Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 4 subscribers
  • Views 1533 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Hundreds of IPS errors between UTM and AP15 "OS-WINDOWS Microsoft Windows UPnP Location overflow attempt"

dougga

Hello,

I'm getting many IPS alerts but no packets dropped between my UTM and Access Piong AP15.

The error is OS-WINDOWS Microsoft Windows UPnP Location overflow attempt.

I'd like to be able to track the source of this down.

Any help would be appreciated.

 

Thanks,

Doug

/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-22:25:08 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-22:35:10 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-02.log.gz:2019:04:02-23:02:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-01:22:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:21:55 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:21:55 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-03.log.gz:2019:04:03-13:22:16 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:42 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:43 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:48 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:48 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-15:21:59 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-04.log.gz:2019:04:04-18:23:14 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:18 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:24 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:30 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:05:30 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:32:58 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-02:33:02 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-05.log.gz:2019:04:05-17:37:07 wahine snort[4751]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-06.log.gz:2019:04:06-22:56:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:44 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:46 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:35:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:36:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:59 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:37:59 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:28 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:32 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:38:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:05 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:05 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:07 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:07 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:32 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:39:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:12 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:14 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:16 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:22 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:26 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:29 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:35 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:38 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:38 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:56 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:57 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:40:58 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:00 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:02 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:03 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:03 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:08 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:09 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:09 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:10 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:11 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:13 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:15 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:17 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:18 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:19 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:20 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:23 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:24 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:25 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:27 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:28 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:30 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:31 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:33 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:34 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:36 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:37 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:39 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:43 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:45 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:47 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:48 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-08.log.gz:2019:04:08-23:41:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-09.log.gz:2019:04:09-01:35:21 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-00:30:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-01:25:06 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-03:24:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-03:24:41 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:49 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:52 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:53 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:37:54 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-10.log.gz:2019:04:10-05:56:51 wahine snort[4755]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-15.log.gz:2019:04:15-14:07:06 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-02:10:31 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-02:56:12 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-03:57:10 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-06:38:00 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips/2019/04/ips-2019-04-16.log.gz:2019:04:16-14:37:37 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-02:28:01 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-02:28:01 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"
/var/log/ips.log:2019:04:18-07:50:13 wahine snort[27655]: id="2101" severity="warn" sys="SecureNet" sub="ips" name="Intrusion protection alert" action="alert" reason="OS-WINDOWS Microsoft Windows UPnP Location overflow attempt" group="110" srcip="10.1.1.2" dstip="10.1.0.1" proto="17" srcport="8472" dstport="8472" sid="1388" class="Misc Attack" priority="2" generator="1" msgid="0"



This thread was automatically locked due to age.
Parents
  • 0

    From what a web search reveals, only Windows XP is vulnerable to the OS-WINDOWS Microsoft Windows UPnP Location overflow attempt.

     

    Is UPnP device host service enabled on your system? Are "Add extra warnings" selected in the Intrusion prevention system attack patterns?

Reply
  • 0

    From what a web search reveals, only Windows XP is vulnerable to the OS-WINDOWS Microsoft Windows UPnP Location overflow attempt.

     

    Is UPnP device host service enabled on your system? Are "Add extra warnings" selected in the Intrusion prevention system attack patterns?

Children
No Data
Unfiltered HTML