""ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x03""

SID: 2019020

Revision: 3

Class Type: attempted-dos

Metadata: created_at 2014_08_26, updated_at 2014_12_05

Reference:

• Link

Protocol: udp

Source Network: any

Source Port: any

Destination Network: any

Destination Port: 123

Flow:

Contents:

• Value: "|00 03 10|" Depth: 3 Offset: 1

Within:

PCRE:

Special Options:

source