraq,5193
EXPERIMENTAL WEB-MISC iPlanet Search directory traversal attempt {TCP}		bugtraq,5191
EXPERIMENTAL WEB-MISC tomcat TroubleShooter servlet access {TCP}		bugtraq,4575
EXPERIMENTAL WEB-MISC tomcat SnoopServlet servlet access {TCP}			bugtraq,4575
EXPERIMENTAL ICQ forced user addition {TCP}			bugtraq,3226
EXPERIMENTAL WEB-PHP PHP-Wiki cross site scripting attempt {TCP}		bugtraq,5254
EXPERIMENTAL WEB-MISC Macromedia SiteSpring cross site scripting attempt {TCP}	bugtraq,5249
EXPERIMENTAL SSH server banner overflow {TCP}			bugtraq,5287
EXPERIMENTAL WEB-MISC mailman cross site scripting attempt {TCP}		bugtraq,5298
EXPERIMENTAL WEB-CLIENT javascript document.domain attempt {TCP}		bugtraq,5346
EXPERIMENTAL WEB-CLIENT javascript URL host spoofing attempt {TCP}		bugtraq,5293
EXPERIMENTAL WEB-MISC CISCO PIX Firewall Manager directory traversal attempt {TCP}	bugtraq,691
EXPERIMENTAL FTP SITE CPWD overflow attempt {TCP}		bugtraq,5427
EXPLOIT ssh CRC32 overflow /bin/sh {TCP}			bugtraq,2347
EXPLOIT ssh CRC32 overflow filler {TCP}				bugtraq,2347
EXPLOIT ssh CRC32 overflow NOOP	{TCP}				bugtraq,2347
EXPLOIT ssh CRC32 overflow {TCP}				bugtraq,2347
EXPLOIT netscape 4.7 client overflow {TCP}			bugtraq,822
EXPLOIT x86 linux samba overflow {TCP}				bugtraq,1816
EXPLOIT nlps x86 solaris overflow {TCP}				bugtraq,2319
EXPLOIT LPRng overflow {TCP}					bugtraq,1712
EXPLOIT sco calserver overflow {TCP}				bugtraq,2353
EXPLOIT delegate proxy overflow {TCP}				bugtraq,808
EXPLOIT VQServer admin {TCP}					bugtraq,1610
EXPLOIT NextFTP client overflow {TCP}				bugtraq,572
EXPLOIT sniffit overflow {TCP}					bugtraq,1158
EXPLOIT x86 windows MailMax overflow {TCP}			bugtraq,2312
EXPLOIT netscape 4.7 unsucessful overflow {TCP}			bugtraq,822
EXPLOIT ntpdx overflow attempt {UDP}				bugtraq,2540
EXPLOIT ntalkd x86 linux overflow {UDP				bugtraq,210
EXPLOIT x86 linux mountd overflow {UDP}				bugtraq,121
EXPLOIT bootp x86 bsd overflow {UDP}				bugtraq,324
EXPLOIT MDBMS overflow {TCP}					bugtraq,1252
EXPLOIT aix pdnsd overflow {TCP}				bugtraq,3237
EXPLOIT rwhoisd format string attempt {TCP}			bugtraq,3474
EXPLOIT cachefsd buffer overflow attempt {TCP}			bugtraq,4631
FINGER remote command \; execution attempt {TCP}		bugtraq,974
FINGER remote command pipe execution attempt {TCP}		bugtraq,2220
FTP EXPLOIT STAT * dos attempt {TCP}				bugtraq,4482
FTP EXPLOIT STAT ? dos attempt {TCP}				bugtraq,4482
FTP EXPLOIT aix overflow {TCP}					bugtraq,679
FTP EXPLOIT format string {TCP}					bugtraq,1387
FTP EXPLOIT OpenBSD x86 ftpd {TCP}				bugtraq,2124
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Solaris 2.8 {TCP}	bugtraq,1387
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow FreeBSD {TCP}	bugtraq,1387
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow Linux {TCP}		bugtraq,1387
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string overflow generic {TCP}	bugtraq,1387
FTP EXPLOIT wu-ftpd 2.6.0 site exec format string check {TCP}			bugtraq,1387
FTP EXPLOIT wu-ftpd 2.6.0 {TCP}					bugtraq,1387
FTP EXPLOIT MKD overflow {TCP}					bugtraq,113
FTP EXPLOIT x86 linux overflow {TCP}				bugtraq,113
FTP EXPLOIT x86 linux overflow {TCP}				bugtraq,113
FTP EXPLOIT x86 linux overflow {TCP}				bugtraq,113
FTP serv-u directory transversal {TCP}				bugtraq,2025
FTP site exec {TCP}						bugtraq,2241
FTP tar parameters {TCP}					bugtraq,2240
FTP wu-ftp file completion attempt [ {TCP}			bugtraq,3581
FTP wu-ftp file completion attempt { {TCP}			bugtraq,3581
FTP CWD ~<NEWLINE> attempt {TCP}				bugtraq,2601
FTP CWD ~<CR><NEWLINE> attempt {TCP}				bugtraq,2601
FTP CWD .... attempt {TCP}					bugtraq,4884
FTP USER overflow attempt {TCP}					bugtraq,4638
FTP command overflow attempt {TCP}				bugtraq,4638
ICMP IRDP router advertisement {ICMP}				bugtraq,578
ICMP IRDP router selection {ICMP}				bugtraq,578
IMAP EXPLOIT x86 linux overflow {TCP}				bugtraq,130
IMAP EXPLOIT partial body overflow attempt {TCP}		bugtraq,4713
MISC source route lssr {IP}					bugtraq,646
MISC source route lssre {IP}					bugtraq,646
MISC AIM AddGame attempt {TCP}					bugtraq,3769
NETBIOS NT NULL session {TCP}					bugtraq,1163
NNTP return code buffer overflow attempt {TCP}			bugtraq,4900
POLICY HP JetDirect LCD modification attempt {TCP}		bugtraq,2245
POP3 EXPLOIT qpopper overflow {TCP}				bugtraq,830
RPC snmpXdmi overflow attempt {TCP}				bugtraq,2417
RPC EXPLOIT ttdbserv solaris overflow {TCP}			bugtraq,122
RPC DOS ttdbserv solaris {TCP}					bugtraq,122
RPC UDP cachefsd request {UDP}					bugtraq,4674
RPC TCP cachefsd request {TCP}					bugtraq,4674
RPC portmap request ttdbserv {UDP}				bugtraq,122
RPC tcp portmap request snmpXdmi {TCP}				bugtraq,2417
RPC udp portmap request snmpXdmi {UDP}				bugtraq,2417
RPC portmap request yppasswdd {UDP}				bugtraq,2763
RPC portmap request yppasswdd {TCP}				bugtraq,2763
SMTP RCPT TO overflow {TCP}					bugtraq,2283
SMTP EXPLOIT x86 windows CSMMail overflow {TCP}			bugtraq,895
SMTP chameleon overflow {TCP}					bugtraq,2387
MS-SQL/SMB xp_enumresultset possible buffer overflow {TCP}	bugtraq,2031
MS-SQL/SMB raiserror possible buffer overflow {TCP}		bugtraq,3733
MS-SQL/SMB xp_displayparamstmt possible buffer overflow {TCP}	bugtraq,2030
MS-SQL/SMB xp_setsqlsecurity possible buffer overflow {TCP}	bugtraq,2043
MS-SQL/SMB xp_printstatements possible buffer overflow {TCP}	bugtraq,2041
MS-SQL/SMB xp_sprintf possible buffer overflow {TCP}		bugtraq,1204
MS-SQL/SMB xp_showcolv possible buffer overflowTCP}		bugtraq,2038
MS-SQL/SMB xp_peekqueue possible buffer overflow {TCP}		bugtraq,2040
MS-SQL/SMB xp_proxiedmetadata possible buffer overflow {TCP}	bugtraq,2042
MS-SQL/SMB xp_updatecolvbm possible buffer overflow {TCP}	bugtraq,2039
MS-SQL xp_displayparamstmt possible buffer overflow {TCP}	bugtraq,2030
MS-SQL xp_setsqlsecurity possible buffer overflow {TCP}		bugtraq,2043
MS-SQL xp_printstatements possible buffer overflow {TCP}	bugtraq,2041
MS-SQL xp_updatecolvbm possible buffer overflow {TCP}		bugtraq,2039
MS-SQL xp_sprintf possible buffer overflow {TCP}		bugtraq,1204
MS-SQL xp_showcolv possible buffer overflow {TCP}		bugtraq,2038
MS-SQL xp_peekqueue possible buffer overflow {TCP}		bugtraq,2040
MS-SQL xp_proxiedmetadata possible buffer overflow {TCP}	bugtraq,2024
MS-SQL raiserror possible buffer overflow {TCP}			bugtraq,3733
TELNET bsd telnet exploit response {TCP}			bugtraq,3064
TELNET bsd exploit client finishing {TCP}			bugtraq,3064
WEB-CGI HyperSeek hsx.cgi directory traversal attempt {TCP}	bugtraq,2314
WEB-CGI HyperSeek hsx.cgi access {TCP}				bugtraq,2314
WEB-CGI SWSoft ASPSeek Overflow attempt {TCP}			bugtraq,2492
WEB-CGI yabb.cgi directory traversal attempt {TCP}		bugtraq,1668
WEB-CGI yabb.cgi access {TCP}					bugtraq,1668
WEB-CGI /wwwboard/passwd.txt access {TCP}			bugtraq,649
WEB-CGI webdriver access {TCP}					bugtraq,2166
WEB-CGI websendmail access {TCP}				bugtraq,2077
WEB-CGI dcforum.cgi access {TCP}				bugtraq,2728
WEB-CGI dcboard.cgi invalid user addition attempt {TCP}		bugtraq,2728
WEB-CGI dcboard.cgi access {TCP}				bugtraq,2728
WEB-CGI anaconda directory transversal attempt {TCP}		bugtraq,2388
WEB-CGI cvsweb.cgi access {TCP}					bugtraq,1469
WEB-CGI php.cgi access {TCP}					bugtraq,2250
WEB-CGI glimpse access {TCP}					bugtraq,2026
WEB-CGI htmlscript attempt {TCP}				bugtraq,2001
WEB-CGI htmlscript access {TCP}					bugtraq,2001
WEB-CGI info2www access {TCP}					bugtraq,1995
WEB-CGI nph-test-cgi access {TCP}				bugtraq,686
WEB-CGI rguest.exe access {TCP}					bugtraq,2024
WEB-CGI webgais access {TCP}					bugtraq,2058
WEB-CGI pfdisplay.cgi access {TCP}				bugtraq,64
WEB-CGI aglimpse access {TCP}					bugtraq,2026
WEB-CGI bnbform.cgi access {TCP}				bugtraq,1469
WEB-CGI campas access {TCP}					bugtraq,1975
WEB-CGI wguest.exe access {TCP}					bugtraq,2024
WEB-CGI wrap access {TCP}					bugtraq,373
WEB-CGI classifieds.cgi access {TCP}				bugtraq,2020
WEB-CGI faxsurvey attempt (full path) {TCP}			bugtraq,2056
WEB-CGI faxsurvey arbitrary file read attempt {TCP}		bugtraq,2056
WEB-CGI faxsurvey access {TCP}					bugtraq,2056
WEB-CGI snork.bat access {TCP}					bugtraq,1053
WEB-CGI w3-msql access {TCP}					bugtraq,591
WEB-CGI visadmin.exe access {TCP}				bugtraq,1808
WEB-CGI calendar-admin.pl access {TCP}				bugtraq,1215
WEB-CGI survey.cgi access {TCP}					bugtraq,1817
WEB-CGI scriptalias access {TCP}				bugtraq,2300
WEB-CGI win-c-sample.exe access {TCP}				bugtraq,2078
WEB-CGI admin.pl access {TCP}					bugtraq,3839
WEB-CGI formmail arbitrary command execution attempt {TCP}	bugtraq,1187
WEB-CGI formmail access {TCP}					bugtraq,1187
WEB-CGI phf arbitrary command execution attempt {TCP}		bugtraq,629
WEB-CGI phf access {TCP}					bugtraq,629
WEB-CGI ppdscgi.exe access {TCP}				bugtraq,491
WEB-CGI sendform.cgi access {TCP}				bugtraq,5286
WEB-CGI AnyForm2 access {TCP}					bugtraq,719
WEB-CGI bb-hist.sh attempt {TCP}				bugtraq,142
WEB-CGI bb-hist.sh access {TCP}					bugtraq,142
WEB-CGI bb-histlog.sh access {TCP}				bugtraq,142
WEB-CGI bb-rep.sh access {TCP}					bugtraq,142
WEB-CGI bb-replog.sh access {TCP}				bugtraq,142
WEB-CGI redirect access {TCP}					bugtraq,1179
WEB-CGI wayboard attempt {TCP}					bugtraq,2370
WEB-CGI way-board access {TCP}					bugtraq,2370
WEB-CGI pals-cgi arbitrary file access attempt {TCP}		bugtraq,2372
WEB-CGI pals-cgi access {TCP}					bugtraq,2372
WEB-CGI commerce.cgi arbitrary file access attempt {TCP}	bugtraq,2361
WEB-CGI commerce.cgi access {TCP}				bugtraq,2361
WEB-CGI Amaya templates sendtemp.pl directory traversal attempt {TCP}	bugtraq,2504
WEB-CGI Amaya templates sendtemp.pl access {TCP}		bugtraq,2504
WEB-CGI webspirs.cgi directory traversal attempt {TCP}		bugtraq,2362
WEB-CGI webspirs.cgi access {TCP}				bugtraq,2362
WEB-CGI lastlines.cgi access {TCP}				bugtraq,3755
WEB-CGI zml.cgi attempt {TCP}					bugtraq,3759
WEB-CGI zml.cgi access {TCP}					bugtraq,3759
WEB-CGI AHG search.cgi access {TCP}				bugtraq,3985
WEB-CGI agora.cgi attempt {TCP}					bugtraq,3976
WEB-CGI agora.cgi access {TCP}					bugtraq,3976
WEB-CGI auktion.cgi directory traversal attempt {TCP}		bugtraq,2367
WEB-CGI auktion.cgi access {TCP}				bugtraq,2367
WEB-CGI cgiforum.pl attempt {TCP}				bugtraq,1963
WEB-CGI cgiforum.pl access {TCP}				bugtraq,1963
WEB-CGI Web Shopper shopper.cgi attempt {TCP}			bugtraq,1776
WEB-CGI Web Shopper shopper.cgi access {TCP}			bugtraq,1776
WEB-CGI book.cgi arbitrary command execution attempt {TCP}	bugtraq,3178
WEB-CGI book.cgi access {TCP}					bugtraq,3178
WEB-CGI cal_make.pl directory traversal attempt {TCP}		bugtraq,2663
WEB-CGI cal_make.pl access {TCP}				bugtraq,2663
WEB-CGI ttawebtop.cgi arbitrary file attempt {TCP}		bugtraq,2890
WEB-CGI ttawebtop.cgi access {TCP}				bugtraq,2890
WEB-CGI admentor admin.asp access {TCP}				bugtraq,4152
WEB-CGI tst.bat access {TCP}					bugtraq,770
WEB-CGI /cgi-bin/ls access {TCP}				bugtraq,936
WEB-CGI csSearch.cgi arbitrary command execution attempt {TCP}	bugtraq,4368
WEB-CGI csSearch.cgi access {TCP}				bugtraq,4368
WEB-CGI faqmanager.cgi arbitrary file access attempt {TCP}	bugtraq,3810
WEB-CGI faqmanager.cgi access {TCP}				bugtraq,3810
WEB-CGI Home Free search.cgi directory traversal attempt {TCP}	bugtraq,921
WEB-CGI search.cgi access {TCP}					bugtraq,921
WEB-CGI pagelog.cgi directory traversal attempt {TCP}		bugtraq,1864
WEB-CGI pagelog.cgi access {TCP}				bugtraq,1864
WEB-CGI document.d2w access {TCP}				bugtraq,2017
WEB-CGI technote main.cgi file directory traversal attempt {TCP}	bugtraq,2156
WEB-CGI technote print.cgi directory traversal attempt {TCP}		bugtraq,2156
WEB-CGI ads.cgi command execution attempt {TCP}				bugtraq,2103
WEB-CGI eXtropia webstore directory traversal {TCP}			bugtraq,1774
WEB-CGI eXtropia webstore access {TCP}					bugtraq,1774
WEB-CGI webstore directory traversal {TCP}				bugtraq,1774
WEB-CGI shopping cart directory traversal {TCP}				bugtraq,1777
WEB-CGI moreover shopping cart directory traversal {TCP}		bugtraq,1762
WEB-CGI Talentsoft Web+ exploit attempt {TCP}			bugtraq,1725
WEB-CGI Poll-it access {TCP}					bugtraq,1431
WEB-MISC count.cgi access {TCP}					bugtraq,128
WEB-CGI webdist.cgi arbitrary command attempt {TCP}		bugtraq,374
WEB-CGI webdist.cgi access {TCP}				bugtraq,374
WEB-CGI bigconf.cgi access {TCP}				bugtraq,778
WEB-CGI /cgi-bin/jj access {TCP}				bugtraq,2002
WEB-CGI bizdbsearch attempt {TCP}				bugtraq,1104
WEB-CGI bizdbsearch access {TCP}				bugtraq,1104
WEB-CGI sojourn.cgi File attempt {TCP}				bugtraq,1052
WEB-CGI sojourn.cgi access {TCP}				bugtraq,1052
WEB-CGI SGI InfoSearch fname attempt {TCP}			bugtraq,1031
WEB-CGI SGI InfoSearch fname access {TCP}			bugtraq,1031
WEB-CGI store.cgi product directory traversal attempt {TCP}	bugtraq,2385
WEB-CGI store.cgi directory traversal attempt {TCP}		bugtraq,2385
WEB-CGI store.cgi access {TCP}					bugtraq,2385
WEB-CGI SIX webboard generate.cgi attempt {TCP}			bugtraq,3175
WEB-CGI SIX webboard generate.cgi access {TCP}			bugtraq,3175
WEB-CGI csPassword.cgi access {TCP}				bugtraq,4885
WEB-CGI csPassword password.cgi.tmp access {TCP}		bugtraq,4889
WEB-CGI Nortel Contivity cgiproc DOS attempt {TCP}		bugtraq,938
WEB-CGI Nortel Contivity cgiproc access {TCP}			bugtraq,938
WEB-CGI Oracle reports CGI access {TCp}				bugtraq,4848
WEB-COLDFUSION cfcache.map access { TCP}			bugtraq,917
WEB-COLDFUSION exampleapp application.cfm {TCP}			bugtraq,1021
WEB-COLDFUSION application.cfm access {TCP}			bugtraq,1021
WEB-COLDFUSION getfile.cfm access {TCP}				bugtraq,229
WEB-COLDFUSION datasource username attempt {TCP}		bugtraq,550
WEB-COLDFUSION fileexists.cfm access {TCP}			bugtraq,550
WEB-COLDFUSION exprcalc access {TCP}				bugtraq,550
WEB-COLDFUSION parks access {TCP}				bugtraq,550
WEB-COLDFUSION cfappman access {TCP}				bugtraq,550
WEB-COLDFUSION beaninfo access {TCP}				bugtraq,550
WEB-COLDFUSION evaluate.cfm access {TCP}			bugtraq,550
WEB-COLDFUSION getodbcdsn access {TCP}				bugtraq,550
WEB-COLDFUSION db connections flush attempt {TCP}		bugtraq,550
WEB-COLDFUSION expeval access {TCP}				bugtraq,550
WEB-COLDFUSION datasource passwordattempt {TCP}			bugtraq,550
WEB-COLDFUSION datasource attempt {TCP}				bugtraq,550
WEB-COLDFUSION admin encrypt attempt {TCP}			bugtraq,550
WEB-COLDFUSION displayfile access {TCP}				bugtraq,550
WEB-COLDFUSION getodbcin attempt {TCP}				bugtraq,550
WEB-COLDFUSION admin decrypt attempt {TCP}			bugtraq,550
WEB-COLDFUSION mainframeset access {TCP}			bugtraq,550
WEB-COLDFUSION set odbc ini attempt {TCP}			bugtraq,550
WEB-COLDFUSION settings refresh attempt {TCP}			bugtraq,550
WEB-COLDFUSION CFUSION_VERIFYMAIL access {TCP}			bugtraq,550
WEB-COLDFUSION snippets attempt {TCP}				bugtraq,550
WEB-COLDFUSION cfmlsyntaxcheck.cfm access {TCP}			bugtraq,550
WEB-COLDFUSION application.cfm access {TCP}			bugtraq,550
WEB-COLDFUSION onrequestend.cfm access {TCP}			bugtraq,550
WEB-COLDFUSION startstop DOS access {TCP}			bugtraq,247
WEB-COLDFUSION gettempdirectory.cfm access {TCP}		bugtraq,550
WEB-FRONTPAGE rad overflow attempt {TCP}			bugtraq,2906
WEB-FRONTPAGE rad overflow attempt {TCP}			bugtraq,2906
WEB-FRONTPAGE rad fp30reg.dll access {TCP}			bugtraq,2906
WEB-FRONTPAGE frontpage rad fp4areg.dll access {TCP}		bugtraq,2906
WEB-FRONTPAGE _vti_rpc access {TCP}				bugtraq,2144
WEB-FRONTPAGE administrators.pwd access {TCP}			bugtraq,1205
WEB-FRONTPAGE service.pwd {TCP}					bugtraq,1205
WEB-FRONTPAGE shtml.exe access {TCP}				bugtraq,1608
WEB-FRONTPAGE fourdots request {TCP}				bugtraq,989
WEB-FRONTPAGE dvwssr.dll access {TCP}				bugtraq,1108
WEB-IIS .htr Transfer-Encoding\: chunked {TCP}			bugtraq,5003
WEB-IIS .asp Transfer-Encoding\: chunked {TCP}			bugtraq,4474
WEB-IIS as_web.exe access {TCP}					bugtraq,4670
WEB-IIS as_web4.exe access {TCP}				bugtraq,4670
WEB-IIS /isapi/tstisapi.dll access {TCP}			bugtraq,2381
WEB-IIS webdav file lock attempt {TCP}				bugtraq,2736
WEB-IIS ISAPI .ida attempt {TCP}				bugtraq,1065
WEB-IIS ISAPI .ida access {TCP}					bugtraq,1065
WEB-IIS ISAPI .idq attempt {TCP}				bugtraq,1065
WEB-IIS ISAPI .idq access {TCP}					bugtraq,1065
WEB-IIS %2E-asp access {TCP}					bugtraq,1814
WEB-IIS *.idc attempt {TCP}					bugtraq,1448
WEB-IIS ..\.. access {TCP}					bugtraq,2218
WEB-IIS .asp\:\:$DATA access {TCP}				bugtraq,149
WEB-IIS .bat? access {TCP}					bugtraq,2023
WEB-IIS ASP contents view {TCP}					bugtraq,1084
WEB-IIS CGImail.exe access {TCP}				bugtraq,1623
WEB-IIS JET VBA access {TCP}					bugtraq,307
WEB-IIS achg.htr access {TCP}					bugtraq,2110
WEB-IIS ism.dll access {TCP}					bugtraq,189
WEB-IIS anot.htr access {TCP}					bugtraq,2110
WEB-IIS codebrowser SDK access {TCP}				bugtraq,167
WEB-IIS fpcount attempt {TCP}					bugtraq,2252
WEB-IIS fpcount access {TCP}					bugtraq,2252
WEB-IIS iisadmpwd attempt {TCP}					bugtraq,2110
WEB-IIS isc$data attempt {TCP}					bugtraq,307
WEB-IIS ism.dll attempt {TCP}					bugtraq,1193
WEB-IIS jet vba access {TCP}					bugtraq,286
WEB-IIS msadc/msadcs.dll access {TCP}				bugtraq,529
WEB-IIS newdsn.exe access {TCP}					bugtraq,1818
WEB-IIS query.asp access {TCP}					bugtraq,193
WEB-IIS search97.vts access {TCP}				bugtraq,162
WEB-IIS showcode.asp access {TCP}				bugtraq,167
WEB-IIS site server config access {TCP}				bugtraq,256
WEB-IIS view source via translate header {TCP}			bugtraq,1578
WEB-IIS outlook web dos {TCP}					bugtraq,3223
WEB-MISC Cisco IOS HTTP configuration attempt {TCP}		bugtraq,2936
WEB-MISC Netscape Enterprise DOS	 {TCP}			bugtraq,2294
WEB-MISC Netscape Enterprise directory listing attempt {TCP}	bugtraq,2285
WEB-MISC weblogic view source attempt {TCP}			bugtraq,2527
WEB-MISC tomcat directory traversal attempt {TCP}		bugtraq,2518
WEB-MISC tomcat view source attempt {TCP}			bugtraq,2527
WEB-MISC Lotus Domino directory traversal {TCP}			bugtraq,2173
WEB-MISC counter.exe access {TCP}				bugtraq,267
WEB-MISC webdav propfind access {TCP}				bugtraq,1656
WEB-MISC unify eWave ServletExec upload {TCP}			bugtraq,1868
WEB-MISC netscape servers suite DOS {TCP}			bugtraq,1868
WEB-MISC amazon 1-click cookie theft{TCP}			bugtraq,1194
WEB-MISC Allaire JRUN DOS attemptontent:{TCP}			bugtraq,2337
WEB-MISC PHP strings overflow {TCP}				bugtraq,802
WEB-MISC Talentsoft Web+ Source Code view access {TCP}		bugtraq,1722
WEB-MISC Talentsoft Web+ internal IP Address access {TCP}	bugtraq,1720
WEB-MISC SmartWin CyberOffice Shopping Cart access {TCP}	bugtraq,1734
WEB-MISC netscape admin passwd {TCP}				bugtraq,1579
WEB-MISC ftp.pl attempt {TCP}					bugtraq,1471
WEB-MISC ftp.pl access {TCP}					bugtraq,1471
WEB-MISC tomcat server snoop access {TCP}			bugtraq,1532
WEB-MISC ROXEN directory list attempt {TCP}			bugtraq,1510
WEB-MISC apache source.asp file access {TCP}			bugtraq,1457
WEB-MISC mlog.phtml access {TCP}				bugtraq,713
WEB-MISC mylog.phtml access {TCP}				bugtraq,713
WEB-MISC ?PageServices access {TCP}				bugtraq,1063
WEB-MISC convert.bas access {TCP}				bugtraq,2025
WEB-MISC Phorum admin access {TCP}				bugtraq,2271
WEB-MISC Phorum auth access {TCP}				bugtraq,2274
WEB-MISC guestbook.pl access {TCP}				bugtraq,776
WEB-MISC handler attempt {TCP}					bugtraq,380
WEB-MISC handler access {TCP}					bugtraq,380
WEB-MISC cat%20 access {TCP}					bugtraq,374
WEB-MISC windmail.exe access {TCP}				bugtraq,1073
WEB-MISC webplus access {TCP}					bugtraq,1174
WEB-MISC netscape dir index wp {TCP}				bugtraq,1063
WEB-MISC piranha passwd.php3 access {TCP}			bugtraq,1149
WEB-MISC cart 32 AdminPwd access {TCP}				bugtraq,1153
WEB-MISC novell groupwise gwweb.exe attempt {TCP}		bugtraq,879
WEB-MISC novell groupwise gwweb.exe access {TCP}		bugtraq,879
WEB-MISC ws_ftp.ini access {TCP}				bugtraq,547
WEB-MISC rpm_query access {TCP}					bugtraq,1036
WEB-MISC wwwboard.pl access {TCP}				bugtraq,649
WEB-MISC Netscape Enterprise Server directory view {TCP}	bugtraq,1063
WEB-MISC Phorum violation access {TCP}				bugtraq,2272
WEB-MISC get32.exe access {TCP}					bugtraq,1485
WEB-MISC cgitest.exe attempt {TCP}				bugtraq,3885
WEB-MISC cgitest.exe access {TCP}				bugtraq,3885
WEB-MISC Netscape Enterprise Server directory view {TCP}	bugtraq,1063
WEB-MISC SalesLogix Eviewer web command attempt {TCP}		bugtraq,1089
WEB-MISC SalesLogix Eviewer access {TCP}			bugtraq,1089
WEB-MISC Netscape Enterprise Server directory view {TCP}	bugtraq,1063
WEB-MISC Trend Micro OfficeScan attempt {TCP}			bugtraq,1057
WEB-MISC oracle web arbitrary command execution attempt {TCP} 	bugtraq,1053
WEB-MISC oracle web application server access {TCP}		bugtraq,1053
WEB-MISC Netscape Enterprise Server directory view {TCP}	bugtraq,1063
WEB-MISC ROADS search.pl attempt {TCP}				bugtraq,2371
WEB-MISC VirusWall FtpSave access {TCP}				bugtraq,2808
WEB-MISC VirusWall FtpSaveCSP access {TCP}			bugtraq,2808
WEB-MISC PHPLIB remote command attempt {TCP}			bugtraq,3079
WEB-MISC HP Openview Manager DOS {TCP}				bugtraq,2845
WEB-MISC long basic authorization string {TCP}			bugtraq,3230
WEB-MISC sml3com access {TCP}					bugtraq,2721
WEB-MISC carbo.dll access {TCP}					bugtraq,2126
WEB-MISC admin.php file upload attempt {TCP}			bugtraq,3361
WEB-MISC admin.php access {TCP}					bugtraq,3361
WEB-MISC console.exe access {TCP}				bugtraq,3375
WEB-MISC cs.exe access {TCP}					bugtraq,3375
WEB-MISC mod-plsql administration access {TCP}			bugtraq,3726
WEB-MISC viewcode.jse access {TCP}				bugtraq,3715
WEB-MISC Phorecast remote code execution attempt {TCP}		bugtraq,3388
WEB-MISC smssend.php access {TCP}				bugtraq,3982
WEB-MISC PHP-Nuke remote file include attempt {TCP}		bugtraq,3889
WEB-MISC ans.pl attempt {TCP}					bugtraq,4147
WEB-MISC ans.pl access {TCP}					bugtraq,4147
WEB-MISC /doc/ access {TCP}					bugtraq,318
WEB-MISC global.inc access {TCP}				bugtraq,4612
WEB-MISC SecureSite authentication bypass attempt {TCP}		bugtraq,4621
WEB-MISC Compaq Insight directory traversal {TCP}		bugtraq,282
WEB-MISC VirusWall catinfo access {TCP}				bugtraq,2808
WEB-MISC Apache Chunked-Encoding worm attempt {TCP}		bugtraq,4474
WEB-MISC Transfer-Encoding\: chunked {TCP}			bugtraq,4474
WEB-PHP content-disposition memchr overlfow {TCP}		bugtraq,4183
WEB-PHP content-disposition {TCP}				bugtraq,4183
WEB-PHP squirrelmail spellcheck arbitrary command attempt {TCP}		bugtraq,3952
WEB-PHP squirrelmail theme arbitrary command attempt {TCP}		bugtraq,4385
WEB-PHP DNSTools administror authentication bypass attempt {TCP}	bugtraq,4617
WEB-PHP DNSTools authentication bypass attempt {TCP}	bugtraq,4617
WEB-PHP DNSTools access {TCP}					bugtraq,4617
WEB-PHP Blahz-DNS dostuff.php modify user attempt {TCP}		bugtraq,4618
WEB-PHP Blahz-DNS dostuff.php access {TCP}			bugtraq,4618
WEB-PHP Messagerie supp_membre.php access {TCP}			bugtraq,4635
### CVE ###
BAD TRAFFIC tcp port 0 traffic {TCP}				cve,CVE-1999-0675
BAD TRAFFIC udp port 0 traffic {UDP}				cve,CVE-1999-0675
BAD TRAFFIC same SRC/DST {IP}					cve,CVE-1999-0016
DDOS mstream handler to agent {UDP}				cve,CAN-2000-0138
DDOS mstream handler ping to agent {UDP}			cve,CAN-2000-0138
DDOS mstream client to handler {TCP}				cve,CAN-2000-0138
DDOS mstream handler to client {TCP}				cve,CAN-2000-0138
DDOS mstream handler to client {TCP}				cve,CAN-2000-0138
DOS Jolt attack {IP}						cve,CAN-1999-0345
DOS Land attack {TCP}						cve,CVE-1999-0016
DOS UDP echo+chargen bomb {UDP}					cve,CVE-1999-0103
DOS IGMP dos attack {IP}					cve,CVE-1999-0918
EXPERIMENTAL MS Terminal server request (RDP) {TCP}		cve,CAN-2001-0540
EXPERIMENTAL MISC iParty DOS attempt {TCp}			cve,CAN-1999-1566
EXPERIMENTAL WEB-MISC IBM Net.Commerce orderdspc.d2w access {TCP}	cve,CVE-2001-0319
EXPERIMENTAL LPD dvips remote command execution attempt {TCP}		cve,CVE-2001-1002
EXPERIMENTAL IMAP login buffer overflow attempt {TCP}			cve,CVE-1999-0005
EXPERIMENTAL BACKDOOR trinity connection attempt {TCP}			cve,CAN-2000-0138
EXPERIMENTAL IMAP authenticate overflow attempt {TCP}		cve,CVE-1999-0042
EXPERIMENTAL IMAP list overflow attempt {TCP}			cve,CAN-2000-0284
EXPERIMENTAL WEB-MISC webalizer access {TCP}			cve,CAN-1999-0643
WEB-MISC webcart-lite access {TCP}				cve,CAN-1999-0610
WEB-MISC webfind.exe access {TCP}				cve,CAN-2000-0622
WEB-MISC active.log access {TCP}				cve,CAN-2000-0642
EXPERIMENTAL BACKDOOR win-trin00 connection attempt {UDP}	cve,CAN-2000-0138
EXPERIMENTAL FTP SITE NEWER attempt {TCP}			cve,CVE-1999-0880
EXPERIMENTAL WEB-CGI story.pl arbitrary file read attempt {TCP}	cve,CVE-2001-0804
EXPERIMENTAL WEB-CGI story.pl access {TCP}			cve,CVE-2001-0804
EXPERIMENTAL WEB-CGI siteUserMod.cgi access {TCP}		cve,CVE-2000-0117
EXPERIMENTAL WEB-MISC Oracle XSQLConfig.xml access {TCP}	cve,CAN-2002-0568
EXPERIMENTAL WEB-MISC globals.jsa access {TCP}			cve,CAN-2002-0562
EXPERIMENTAL WEB-CGI nph-publish.cgi access {TCP}		cve,CVE-1999-1177
EXPERIMENTAL WEB-CGI printenv access {TCP}			cve,CVE-2000-0868
EXPERIMENTAL WEB-CGI sdbsearch.cgi access {TCP}			cve,CVE-2000-0868
EXPLOIT bootp x86 linux overflow {UDP}				cve,CAN-1999-0798
EXPLOIT CDE dtspcd exploit attempt {TCP}			cve,CAN-2001-0803
FINGER cmd_rootsh backdoor attempt {TCP}			cve,CAN-1999-0660
FTP SITE CHOWN overflow {TCP}					cve,CAN-2001-0065
FTP EXPLOIT CWD overflow {TCP}					cve,CAN-1999-1058
FTP SITE CHOWN overflow attempt {TCP}				cve,CAN-2000-0479
MISC UPNP malformed advertisement {UDP}				cve,CAN-2001-0877
MISC UPNP Location overflow {UDP}				cve,CAN-2001-0876
NNTP AUTHINFO USER overflow attempt {TCP}			cve,CAN-2000-0341
POP3 USER overflow attempt {TCP}				cve,CVE-1999-0494
POP3 PASS overflow attempt {TCP}				cve,CAN-1999-1511
POP3 APOP overflow attempt {TCP}				cve,CAN-2000-0841
RPC portmap request tooltalk {UDP}				cve,CVE-1999-0003
RPC portmap request tooltalk {TCP}				cve,CVE-1999-0003
RPC portmap request espd {TCP}					cve,CAN-2001-0331
SMTP expn *@ {TCP}						cve,CAN-1999-1200
SMTP HELO overflow attempt {TCP}				cve,CVE-2000-0042
SMTP ETRN overflow attempt {TCP}				cve,CAN-2000-0490
SNMP community string buffer overflow attempt {UDP}		cve,CAN-2002-0012
SNMP community string buffer overflow attempt (with evasion) {UDP}	cve,CAN-2002-0012
SNMP public access udp {UDP}					cve,CAN-2002-0012
SNMP public access tcp {TCP}					cve,CAN-2002-0012
SNMP private access udp {UDP}					cve,CAN-2002-0013
SNMP private access tcp {TCP}					cve,CAN-2002-0012
SNMP Broadcast request {UDP}					cve,CAN-2002-0013
SNMP broadcast trap {UDP}					cve,CAN-2002-0013
SNMP request udp {UDP}						cve,CAN-2002-0013
SNMP request tcp {TCP}						cve,CAN-2002-0013
SNMP trap udp {UDP}						cve,CAN-2002-0012
SNMP trap tcp {TCP}						cve,CAN-2002-0012
SNMP AgentX/tcp request {TCP}					cve,CAN-2002-0012
TELNET 4Dgifts SGI account attempt {TCP}			cve,CAN-1999-0501
TELNET EZsetup account attempt {TCP}				cve,CAN-1999-0501
WEB-CGI dcforum.cgi directory traversal attempt {TCP}		cve,CAN-2001-0436
WEB-CGI mmstdod.cgi access {TCP}				cve,CVE-2001-0021
WEB-CGI NPH-publish access {TCP}				cve,CAN-2001-0400
WEB-CGI textcounter.pl access {TCP}				cve,CAN-1999-1479
WEB-CGI uploader.exe access {TCP}				cve,CVE-1999-0177
WEB-CGI perlshop.cgi access {TCP}				cve,CAN-1999-1374
WEB-CGI args.bat access {TCP}					cve,CAN-1999-1374
WEB-CGI args.cmd access {TCP}					cve,CAN-1999-1374
WEB-CGI AT-admin.cgi accessc{TCP}				cve,CAN-1999-1072
WEB-CGI AT-generated.cgi access {TCP}				cve,CAN-1999-1072
WEB-CGI view-source directory traversal {TCP}			cve,CVE-1999-0174
WEB-CGI view-source access {TCP}				cve,CVE-1999-0174
WEB-CGI wwwwais access {TCP}					cve,CAN-2001-0223
WEB-CGI files.pl access {TCP}					cve,CAN-1999-1081
WEB-CGI filemail access {TCP}					cve,CAN-1999-1154
WEB-CGI man.sh access {TCP}					cve,CAN-1999-1179
WEB-CGI day5datacopier.cgi access {TCP}				cve,CAN-1999-1232
WEB-CGI day5datanotifier.cgi access {TCP}			cve,CAN-1999-1232
WEB-CGI post-query access {TCP}					cve,CAN-2001-0291
WEB-CGI dumpenv.pl access {TCP}					cve,CAN-1999-1178
WEB-CGI calendar_admin.pl arbitrary command execution attempt {TCP}	cve,CVE-2000-0432
WEB-CGI calendar_admin.pl access {TCP}				cve,CVE-2000-0432
WEB-CGI calender.pl access {TCP}				cve,CVE-2000-0432
WEB-CGI user_update_admin.pl access {TCP}			cve,CVE-2000-0627
WEB-CGI user_update_passwd.pl access {TCP}			cve,CVE-2000-0627
WEB-CGI MachineInfo access {TCP}				cve,CAN-1999-1067
WEB-CGI bb-hostscv.sh attempt {TCP}				cve,CVE-2000-0638
WEB-CGI bb-hostscv.sh access {TCP}				cve,CVE-2000-0638
WEB-CGI tstisapi.dll access {TCP}				cve,CAN-2001-0302
WEB-CGI rksh access {TCP}					cve,CAN-1999-0509
WEB-CGI bash access {TCP}					cve,CAN-1999-0509
WEB-CGI zsh access {TCP}					cve,CAN-1999-0509
WEB-CGI csh access {TCP}					cve,CAN-1999-0509
WEB-CGI tcsh access {TCP}					cve,CAN-1999-0509
WEB-CGI rsh access {TCP}					cve,CAN-1999-0509
WEB-CGI ksh access {TCP}					cve,CAN-1999-0509
WEB-CGI directorypro.cgi attempt {TCP}				cve,CAN-2001-0780
WEB-CGI directorypro.cgi access {TCP}				cve,CAN-2001-0780
WEB-CGI listrec.pl access {TCP}					cve,CAN-2001-0997
WEB-CGI mailnews.cgi access {TCP}				cve,CAN-2001-0271
WEB-CGI newsdesk.cgi access {TCP}				cve,CAN-2001-0232
WEB-CGI sdbsearch.cgi access {TCP}				cve,CAN-2001-1130
WEB-CGI ustorekeeper.pl directory traversal attempt {TCP}	cve,CAN-2001-0466
WEB-CGI ustorekeeper.pl access {TCP}				cve,CAN-2001-0466
WEB-CGI icat access {TCP}					cve,CAN-1999-1069
WEB-CGI Bugzilla doeditvotes.cgi access {TCP}			cve,CAN-2002-0011
WEB-CGI htsearch arbitrary configuration file attempt {TCP}	cve,CVE-2000-0208
WEB-CGI htsearch arbitrary file read attempt {TCP}		cve,CVE-2000-0208
WEB-CGI htsearch access {TCP}					cve,CVE-2000-0208
WEB-CGI a1stats a1disp3.cgi directory traversal attempt {TCP}	cve,CAN-2001-0561
WEB-CGI a1stats a1disp3.cgi access {TCP}			cve,CAN-2001-0561
WEB-CGI a1stats access {TCP}					cve,CAN-2001-0561
WEB-CGI alchemy http server PRN arbitrary command execution attempt {TCP}	cve,CAN-2001-0871
WEB-CGI alchemy http server NUL arbitrary command execution attempt {TCP}	cve,CAN-2001-0871
WEB-CGI alibaba.pl arbitrary command execution attempt {TCP}	cve,CAN-1999-0885
WEB-CGI alibaba.pl access {TCP}					cve,CAN-1999-0885
WEB-CGI AltaVista Intranet Search directory traversal attempt {TCP}		cve,CVE-2000-0039
WEB-CGI test.bat arbitrary command execution attempt {TCP}	cve,CVE-1999-0947
WEB-CGI test.bat access {TCP}					cve,CVE-1999-0947
WEB-CGI input.bat arbitrary command execution attempt {TCP}	cve,CVE-1999-0947
WEB-CGI input.bat access {TCP}					cve,CVE-1999-0947
WEB-CGI input2.bat arbitrary command execution attempt {TCP}	cve,CVE-1999-0947
WEB-CGI input2.bat access {TCP}					cve,CVE-1999-0947
WEB-CGI envout.bat arbitrary command execution attempt {TCP}	cve,CVE-1999-0947
WEB-CGI envout.bat access {TCP}					cve,CVE-1999-0947
WEB-CGI echo.bat arbitrary command execution attempt {TCP}	cve,CAN-2000-0213
WEB-CGI echo.bat access {TCP}					cve,CAN-2000-0213
WEB-CGI hello.bat arbitrary command execution attempt {TCP}	cve,CAN-2000-0213
WEB-CGI hello.bat access {TCP}					cve,CAN-2000-0213
WEB-CGI cgimail access {TCP}					cve,CVE-2000-0726
WEB-CGI /cart/cart.cgi access {TCP}				cve,CVE-2000-0252
WEB-CGI dbman db.cgi access {TCP}				cve,CVE-2000-0381
WEB-CGI DCShop access {TCP}					cve,CAN-2001-0821
WEB-CGI DCShop orders.txt access {TCP}				cve,CAN-2001-0821
WEB-CGI DCShop auth_user_file.txt access {TCP}			cve,CAN-2001-0821
WEB-CGI eshop.pl arbitrary commane execution attempt {TCP}	cve,CAN-2001-1014
WEB-CGI eshop.pl access {TCP}					cve,CAN-2001-1014
WEB-CGI FormHandler.cgi directory traversal attempt attempt {TCP}	cve,CAN-1999-1050
WEB-CGI FormHandler.cgi external site redirection attempt {TCp}		cve,CAN-1999-1050
WEB-CGI FormHandler.cgi access {TCP}				cve,CAN-1999-1050
WEB-CGI guestbook.cgi access {TCP}				cve,CVE-1999-0237
WEB-CGI db2www access {TCP}					cve,CVE-2000-0677
WEB-CGI cachemgr.cgi access {TCP}				cve,CVE-1999-0710
WEB-CGI dfire.cgi access {TCP}					cve,CAN-1999-0913
WEB-COLDFUSION administrator access {TCP}			cve,CVE-2000-0538
WEB-FRONTPAGE authors.pwd access {TCP}				cve,CVE-1999-0386
WEB-IIS +.htr code fragment attempt {TCP}			cve,CVE-2000-0630
WEB-IIS .htr access {TCP}					cve,CVE-2000-0630
WEB-IIS codebrowser Exair access {TCP}				cve,CVE-1999-0499
WEB-IIS global.asa access {TCP}					cve,CVE-2000-0778
WEB-IIS idc-srch attempt {TCP}					cve,CVE-1999-0874
WEB-IIS multiple decode attempt {TCP}				cve,CAN-2001-0333
WEB-IIS htimage.exe access {TCP}				cve,CAN-2000-0256
WEB-MISC ICQ webserver DOS {TCP}				cve,CVE-1999-0474
WEB-MISC webcart access {TCP}					cve,CAN-1999-0610
WEB-MISC netscape PublishingXpert 2 Exploit {TCP}		cve,CAN-2000-1196
WEB-MISC htgrep attempt {TCP}					cve,CAN-2000-0832
WEB-MISC htgrep access {TCP}					cve,CAN-2000-0832
WEB-MISC ExAir access {TCP}					cve,CVE-1999-0449
WEB-MISC apache ?M=A directory list attempt {TCP}		cve,CAN-2001-0731
WEB-MISC AxisStorpoint CD attempt {TCP}				cve,CAN-2000-0191
WEB-MISC Axis Storpoint CD access {TCP}				cve,CAN-2000-0191
WEB-MISC basilix sendmail.inc access {TCP}			cve,CAN-2001-1044
WEB-MISC basilix mysql.class access {TCP}			cve,CAN-2001-1044
WEB-MISC BBoard access {TCP}					cve,CAN-2000-0629
WEB-MISC Cisco Catalyst command execution attempt {TCP}		cve,CAN-2000-0945
WEB-MISC cvsweb version access {TCP}				cve,CAN-2000-0670
WEB-MISC login.htm attempt {TCP}				cve,CAN-1999-1533
WEB-MISC login.htm access {TCP}					cve,CAN-1999-1533
WEB-MISC search.dll directory listing attempt {TCP}		cve,CAN-2000-0835
WEB-MISC search.dll access {TCP}				cve,CAN-2000-0835
WEB-MISC iChat directory traversal attempt {TCP}		cve,CAN-1999-0897
WEB-MISC Delegate whois overflow attempt {TCP}			cve,CVE-2000-0165
### NESSUS ###
EXPERIMENTAL MISC AFS access {UDP}				nessus,10441
EXPERIMENTAL WEB-IIS MS Site Server default login attempt {TCP}	nessus,11018
EXPERIMENTAL WEB-IIS MS Site Server admin attempt {TCP}		nessus,11018
EXPERIMENTAL Alcatel PABX 4400 connection attempt {TCP}		nessus,11019
EXPERIMENTAL WEB-MISC WEB-INF access {TCP}			nessus,11037
EXPERIMENTAL WEB-MISC jigsaw dos attempt {TCP}			nessus,11047
EXPERIMENTAL POLICY vnc viewer java applet download attempt {TCP}	nessus,10758
WEB-MISC way-board.cgi access {TCP}				nessus,10610
WEB-MISC robots.txt access {TCP}				nessus,10302
WEB-MISC robot.txt access {TCP}					nessus,10302
EXPERIMENTAL WEB-MISC Sun JavaServer default password login attempt {TCP}	nessus,10995
EXPERIMENTAL WEB-MISC Linksys router default password login attempt \(\:admin\) {TCP}	nessus,10999
EXPERIMENTAL WEB-MISC Linksys router default password login attempt \(admin\:admin\) {TCP}	nessus,10999
EXPERIMENTAL WEB-CGI mrtg.cgi directory traversal attempt {TCP}		nessus,11001
EXPERIMENTAL WEB-CGI mrtg.cgi access {TCP}				nessus,11001
EXPERIMENTAL WEB-MISC Oracle Dynamic Monitoring Services (dms) access {TCP}		nessus,10848
EXPERIMENTAL WEB-MISC Oracle Java Process Manager access {TCP}		nessus,10851
EXPERIMENTAL WEB-CGI cgicso access {TCP}				nessus,10780
FINGER account enumeration attempt {TCP}				nessus,10788
MISC xdmcp info query {UDP}						nessus,10891
WEB-CGI upload.cgi access {TCP}						nessus,10290
WEB-CGI view_source access {TCP}					nessus,10294
WEB-CGI /fcgi-bin/echo.exe access {TCP}					nessus,10838
WEB-IIS repost.asp access {TCP}						nessus,10372
WEB-IIS /SiteServer/Publishing/viewcode.asp access {TCP}		nessus,10576
WEB-IIS showcode access {TCP}						nessus,10576
WEB-IIS viewcode.asp access {TCP}					nessus,10576
WEB-MISC SiteScope Service access {TCP}					nessus,10778
### MCAFFEE ###
BACKDOOR QAZ Worm Client Login access {TCP}			MCAFEE,98775
Virus - Possible QAZ Worm {TCP}					MCAFEE,98775
Virus - Possible QAZ Worm Infection {TCP}			MCAFEE,98775
Virus - Possible QAZ Worm Calling Home {TCP}			MCAFEE,98775
Virus - Possible Pikachu Pokemon Virus {TCP}			MCAFEE,98696
Virus - Possible Triplesix Worm {TCP}				MCAFEE,10389
Virus - Possible Tune.vbs {TCP}					MCAFEE,10497
Virus - Possible NAIL Worm {TCP}				MCAFEE,10109
Virus - Possible Papa Worm {TCP}				MCAFEE,10145
Virus - Possible Freelink Worm {TCP}				MCAFEE,10225
Virus - Possible BADASS Worm {TCP}				MCAFEE,10388
Virus - Possible ExploreZip.B Worm {TCP}			MCAFEE,10471
Virus - Possible wscript.KakWorm {TCP}				MCAFEE,10509
Virus Possible Suppl Worm {TCP}					MCAFEE,10361
Virus - Possible NewApt.Worm - theobbq.exe {TCP}		MCAFEE,10540
Virus - Possible Word Macro - VALE {TCP}			MCAFEE,10502
Virus - Possible IROK Worm {TCP}				MCAFEE,98552
Virus - Possible Fix2001 Worm {TCP}				MCAFEE,10355
Virus - Possible Y2K Zelu Trojan {TCP}				MCAFEE,10505
Virus - Possible The_Fly Trojan {TCP}				MCAFEE,10478
Virus - Possible Word Macro - VALE {TCP}			MCAFEE,10502
Virus - Possible Passion Worm {TCP}				MCAFEE,10467
Virus - Possible NewApt.Worm - cooler3.exe {TCP}		MCAFEE,10540
Virus - Possible NewApt.Worm - party.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - hog.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - goal1.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - pirate.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - video.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - baby.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - cooler1.exe {TCP}		MCAFEE,10540
Virus - Possible NewApt.Worm - boss.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - g-zilla.exe {TCP}		MCAFEE,10540
Virus - Possible ToadieE-mail Trojan {TCP}			MCAFEE,10540
Virus - Possible PrettyPark Trojan {TCP}			MCAFEE,10175
Virus - Possible Happy99 Virus {TCP}				MCAFEE,10144
Virus - Possible Bubbleboy Worm {TCP}				MCAFEE,10418
Virus - Possible NewApt.Worm - copier.exe {TCP}			MCAFEE,10540
Virus - Possible MyPics Worm {TCP}				MCAFEE,10467
Virus - Possible Babylonia - X-MAS.exe {TCP}			MCAFEE,10461
Virus - Possible NewApt.Worm - gadget.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - irnglant.exe {TCP}		MCAFEE,10540
Virus - Possible NewApt.Worm - casper.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - fborfw.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - saddam.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - bboy.exe{TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - monica.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - goal.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - panther.exe {TCP}		MCAFEE,10540
Virus - Possible NewApt.Worm - chestburst.exe {TCP}		MCAFEE,10540
Virus - Possible NewApt.Worm - farter.exe {TCP}			MCAFEE,10540
Virus - Possible NewApt.Worm - cupid2.exe {TCP}			MCAFEE,10540
Virus - Possible Resume Worm {TCP}				MCAFEE,98661
Virus - Possible Timofonica Worm {TCP}				MCAFEE,98674
Virus - Possbile Zipped Files Trojan {TCP}			MCAFEE,10450
### URL ###
BAD TRAFFIC data in TCP SYN packet {TCP}		url,www.cert.org/incident_notes/IN-99-07.html
BAD TRAFFIC loopback traffic {IP}			url,rr.sans.org/firewall/egress.php
BAD TRAFFIC 0 ttl {IP}					url,www.isi.edu/in-notes/rfc1122.txt
DNS EXPLOIT named overflow attempt {TCP}		url,www.cert.org/advisories/CA-1998-05.html
EXPERIMENTAL poll.gotomypc.com access {IP}		url,www.gotomypc.com/help2.tmpl
EXPERIMENTAL DDOS Stacheldraht handler->agent (niggahbitch) {ICMP}	url,staff.washington.edu/dittrich/misc/stacheldraht.analysis
DDOS Stacheldraht agent->handler (skillz) {ICMP}		url,staff.washington.edu/dittrich/misc/stacheldraht.analysis
DDOS Stacheldraht handler->agent (ficken) {TCP}			url,staff.washington.edu/dittrich/misc/stacheldraht.analysis
EXPERIMENTAL WEB-MISC bad HTTP/1.1 request, potentual worm attack {TCP}		url,securityresponse.symantec.com/avcenter/security/Content/2002.09.13.html
EXPERIMENTAL WEB-MISC OpenSSL Worm traffic {TCP}		url,www.cert.org/advisories/CA-2002-27.html
EXPERIMENTAL WORM slapper admin traffic {UDP}			url,www.cert.org/advisories/CA-2002-27.html
FTP STAT overflow {TCP}					url,labs.defcom.com/adv/2001/def-2001-31.txt
MISC AIM AddExternalApp attempt {TCP}			url,www.w00w00.org/files/w00aimexp/
NETBIOS nimda .eml {TCP}				url,www.datafellows.com/v-descs/nimda.shtml
NETBIOS nimda .nws {TCP}				url,www.datafellows.com/v-descs/nimda.shtml
NETBIOS nimda RICHED20.DLL {TCP}			url,www.datafellows.com/v-descs/nimda.shtml
P2P Fastrack  (kazaa/morpheus) GET request {TCP}	url,www.musiccity.com/technology.htm
P2P Fastrack (kazaa/morpheus) traffic {TCP}		url,www.kazaa.com
SCAN SOCKS Proxy attempt {TCP}				url,help.undernet.org/proxyscan/
SNMP PROTOS test-suite-req-app attempt {UDP}		url,www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html
SNMP PROTOS test-suite-trap-app attempt {TCP}		url,www.ee.oulu.fi/research/ouspg/protos/testing/c06/snmpv1/index.html
TFTP GET Admin.dll {UDP}				url,www.cert.org/advisories/CA-2001-26.html
WEB-CGI rwwwshell.pl access {TCP}			url,www.itsecurity.com/papers/p37.htm
WEB-CGI LWGate access {TCP}				url,www.netspace.org/~dwb/lwgate/lwgate-history.html
WEB-CGI flexform access {TCP}				url,www.wiretrip.net/rfp/p/doc.asp/i2/d6.htm
WEB-CLIENT readme.eml download attempt {TCP}		url,www.cert.org/advisories/CA-2001-26.html
WEB-CLIENT readme.eml autoload attempt {TCP}		url,www.cert.org/advisories/CA-2001-26.html
WEB-IIS pbserver access {TCP}				url,www.microsoft.com/technet/security/bulletin/ms00-094.asp
WEB-IIS CodeRed v2 root.exe access {TCP}		url,www.cert.org/advisories/CA-2001-19.html
WEB-MISC Lotus EditDoc attempt {TCP}			url,www.securiteam.com/exploits/5NP080A1RE.html
WEB-MISC whisker HEAD with large datagram {TCP}		url,www.wiretrip.net/rfp/pages/whitepapers/whiskerids.html
WEB-MISC whisker HEAD/./ {TCP}				url,www.wiretrip.net/rfp/pages/whitepapers/whiskerids.html
WEB-MISC sadmind worm access {TCP}			url,www.cert.org/advisories/CA-2001-11.html
WEB-MISC .DS_Store access {TCP}				url,www.macintouch.com/mosxreaderreports46.html
WEB-MISC .FBCIndex access {TCP}				url,www.securiteam.com/securitynews/5LP0O005FS.html
WEB-PHP bb_smilies.php access {TCP}			url,www.securiteam.com/securitynews/Serious_security_hole_in_PHP-Nuke__bb_smilies_.html
WEB-PHP php.exe access {TCP}				url,www.securitytracker.com/alerts/2002/Jan/1003104.html
