TRINOO

This signature detects trinoo (or trin00) activity. Trinoo is a set of computer programs to conduct a DDoS attack.

Short Name
TRINOO
Category
Remote-Access
SubCategory
Command
Risk
3
Release Date
--
Supported Platforms

Available to all SRX running 12.3X48+

Available to all MX running 20.2R1+

Available to all vSRX running 20.3R1+

Port
UDP/27444,UDP/31335,TCP/27665 
Application Group
junos-approot:applications:command

Found a potential security threat?