Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 4 subscribers
  • Views 1500 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hundreds of IPS errors between UTM and AP15 "OS-WINDOWS Microsoft Windows UPnP Location overflow attempt"

dougga

Hello,

I'm getting many IPS alerts but no packets dropped between my UTM and Access Piong AP15.

The error is OS-WINDOWS Microsoft Windows UPnP Location overflow attempt.

I'd like to be able to track the source of this down.

Any help would be appreciated.

 

Thanks,

Doug

/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-22:25:08 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-22:35:10 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-23:02:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-01:22:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:21:55 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:21:55 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:22:16 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:42 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:43 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:48 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:48 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:59 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-18:23:14 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:24 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:30 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:30 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:32:58 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:33:02 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-17:37:07 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-06.log.gz:2019:04:06-22:56:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:44 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:46 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:59 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:59 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:28 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:32 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:05 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:05 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:07 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:07 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:32 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:35 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:38 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:38 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:02 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:03 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:03 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:09 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:09 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:28 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-09.log.gz:2019:04:09-01:35:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-00:30:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-01:25:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-03:24:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-03:24:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:56:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-15.log.gz:2019:04:15-14:07:06 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-02:10:31 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-02:56:12 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-03:57:10 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-06:38:00 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-14:37:37 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-02:28:01 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-02:28:01 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-07:50:13 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"



This thread was automatically locked due to age.
  • 0

    From what a web search reveals, only Windows XP is vulnerable to the OS-WINDOWS Microsoft Windows UPnP Location overflow attempt.

     

    Is UPnP device host service enabled on your system? Are "Add extra warnings" selected in the Intrusion prevention system attack patterns?

Unfiltered HTML