IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.318, 3.1.318 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2026-08-03 | |||
| XSS/SQL Injection Attack Engine Version | 1.260607 | |||
| XSS/SQL Injection Attack Engine Change Description | Update the detection model, optimize datasets and model parameters, and improve detection performance | |||
| New Signature (1059) |
Rule ID | Rule Name | StoneOS | Detail |
| 106488 | Trojan Activity: Gozi CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 105891 | Trojan Activity: Androm CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106359 | Trojan Activity:BlackMarket CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 105786 | Trojan Activity:Injector CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106651 | Mining Activity[Multi Currency]: public_miner_pool Mining Pool DNS Lookup | 5.0R4 or above | click for more information | |
| 106062 | Trojan Activity:packed CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106514 | Trojan Activity:Government CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 105925 | Bazar APT Domain Observed | 5.0R4 or above | click for more information | |
| 106662 | Trojan Activity:BlackMarket CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106345 | Trojan Activity:SilverFox CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 105820 | Trojan Activity: Officedownloader CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106557 | Trojan Activity:SilverFox CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106208 | Trojan Activity: Vo1d CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106420 | Trojan Activity:SilverFox CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106111 | Mirai Botnet CnC Domain Observed | 5.0R4 or above | click for more information | |
| 106371 | Mirai Botnet CnC Domain Observed | 5.0R4 or above | click for more information | |
| 105974 | Trojan Activity:BlackMarket CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 106583 | Kryptik APT Domain Observed | 5.0R4 or above | click for more information | |
| 106266 | Trojan Activity:BlackMarket CnC Domain in DNS Lookup | 5.0R4 or above | click for more information | |
| 105677 | Mining Activity[Multi Currency]: MiningPool CnC DNS Lookup | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (53) |
Rule ID | Rule Name | StoneOS | Detail |
| 334841 | Cross-site Scripting Detection - In URI 24 | 5.0R4 or above | Click here for more information | |
| 336844 | SQL Injection Detection - Error Based Injection 1 | 5.0R4 or above | Click here for more information | |
| 334893 | SQL Injection Detection - Boolean Injection 9 | 5.5R5 or above | Click here for more information | |
| 334986 | SQL Injection Detection - Error Based Injection 9 | 5.5R5 or above | Click here for more information | |
| 306369 | Directory Traversal Detection - Sensitive File Access | 5.0R4 or above | Click here for more information | |
| 334910 | SQL Injection Detection - SELECT Injection 3 | 5.5R5 or above | Click here for more information | |
| 334899 | SQL Injection Detection - Delayed Injection 2 | 5.5R5 or above | Click here for more information | |
| 336861 | SQL Injection Detection - Error Based Injection 10 | 5.5R5 or above | Click here for more information | |
| 334864 | SQL Injection Detection - UNION SELECT 13 | 5.5R5 or above | Click here for more information | |
| 334906 | SQL Injection Detection - Access to Sensitive Information 8 | 5.5R5 or above | Click here for more information | |
| 334788 | Cross-site Scripting Detection - Dangerous Script Labels 9 | 5.5R5 or above | Click here for more information | |
| 334671 | Cross-site Scripting Detection - In URI 11 | 5.5R5 or above | Click here for more information | |
| 334466 | Directory Traversal Detection - In URI 4 | 5.5R5 or above | Click here for more information | |
| 334937 | SQL Injection Detection - SELECT Injection 11 | 5.5R5 or above | Click here for more information | |
| 334892 | SQL Injection Detection - Boolean Injection 8 | 5.5R5 or above | Click here for more information | |
| 336950 | SQL Injection Detection - UNION SELECT 1 | 5.5R5 or above | Click here for more information | |
| 334477 | Directory Traversal Detection - In URI 9 | 5.5R5 or above | Click here for more information | |
| 334871 | SQL Injection Detection - CASE WHEN Injection 2 | 5.5R5 or above | Click here for more information | |
| 334826 | Cross-site Scripting Detection - In URI 145 | 5.5R5 or above | Click here for more information | |
| 313135 | Cross-site Scripting Detection - In URI 26 | 5.0R4 or above | Click here for more information | |
| ...... | ||||