Update Details

Update #2829 (02/14/2017)

EOL Announcement (January 3, 2017): End-of-Life Notification for Juniper Networks IDP/AppID Signature Releases on EOL products. Please see TSB17019 for more information.

3 new signatures:

HIGH	HTTP:HPE-INSECURE-DESERIAL	HTTP: HPE Operations Orchestration Insecure Deserialization
HIGH	HTTP:STC:IE:CVE-2017-0037-RCE	HTTP: Microsoft Internet Explorer CVE-2017-0037 Remote Code Execution
HIGH	HTTP:WEBSENSE-TRITON-DOS	HTTP: WebSense TRITON Suite PolicyBroker Remote Denial of Service

333 new application2 signatures:

Web:ZEDO	Zedo is a global advertisement solution provider.
Web:ADSAFEPROTECTED	Ad Safe Protected is a service provided by Integral Ad Science, used to determine if ad views and clicks are high-quality and valid.
Web:ADJUST	Adjust is a business intelligence platform for mobile app marketers.
Web:LIGATUS	Ligatus provides advertising solutions for websites.
Web:BITBUCKET	Bitbucket is a free code DVCS hosting site for Git and Mercurial.
Web:INTERNET-ORG	Internet.org is a partnership between social networking services company Facebook and six companies (Samsung, Ericsson, MediaTek, Opera Software, Nokia and Qualcomm) that plans to bring affordable access to selected Internet services to less developed countries by increasing efficiency, and facilitating the development of new business models around the provision of Internet access.
Infrastructure:NRDP	Nagios Remote Data Processor (NDRP) is a flexible data transport mechanism and processor for Nagios.
Web:SURESOME	Suresome allows to increase browsing capabilities with a SSL proxy.
Web:SPREDFAST	Spredfast is an enterprise social media marketing platform
Web:KHMER-PRESS	Cambodian website about different topics including current news and lifestyle.
Web:LENT	Azerbaijani news portal.
Web:BOOTSTRAPCDN	BootstrapCDN is a free and public content delivery network.
Web:DAIKYNGUYEN	Global news web portal located in Vietnam.
Web:MUSICCHOICE	MusicChoice (MC) is a media streaming website.
Web:MIAOPAI	Miaopai is a mobile video app software editor based in China.
Web:KHMER-NOTE	Cambodian website about different topics including current news and lifestyle.
Web:ZERI	Zeri newspaper, voice portal and mobile independent media portal, popular in Albania.
Multimedia:SOCIALCAM	This protocol plug-in is deprecated.
Web:EBAY-CLASSIFIEDS	Ebay related website specialized in classified ads per geographic region.
Web:MYDRIVE	Free and secure online storage service.
Web:YALLAKORA	Egyptian football related website.
Web:HEAVY	News website.
Web:GARENA	Garena is a platform provider for online entertainment and communication tools.
Web:CPASBIEN	Famous french torrent website.
Web:HBONORDIC	On-demand video streaming website powered by the HBO american TV channel but only available in Sweden, Norway, Denmark and Finland.
Web:GLYMPSE	Glympse is a fast, free, and simple way to share your location in real-time.
Web:FETCHTV	Personal Video recorder and Pay TV service delivered over broadband connection to the TV via a Fetch TV box.
Web:AFL	Australian Footy League website
Web:TWOO	Twoo is a social networking website, enabling users to connect to relatives, friends, or unknown people.
Web:NBC	NBC is an american TV network.
Web:CURSE	Curse is an on-line game portal and a game add-on and modifications management application.
Web:VIDEOJUG	Videojug is an owner of various online consumer TV channels. These include Scoff (food), Pose (beauty), Brideas (weddings), Deco Bliss (home decor) and Quipstar (comedy).
Web:DOMAIN	One of Australia's leading site for residential/commercial/rural property solutions. Also contains info for buyers, investors, sellers, renteres and agents Australia wide.
Web:FACEBOOK-VIDEO	Facebook Embedded Video is a Facebook service allowing to watch, upload and share videos.
Web:TUNE-INC	Tune is an enterprise platform providing measurement to mobile marketers and their partners. This plugin classifies both the HasOffers advertisement services, and also the Mobile App Tracking analytics solutions for mobile applications
Web:TRACKINGCLICK	Web analytics services located in Bangladesh.
Web:LOCALYTICS	Localytics is an analytics and marketing platform for mobile and web apps.
Web:TBS	Website to stream funny TV shows and movies.
Web:GMANETWORK	Filipino website about news and entertainment.
Web:OPTIMIZELY	Optimizely is a firm that makes customer-experience optimization software for companies.
Web:QINIU	Shanghai Qiniu Information Technologies Co., Ltd. provides Internet data storage services.
Web:VIDME	User video content website.
Web:RLCDN	Rlcdn appends social network data to customer database to help discovering where customers are across the social web.
Web:TAYARA	Tunisian classified ads website, part of the Schibsted Classified Media (SCM) group.
Web:BOXOPUS	Boxopus securely downloads torrents into the private space or in the cloud.
Web:PEACEFMONLINE	Hungarian news portal.
Infrastructure:TOR2WEB	Tor2web is a project intended to give Internet users access to Tor Onion Services without the need to use Tor Browser.
Web:PUNYUMUNYU	Japanese adult movie website.
Web:SHOP-COM-MM	Myanmari online shopping website.
Web:FLIPBOARD	Flipboard is a social-network aggregation web service for browsers and mobile devices.
Web:SALAMNEWS	Azebaijani news portal.
Infrastructure:NRPE	Nagios Remote Plugin Executor (NRPE) is a Nagios agent that allows remote system monitoring using scripts that are hosted on the remote systems.
Web:DIPLY	Entertainment website powered by user's posts.
Web:PERFORM	Perform is a leading digital sports content delivery network and media group.
Web:DISNEY-XD	Disney XD Channel VoD website.
Web:NHADATSO	Real estates web portal located in Vietnam.
Web:HOCKEYAPP	HockeyApp is a development interface for applications on desktop and mobile platforms. Some traffic may consist of crash logs, analytic reports, new-version notifications and updates. HockeyApp has been acquired by Microsoft.
Web:WEB-DE	Famous german web portal. Includes several services such as web search, ecommerce, webmail and news.
Web:ORIGJINALE	Albanian news portal.
Web:APPBOT	Appbot aggregates app store reviews for all countries on the iTunes, Google Play and Amazon app stores.
Infrastructure:PD-PROXY	Tunneling software that can secure your internet connection by encrypting all your connections to the internet. This protocol plug-in classifies the basic usage of the application (transport protocol set to UDP only).
Web:PASTEBIN	A pastebin is a type of web application where anyone can store plain text. They are most commonly used to share short source code snippets for code review via Internet Relay Chat.
Web:ONEDIO	Turkish news portal.
Web:SABAH	Turkish news portal.
Infrastructure:DSI	The Data Stream Interface (DSI) is a session layer used to carry Apple Filing Protocol traffic over Transmission Control Protocol (TCP).
Web:GOOGLE-TRUSTED-STORE	Google Trusted Store classifies access to the Google Trusted Store web API.
Web:SLACK	Slack is an online team collaboration tool, featuring both a web browser application and mobile apps.
Web:ETAJAKHABAR	Nepali news portal.
Web:GODTUBE	GodTube is an online video sharing platform which strives to have Christian content.
Web:LTN	Taiwanese news portal.
Web:BITMEDIANETWORK	Bitmedianetwork is the advertising service provided by BitTorrent.
Web:MOPUB	MoPub is a hosted ad serving solution built specifically for mobile publishers.
Web:JQUERY	jQuery is a javascript library.
Web:DEALDEY	Online shopping site in Nigeria.
Web:PULSE-COM-GH	Ghanean news portal.
Web:HIRUFM	Sri lankan radio website
Web:THREEMA	Threema is an instant messaging mobile application focused on confidentiality.
Web:CBS-VIDEO	CBS Video is a site which streams movies, tv series, etc.
Multimedia:GOOGLE-PLAY-MUSIC	Google Play Music is a music streaming service and online music locker operated by Google.
Web:QUIC	QUIC is an open networking protocol developed primarily at Google for transporting web content.
Web:SARAHANEWS	Jordanian news portal.
Web:THELADBIBLE	Entertainment website with thousands of unique photo galleries and videos.
Web:JOFOGAS	Hungarian classified ads website.
Web:GETTYIMAGES	Getty Images distributes still imagery, video, music and multimedia products, as well as other forms of premium digital content
Web:BRAINTREE	Braintree is a PayPal company which provides payment processing options for many devices.
Web:BUZZSENEGAL	Viral news and videos website from Senegal.
Web:ATLASSOLUTIONS	Atlas Solutions is a subsidiary of Facebook which provides services in online advertising.
Web:LOTAME	Lotame is a web data analytics platform (aka Data Management Platform).
Infrastructure:ELASTICSEARCH	Elasticsearch is a search engine. It provides a distributed, multitenant-capable full-text search engine
Web:DAILY-STRENGTH	This protocol plug-in classifies the http traffic to the host dailystrength.org.
Web:AFTENPOSTEN	Norvegian news portal.
Web:MYMARKET	Georgian classified ads website.
Web:URDUPOINT	Pakistani news portal.
Web:WTV	WTV Networks is an entertainment and show biz news website.
Web:ALJARAS	Lebanese entertainment website/magazine.
Web:XINNET	Xinnet provides web-hosting, and mailbox services in China.
Web:SAFEWEBONLINE	Free internet monitoring and analytics application.
Web:SOURCEFORGE	Sourceforge is a famous web based code repository for open source software developement.
Web:PRINT-IO	Print.io is a commerce tools for everything from personalized products to business printing and branded merchandise.
Web:EVEREST-TECH	Everest Technologies is an Information Technology solutions provider.
Web:PASTEBIN-POSTING	Pastebin_posting is used to classify posting workflow of the pastebin.com website
Web:MICROSOFT	This signature classifies hosts owned by Microsoft.
Web:EKSKLUZIVA	Bosnian showbiz related news website.
Web:MS-SWAY	It's an on-line application of Microsoft's office365 suite which allows to create and share polished, interactive reports, presentations, personal stories, and more..
Web:SHASHA	Palestinian news portal.
Web:ELNUEVOHERALD	Cuban news portal.
Web:THEMASPORTS	Cypriot sports related website.
Web:NEFSIS	Video conference website ( http://www.nefsis.com/ )
Web:YR	Norwegian meteorological website.
Web:NCAA	The Official Website of the NCAA (National Collegiate Athletic Association).
Web:DROPBOX-DOWNLOAD	File downloading service of Dropbox.
Web:SPOTXCHANGE	SpotX provides a video advertising platform for internet publishers.
Web:RADIO-BETHLEHEM-2000	Palestinian local radio website, featuring live streaming.
Web:OFFNEWS	Bulgarian news portal
Web:CVBANKAS	Lithuanian job hunting website.
Web:CV-ONLINE	Estonian job hunting website.
Web:SIZMEK	Sizmek (MediaMind, Eyeblaster) is an advertising management company.
Web:BOMB01	Website about hong kongese youth interest and lifestyle related content
Web:VZ-LT	Lithuanian business related news portal.
Web:GRANMA	The official website for the PCC (Partido Comunista de Cuba).
Web:REALESTATE	Australian site for property solutions.
Web:ADTECH	ADTECH's integrated ad serving solutions enable web publishers, ad networks, agencies and advertisers to manage, serve and report on their online advertising campaigns - including display, video and mobile formats. Adtech is a division of AOL platforms.
Web:GOOGLEBOT	Web crawler (spider) used by the Google Search engine. This plug-in will classify the bot HTTP requests, but the ixEngine won't detect web services that are crawled by the bot.
Web:AKIPRESS	Kyrgyzstani news portal.
Web:DEBIAN	This protocol plug-in classifies the traffic on debian.org.
Gaming:ANIPANG	Anipang for Kakao is a mobile puzzle game where you match animals to earn points and high scores.
Web:DROPSHOTS	Website for sharing photos, videos, etc.
Web:ANT1IWO	Cypriot news portal.
Web:ROGERS	Rogers TV is a group of community channels owned by Rogers Communications. This protocol identifies the flows of this website.
Web:CLIEN	Southern Korean website for exchanges and posts about several topics.
Web:TN8	Nicaraguan news portal.
Web:CITIZENTV	Kenyan news website, including top stories, politics, business, sports, and lifestyle.
Web:SMAATO	Smaato is a real-time advertising platform for mobile publishers and app developers.
Web:BLEACHERREPORT	Bleacher Report is a sports news website.
Web:KHABERNI	Jordanian news portal.
Web:BANESC-ONLINE	Venezualian online banking website.
Web:OPPETARKIV	Oppet arkiv (Open Archive) is a swedish television archive website and belongs to the SVT company.
Infrastructure:NET-PROXY	Net::Proxy is a framework for creating various kinds of network proxies in a very simple way. This plugin only classifies flows created with the connect-tunnel script of the Net::Proxy project.
Web:PARSE	Parse is a Mobile Backend platform working as a Service provider.
Web:ALKAWNNEWS	Jordanian news portal
Web:MAPBOX	Mapbox is an open source mapping platform for custom designed maps.
Web:LIVEPERSON	LivePerson develops products for online messaging, marketing, and analytics.
Web:YOUR-FREEDOM	VPN tunneling and anonymization application.
Web:NOA	Albanian online media portal providing news in Albania, Kosovo, Macedonia, etc.
Web:LAZADA	Online shopping mall popular in Indonesia and Malaysia.
Web:SIMPERIUM	Simperium is a service for developers to move data everywhere it's needed, instantly and automatically.
Web:ID-NET	Id.net is highly secure login system used for managing accounts for multiple websites.
Web:STUPID-VIDEOS	Streaming website for funny videos
Web:MCB-HOME	Curacaoan online web service of the MCB Bank.
Web:SMH	News streaming site in Australia which features latest local and International news, business, sport, entertainment etc.
Web:UMENG	Umeng is providing mobile app analytics solutions for mobile development teams and individual developers.
Web:ALSJL	Yemenite news portal.
Web:TOPFMRADIO	Famous radio station in Mauritius.
Web:ARENABG	Bulgarian pirate movie torrent search engine, also featuring a video player (P2P).
Web:GMW	Chinese news portal.
Web:CONSTANTCONTACT	Constant Contact is an online marketing company serving small businesses, nonprofit organizations, and membership associations. The company offers email marketing, social media marketing, online survey, and event marketing tools.
Web:ABS-CBN	Philippino TV channel website.
Infrastructure:KPASSWD	kpasswd is the protocol used to change a Kerberos password. Partial classification over TCP
Web:AC-REUNION	Ministerial web portal of La Reunion island.
Web:TV3	Lithuanian news portal.
Web:SANJESH	Website of the iranian national education measurement and evaluation organisation.
Web:BLOGPHONGTHUY	Specialized classified ads website in Vietnam.
Web:IKON	Mongolian free news portal site
Web:RUBICONPROJECT	Rubicon Project is an online advertising firm.
Web:PUBMATIC	PubMatic is an advertising company.
Web:SEKINDO	Sekindo is a digital platform for online video, display and mobile advertising.
Web:CONTENTABC	This protocol plug-in classifies the http traffic to the ContentABC content delivery network. It is used by youporn, redtube and tube8 web sites.
Web:NRTTV	NRT TV is a Kurdish News and current affairs TV channel owned by the Nalia company and is based in Sulaymaniyah, the Capital of Sulaymaniyah.
Web:MS-PLANNER	It's an on-line application of Microsoft office365 suite which offers to highly visual way to organize teamwork. (create new plans, organize and assign tasks, share files, ...)
Web:SPLUNK	Splunk is an American multinational corporation based in San Francisco, California, that produces software for searching, monitoring, and analyzing machine-generated big data, via a web-style interface.
Web:XBOX-VIDEO	Microsoft Movies and Tv is an online service to watch movies, tv show and series.
Web:ELMOGAZ	Egyptian news portal.
Web:LIPUTAN6	Indonesian news portal.
Web:DROPBOX-UPLOAD	File uploading service of Dropbox
Web:VIDMAX	Website for streaming funny, fail, punk and war videos.
Web:TABOOLA	Taboola is a content marketing platform that provides a web widget to content creators on their website.
Web:MS-ONENOTE	OneNote belongs to Microsoft Office 365 suite, it's a program for free-form information gathering, allowing to add text, pictures, audio captures, ...
Web:PUBLIC-LU	Website providing communications from the Government of Luxemburg.
Multimedia:GO90	Internet TV service owned by Verizon.
Web:FANPAGE	Greek website that deals with topics based around society and lifestyle.
Multimedia:APPLE-MUSIC	Apple Music is an on-demand music streaming service by Apple.
Web:SAFARICOM	Kenyan mobile and internet service provider website.
Web:QUICKFLIX	Australian website with movies and TV shows video streaming.
Web:MANORAMAONLINE	English and Malayalam language daily local news based in Kottayam.
Web:SDE	Kenyan news and lifestyle related website.
Web:FOXSPORTS-AU	Australian sports live video streaming of Footy, Rugby, Soccer, Cricket, Motorsport, Tennis and much more.
Web:JAVHD	JAVHD is an asian adult website.
Web:RACKSPACE	Rackspace Inc. is a managed cloud computing company.
Web:LAPRENSAGRAFICA	El salvadorian news portal
Web:SCOTIABANK	Bahamian banking website.
Web:SKYNEWSARABIA	International news portal focused on the middle east region.
Web:MEDIAMATH	MediaMath is a global provider of digital media and data management technology for advertisers and agencies.
Web:ADNETWORKPERFORMANCE	Tracking and advertisement servers in Algeria likely related to malware programs.
Gaming:POKEMON-GO	Pokemon GO is an online mobile game by Niantic Labs.
Web:3366-COM	3366.com is an online secure flash game website.
Web:ALWAFD	Egyptian news portal.
Web:BAIDU-WALLET	Baidu Wallet is an application of money management.
Multimedia:TELESTREAM	Telestream, Inc. is an American privately held provider of software and hardware products for video capture, encoding, transcoding, and network-based delivery.
Web:BONGACAMS	Adult video content website.
Web:NGROK	Platform that allows to access a local server from a public URL through reverse proxying. This plug-in both classifies server stream to ngrok infrastructure and client access from HTTP/HTTPS.
Web:EPOM	Epom is an ad platform for advertisers, publishers, ad networks, and ad agencies
Web:NRL	NRL is the National Australian Rugby League website and provides articles and video streaming.
Web:CATCHOFTHEDAY	Online shopping site in Australia.
Web:MYAUTO	Georgian classified ads website specialized in motor vehicles
Web:MOAT	Moat is an analytics and intelligence company focused on transforming brand advertising online.
Web:EXCEL-ONLINE	On-line version of Microsoft Excel.
Web:CNM	Web portal offering the latest breaking news from Maldives.
Web:GCS	Online file storage web service for applications by Google. This plug-in classifies unsecured Client-to-Google servers web communications only.
Web:HIR24	Hungarian news portal.
Web:ADPLEX-MEDIA	Advertising network traffic by Adplex Media.
Web:APPLE-LOCATION	Apple Location is used to provide informations about the location of an Apple device.
Web:OLARK	Olark is one of the leading live chat providers.
Web:LIST-AM	Armenian classified ads website.
Web:XCAMS	Xcams is an adult webcam website.
Web:MINUTO30	Columbian news portal.
Web:YEMENNOW	Yemeni news portal
Web:UNRULY	Unruly is an advertisement technology company that gets videos watched, tracked and shared across the Open Web.
Web:KRUX	Krux is a data management company whose services not only includes data security but also (and this is where krxd comes in) visitor tracking and monetization services.
Web:TRAFFICJUNKY	TrafficJunky is an online advertising service.
Web:INWI	Moroccan mobile operator website
Infrastructure:SVCCTL	This protocol is used to control remotely Windows services. Also known as MS-SCMR (Service Control Manager Remote Protocol). For further information, see https://msdn.microsoft.com/en-us/library/cc245832.aspx
Multimedia:VIAPLAY	Viaplay is a video-on-demand service for the Nordic countries, which uses Silverlight to stream videos.
Web:GOOGLE-CODE	Google Code is a website for developers interested in developing on Google.
Web:BIOBIOCHILE	Chilian news portal
Web:SENEGO	Senegalese national news portal.
Web:ELFAGR	Egyptian news portal.
Web:SPORTPESA	Kenyan betting platform, sponsor of Kenya's official football League.
Web:WAPA	Multimedia web portal of the WAPA-TV television station located in Puerto Rico.
Web:HTTP2	HTTP/2 is the second major version of the HTTP network protocol used by the World Wide Web.
Web:TNTDRAMA	TNTDrama.com is a part of Turner Entertainment Digital. It is for media streaming.
Web:APPLOVIN	Applovin is a mobile marketing company.
Web:THEVIDEOS	Free file upload service.
Web:ADVERTISING-COM	Advertising.com is a massive premium, cross-screen network with several million global unique visitors, programmatic buying, a proprietary DSP, and network-exclusive access to AOL inventory. Advertising.com is a division of AOL platforms.
Web:GITHUB	Famous web-based code repository for open source software developement.
Web:OUTBRAIN	Outbrain is a content discovery platform whose content marketing module offers to help Internet publishers.
Web:DNXLIVE	Dnx Live is a live webcam platform.
Web:ANSPRESS	Azerbadjani news portal
Web:ADADERANA	Sri lankan news portal
Web:ENSIGHTEN	Ensighten is a global omni-channel data and tag management technology vendor.
Web:SPORTAL	Bulgarian sports related website.
Web:FOXTEL	Foxtel is a Video streaming website, proposing live stream or VOD.
Infrastructure:I2P	I2P (Invisible Internet Project) is an anonymous overlay network - a network within a network. It is intended to protect communication from dragnet surveillance and monitoring by third parties such as ISPs.
Web:MYOPTUS	Optus (Australian Mobile Operator) application is used to manage mobile accounts on the go. The app is used for checking data usage, viewing and paying bills, recharge and for chats with customer care.
Web:AOL-ONE	AOL One is a programmatic video advertising solutions company owned by AOL.
Web:BIG5-SPORTING-GOODS	Online sport goods store.
Multimedia:MEERKAT	Meerkat mobile application allows Twitter users to live stream video to their followers.
Web:ONEDRIVE	OneDrive (previously SkyDrive, Windows Live SkyDrive, and Windows Live Folders) is a file hosting service.
Web:HELPSHIFT	Helpshift is a support desk platform for native apps.
Web:AVAS	Web news portal from Maldives.
Web:GOOGLE-WEBLIGHT	Allows to get a faster loading of web pages by browsing a lightweight version of websites. Google Web Light acts like a web proxy.
Web:THITHTOOLWIN	Myanmar news portal.
Multimedia:XBOX-MUSIC	Xbox Music is an online service for music.
Web:AWEMPIRE	Awempire is an adult affiliate program for webmasters.
Web:LKQD	LKQD is a multi-screen video ad serving solution built specifically for publishers.
Web:JASMIN	Jasmin is an adult webcams website.
Web:INDEXEXCHANGE	Index Exchange (Casale Media) is a Canadian online advertising technology provider.
Web:OXU	Azerbaijani news portal.
Multimedia:STORYTEL	Storytel is a digital subscription service that enables audio book listening from browser or smartphones.
Web:BRANCH	Branch Metrics is a deep linking and business analytics platform offering developer tools for large and independent mobile application companies.
Web:FLIPAGRAM	Flipagram is a tool to create, share and discover photos and videos.
Infrastructure:ANDROID-CNXMGR	Android connectivity manager is used by an android device to periodically check and manage internet connection.
Web:ALWASATNEWS	Bahraini news portal.
Web:FASTLY	Fastly is a real-time CDN.
Web:VERIZON	Verizon Internet provider hosts and services.
Web:PUBLIC	This protocol plug-in is deprecated.
Web:TUBEMOGUL	Tubemogul is an independent advertising software platform.
Web:SHAPARAK	Electronic payment company in Iran.
Infrastructure:MQTT	MQTT (MQ Telemetry Transport) is a machine-to-machine (M2M)/"Internet of Things" connectivity protocol. It was designed as an extremely lightweight publish/subscribe messaging transport. It is useful for connections with remote locations where a small code footprint is required and/or network bandwidth is at a premium.
Web:NEWSBOOK	Maltese news portal with national coverage.
Web:JUNKMAIL	South African classified ads website.
Web:SIGNAL	Signal, formerly BrightTag, is a cross-channel marketing company.
Multimedia:PERISCOPE	Periscope is a live video streaming application.
Web:KAKAOCDN	Kakaocdn is content delivery network used by KakaoTalk and KakaoStory
Web:SHOWTIME-ANYTIME	VoD service of SHOWTIME TV channel. Provides streaming services on tablet, mobile, or TV devices.
Web:6ALABAT	Kuwaitian online restaurant ordering website
Web:SUN-ONLINE	SunFM Radio's online streaming and news portal.
Web:APPNEXUS	AppNexus is an internet advertising technology and solution.
Web:FRESHNEWSASIA	Cambodian news feed website.
Web:SPYNET	Malware and spyware signature detection network used by Windows Defender and Microsoft Security Essentials.
Web:NEULION	The NeuLion Digital Platform provides digital video broadcasting, distribution and monetization of live and on-demand content.
Web:RIFFSY	Riffsy's GIF Keyboard permits users to share and discover animated GIFs and videos on mobile.
Web:UPTODOWN	Multiplatform and non restrictive app store for mobile devices.
Infrastructure:BJNP	BJNP refers to a printer protocol used by printers made by Canon.
Web:COMMBANK	Australian online personal banking, business solutions, institutional banking, company information, etc.
Web:HVG-HU	Football related egyptian news portal.
Web:XOPOM	Mongolian free news portal site
Web:PUTLOCKER	Site for watching free online movies.
Web:GOOGLE-CALENDAR	Google Calendar is a Google free online calendar.
Web:JAWHARAFM	Tunisian news and multimedia website.
Web:ABC-AU	News streaming website of Australian Broadcasting Corporation.
Web:CARSALES	Australian online portal to search for new and used cars for sale.
Web:HEAP	Heap is web and mobile analytics software library that automatically captures every user action in a Web or iOS app.
Web:JIBJAB	Video streaming website.
Web:RAMALLAH	Palestinian Ramallah City related news portal.
Infrastructure:OPERA-MOBILE-STORE	Opera Mobile Store provides over 300,000 apps and games for more than 7,500 different mobile phone models across Android, Java, Symbian, BlackBerry, Windows Mobile, Windows Phone and iOS platforms. In agreement with Nokia, Opera Mobile Store is also replacing the former Nokia store for legacy Nokia devices.
Web:DISNEY-JUNIOR	This is the Disney Channel website for kids between 3 to 7 years.
Web:GUATEVISION	Guatemalan television channel website.
Web:BIGPOND-MOVIES	Australian video streaming platform owned by Telstra Media, that streams live and on-demand services like BigPond Movies, AFL, or NRL.
Web:GCM	Data exchange service between 3rd party server applications and Android client applications. This plug-in only classifies the messages exchanged between the CCS 3rd party server and the GCM cloud servers, and also the messages exchanged between the GCM cloud servers and the client Android device.
Infrastructure:ZENMATE	ZenMate is a web-browser extension that provides VPN-like protection.
Web:MYSTART	Mystart.com is a web page that provides an internet search engine as well as other services.
Web:ADJARANET	Pirate Video Direct DownLoad website from Georgia, featuring top series and movies.
Web:MUHITELYEMEN	Yemenite news portal.
Web:ROLLOUT	With Rollout.io, mobile developers can quickly react to quality issues in production by hot-patching bugs in real time.
Web:DISNEY-CHANNEL	Disney Channel website.
Web:ANNAPURNAPOST	News portal with up-to-date news from Nepal on politics, social affairs, etc.
Web:MY-COM	My.com comprises myMail, MAPS.ME, online and mobile games, targeting service.
Web:POLITIS-NEWS	Daily morning cypriot newspaper on the web with national and local coverage.
Web:LISTINDIARIO	Dominican republic news portal.
Web:ROVI	Rovi Corporation is a company based in the United States whose patents, products, and technologies include copy protection, software licensing and "search recommendation" on devices such as set-top boxes, digital video recorders, TVs, and mobile and tablet devices.
Web:UPLYNK	upLynk is an easy way to stream your live and on demand video to all devices and platforms.
Web:OPENX	OpenX is an advertising company.
Web:LIVECHAT	LiveChat is an online customer service software with live support, help desk software and web analytics capabilities.
Web:ATLASSIAN	Atlassian is an Australian enterprise software company that develops products geared towards software developers and project managers.
Web:WINAMAX	Online gambling.
Remote-Access:LOGMEIN-RESCUE	Remote PC assistance software, accessible from web browser using a proprietary plug-in.
Web:CPMSTAR	Advertising platform for videogames.
Web:BIZOGRAPHICS	bizographics.com is a domain used by Bizo which is an advertising company that is part of a network of sites, cookies, and other technologies used to track you, what you do and what you click on, as you go from site to site, surfing the Web.
Web:GOOGLE-TAGS	Google Tag Manager is a tag manager for website and mobile applications.
Web:URBANAIRSHIP	Urbanairship provides tools and services designed for mobile application developers
Web:TVCATCHUP	TVCatchup is an internet television service for viewing free-to-air UK channels. Users can access the service via desktop browsers as well as smartphone and tablet apps.
Infrastructure:LOOKOUT-MS	All-in-one security software for mobile devices.
Web:MILAD	Palestinian news portal.
Web:MILLI	Azerbaijani news portal.
Infrastructure:APTOIDE	Aptoide is the largest independent Android app store allowing users to setup and manage their own Android stores.
Web:ZOOMTANZANIA	Classified ads and real estate website in Tanzania.
Web:SBS-AU	SBS is a media platform streaming in Australia.
Web:ZOPIM	Zopim is a live chat software owned by Zendesk.
Web:FILESANYWHERE	File hosting and backup web service.
Web:POINT	Moldovian news portal
Web:MS-TRANSLATOR	Microsoft Translator is a cloud-based API that is conveniently integrated into multiple products, tools, and solutions (ex: Bing, Skype...).
Web:BUKALAPAK	Indonesian classified ads website.
Web:THE-STAR	Kenyan web portal featuring world, business, sport, opinion, health news.

6 updated signatures:

HIGH	SMTP:OVERFLOW:TABS-EHLO-OF	SMTP: TABS Mailcarrier EHLO Overflow
HIGH	HTTP:STC:IE:CVE-2016-3210-RCE	HTTP: Microsoft Internet Explorer CVE-2016-3210 Remote Code Execution
MEDIUM	MS-RPC:EVASION:BLIND-BIND-ACK-2	MS-RPC: Evasion Technique (6)
HIGH	SMB:NETBIOS:CVE-2017-0004-MC	SMB: Microsoft Windows CVE-2017-0004 Memory Corruption
MEDIUM	HTTP:STC:ACTIVEX:MS-DOS	HTTP: Microsoft Windows GraphicsControl Unsafe ActiveX Access Denial of Service
HIGH	NETBIOS:WINS:SRV-NAME-OF	NETBIOS: WINS Server Name Overflow

Details of the signatures included within this bulletin:

HTTP:STC:ACTIVEX:MS-DOS - HTTP: Microsoft Windows GraphicsControl Unsafe ActiveX Access Denial of Service

Severity: MEDIUM

Description:

This signature detects attempts to use unsafe ActiveX controls in Microsoft Windows. An attacker can create a malicious Web site containing Web pages with dangerous ActiveX controls, which if accessed by a victim, allows the attacker to crash the client browser.

Supported On:

isg-3.5.141652, idp-5.1.110161014, DI-Client, DI-Worm, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, idp-4.2.110100823, idp-4.2.110101203, idp-5.1.0, idp-4.1.110110609, idp-4.1.110110719, mx-11.4, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, vsrx-12.1, vsrx-15.1, isg-3.5.141597, idp-5.1.110160603

References:

bugtraq: 18855
cve: CVE-2006-3427

Affected Products:

microsoft ie 6.0 (sp1)
microsoft ie 6.0 (sp2)

HTTP:WEBSENSE-TRITON-DOS - HTTP: WebSense TRITON Suite PolicyBroker Remote Denial of Service

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against WebSense TRITON Suite PolicyBroker. A successful attack can result in a denial-of-service condition.

Supported On:

isg-3.5.141652, idp-5.1.110161014, idp-4.1.110110719, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, isg-3.4.139899, j-series-9.5, srx-12.1, srx-branch-12.1, idp-4.2.110100823, idp-5.0.110130325, mx-11.4, isg-3.4.140032, idp-4.2.110101203, vsrx-12.1, idp-5.1.0, idp-5.0.110121210, vsrx-15.1, idp-4.1.110110609, isg-3.5.141597, idp-5.1.110160603

HTTP:STC:IE:CVE-2016-3210-RCE - HTTP: Microsoft Internet Explorer CVE-2016-3210 Remote Code Execution

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. A successful attack can lead to arbitrary code execution.

Supported On:

References:

cve: CVE-2016-3210

Affected Products:

microsoft internet_explorer 11

SMB:NETBIOS:CVE-2017-0004-MC - SMB: Microsoft Windows CVE-2017-0004 Memory Corruption

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against Microsoft Windows. A successful attack can lead to arbitrary code execution.

Supported On:

isg-3.5.141652, idp-5.1.110161014, idp-4.1.110110719, idp-4.0.0, mx-11.4, idp-4.2.110100823, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.5.0, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, idp-4.0.110090831, isg-3.4.139899, idp-5.0.110121210, srx-12.1, srx-branch-12.1, isg-3.4.140032, idp-5.0.110130325, idp-4.0.110090709, idp-4.2.110101203, vsrx-12.1, idp-5.1.0, j-series-9.5, vsrx-15.1, idp-4.1.110110609, isg-3.5.141597, idp-5.1.110160603

References:

cve: CVE-2017-0004

SMTP:OVERFLOW:TABS-EHLO-OF - SMTP: TABS Mailcarrier EHLO Overflow

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against TABS Mailcarrier Server. Attackers can cause a denial of service or execute arbitrary code with the privileges of the running daemon. This signature will false-positive on traffic between Microsoft Exchange Servers.

Supported On:

isg-3.5.141652, idp-5.1.110161014, idp-4.1.110110719, idp-4.0.0, idp-4.0.110090709, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, isg-3.4.139899, j-series-9.5, srx-12.1, srx-branch-12.1, idp-4.2.110100823, idp-5.0.110130325, mx-11.4, isg-3.4.140032, idp-4.2.110101203, vsrx-12.1, idp-5.1.0, idp-5.0.110121210, vsrx-15.1, idp-4.1.110110609, isg-3.5.141597, idp-5.1.110160603

References:

cve: CVE-2004-1638
bugtraq: 11535

Affected Products:

Tabs Laboratories MailCarrier 2.51.0

HTTP:HPE-INSECURE-DESERIAL - HTTP: HPE Operations Orchestration Insecure Deserialization

Severity: HIGH

Description:

An insecure deserialization vulnerability has been reported in HPE Operations Orchestration. The vulnerability is due to the deserialization of untrusted data in several servlets used for backwards compatibility with older API versions. A remote, unauthenticated attacker can exploit this vulnerability by sending crafted serialized data to the target application. Successful exploitation could result in arbitrary code execution in the context of the application.

Supported On:

References:

cve: CVE-2016-8519

HTTP:STC:IE:CVE-2017-0037-RCE - HTTP: Microsoft Internet Explorer CVE-2017-0037 Remote Code Execution

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. Successful exploitation can lead to Remote Code Execution.

Supported On:

References:

MS-RPC:EVASION:BLIND-BIND-ACK-2 - MS-RPC: Evasion Technique (6)

Severity: MEDIUM

Description:

This signature detects packets containing known evasion techniques that affect the SMB, DCE RPC, and MS RPC protocols. These packets should not be seen in normal traffic and indicate attempts to evade network defense systems by sending invalid, out of order, or heavily fragmented communication. Due to potential false-positives in some older MS-RPC services, this signature should only be used to inspect traffic going to and from the Internet on WAN links. This signature should NOT be used to monitor traffic between internal servers/clients on a LAN or inter-office WAN.

Supported On:

isg-3.5.141652, idp-5.1.110161014, idp-4.1.110110719, idp-4.0.0, mx-11.4, idp-4.0.110090831, idp-4.1.0, mx-16.1, idp-4.2.0, idp-5.0.0, isg-3.0.0, isg-3.1.134269, isg-3.1.135801, isg-3.4.0, isg-3.5.0, j-series-9.5, srx-12.1, srx-branch-12.1, idp-4.2.110100823, idp-5.0.110130325, idp-4.0.110090709, idp-4.2.110101203, vsrx-12.1, idp-5.1.0, idp-5.0.110121210, vsrx-15.1, idp-4.1.110110609, isg-3.5.141597, idp-5.1.110160603

NETBIOS:WINS:SRV-NAME-OF - NETBIOS: WINS Server Name Overflow

Severity: HIGH

Description:

This signature detects attempts to exploit a known vulnerability against NetBIOS WINS servers. Attackers can send an overly long server name parameter to overflow the stack buffer and execute arbitrary code.

Supported On:

References:

cve: CVE-2004-0567
bugtraq: 11763

Affected Products:

Microsoft Windows 2000 Datacenter Server
Microsoft Windows 2000 Server SP3
Microsoft Windows 2000 Advanced Server SP3
Microsoft Small Business Server 2000
Microsoft Windows 2000 Datacenter Server SP3
Microsoft Windows 2000 Datacenter Server SP2
Microsoft Windows 2000 Datacenter Server SP1
Microsoft Windows NT Server 4.0
Microsoft Windows NT Enterprise Server 4.0
Microsoft Small Business Server 2003
Microsoft Windows 2000 Professional
Microsoft Windows 2000 Server
Microsoft Windows 2000 Professional SP1
Microsoft Windows 2000 Advanced Server SP1
Microsoft Windows 2000 Advanced Server SP4
Microsoft Windows 2000 Datacenter Server SP4
Microsoft Windows 2000 Server SP4
Microsoft Windows 2000 Advanced Server SP2
Microsoft Windows NT Terminal Server 4.0 SP3
Microsoft Windows 2000 Server SP2
Microsoft Windows 2000 Server SP1
Microsoft Windows NT Enterprise Server 4.0 SP2
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Advanced Server
Microsoft Windows NT Enterprise Server 4.0 SP1
Microsoft Windows NT Enterprise Server 4.0 SP4
Microsoft Windows NT Enterprise Server 4.0 SP3
Microsoft Windows NT Enterprise Server 4.0 SP5
Microsoft Windows NT Enterprise Server 4.0 SP6
Microsoft Windows NT Enterprise Server 4.0 SP6a
Microsoft Windows NT Server 4.0 SP1
Microsoft Windows NT Server 4.0 SP2
Microsoft Windows NT Server 4.0 SP3
Microsoft Windows NT Server 4.0 SP4
Microsoft Windows NT Server 4.0 SP5
Microsoft Windows NT Server 4.0 SP6
Microsoft Windows NT Server 4.0 SP6a
Microsoft Windows NT Terminal Server 4.0 SP1
Microsoft Windows NT Terminal Server 4.0 SP2
Microsoft Windows NT Terminal Server 4.0 SP4
Microsoft Windows 2000 Professional SP2
Microsoft Windows NT Terminal Server 4.0 SP6
Microsoft Windows NT Terminal Server 4.0 SP6a
Microsoft Windows Server 2003 Enterprise Edition
Microsoft Windows Server 2003 Datacenter Edition
Microsoft Windows Server 2003 Web Edition
Microsoft Windows Server 2003 Enterprise Edition Itanium
Microsoft Windows Server 2003 Datacenter Edition Itanium
Microsoft Windows NT Terminal Server 4.0
Microsoft Windows NT Terminal Server 4.0 SP5