Changes between Version 46 and Version 47 of icasIII

Timestamp:

Aug 12, 2011, 9:22:16 AM (13 years ago)

Author:

waue

Comment:

--

icasIII

@@ -294 +294 @@
  == mail 通知 ==
 
-
+{{{
+#!html
+
+Attack List
+
+src ip   dst ip  prio    time range      detail  ids     count   dst port list
+140.110.114.141 74.125.71.103   1       20110812_085900~20110812_085900 WORM Conficker on HTTP Search   nk7admin        1       80
+140.110.114.141 74.125.71.104   1       20110812_085900~20110812_085900 WORM Conficker on HTTP Search   nk7admin        1       80
+140.110.116.253 74.125.153.100  1       20110812_085700~20110812_085800 WORM Conficker on HTTP Search   nk7admin        9       80
+140.110.134.253 224.0.0.13      2       20110812_081507~20110812_091438 BAD-TRAFFIC IP Proto 103 PIM    snort   122     0
+199.93.56.125   140.110.112.4   1       20110812_080600~20110812_080600 EXPLOIT RealNetworks RealPlayer FLV Parsing Two integer overflow vulnerabilities        nk7admin        1       60215
+199.93.56.125   140.110.114.136 1       20110812_084500~20110812_084500 EXPLOIT RealNetworks RealPlayer FLV Parsing Two integer overflow vulnerabilities        nk7admin        1       49221
+199.93.56.125   140.110.116.253 1       20110812_083200~20110812_083200 EXPLOIT RealNetworks RealPlayer FLV Parsing Two integer overflow vulnerabilities        nk7admin        1       59570
+218.10.246.123  140.110.127.250 1       20110812_081800~20110812_081800 TCP SYN nk7admin        1       1433
+61.147.112.50   140.110.112.78  1       20110812_080300~20110812_080300 TCP SYN nk7admin        1       1433
+61.147.112.50   140.110.127.255 1       20110812_080300~20110812_080300 TCP SYN nk7admin        1       1433
+67.195.19.74    140.110.117.190 1       20110812_085500~20110812_085500 EXPLOIT Microsoft Color Management Module Buffer Overflow       nk7admin        1       2549
+
+Graph Show
+
+
+
+}}}
 
  === 範例 ===