| 5961 | Xbox Live Login Detection | info |
| 5940 | Havij SQL Injection Tool Detection | info |
| 5877 | Web Server iFrame Source Hosted on 3rd-party Server | info |
| 5874 | Web Server Pornographic Material Detected (keyword 15) | medium |
| 5873 | Web Server Pornographic Material Detected (keyword 14) | medium |
| 5872 | Web Server Pornographic Material Detected (keyword 13) | medium |
| 5871 | Web Server Pornographic Material Detected (keyword 12) | medium |
| 5870 | Web Server Pornographic Material Detected (keyword 11) | medium |
| 5869 | Web Server Pornographic Material Detected (keyword 9) | medium |
| 5868 | Web Server Pornographic Material Detected (keyword 8) | medium |
| 5867 | Web Server Pornographic Material Detected (keyword 7) | medium |
| 5866 | Web Server Pornographic Material Detected ((keyword 6) | medium |
| 5865 | Web Server Pornographic Material Detected (keyword 5) | medium |
| 5864 | Web Server Pornographic Material Detected (keyword 4) | medium |
| 5863 | Web Server Pornographic Material Detected (keyword 3) | medium |
| 5862 | Web Server Pornographic Material Detected (keyword 2) | medium |
| 5861 | Web Server Pornographic Material Detected (keyword 1) | medium |
| 5804 | Email Attachment Detection (client) | info |
| 5801 | Web Site Cross-Domain Policy File Detection | info |
| 5800 | Web Server CSS Hosted on 3rd-party Server | info |
| 5724 | JavaScript Usage on Web Server Detection | info |
| 5723 | JavaScript eval() Usage on Web Server | low |
| 5507 | LogMeIn Listening Server Detection | info |
| 5280 | whatismyip.com Client Detection | info |
| 5278 | Web Server - JavaScript Hosted on 3rd Party Server | info |
| 4976 | DNS Tunneling Client Detection (SMTP) | info |
| 4975 | DNS Tunneling Client Detection (port 25 non-tcp) | info |
| 4972 | DNS Tunneling Server Detection (HTTP) | info |
| 4971 | DNS Tunneling Server Detection (HTTP) | info |
| 4970 | DNS Tunneling Client Detection (HTTP) | info |
| 4969 | DNS Tunneling Client Detection (port 80 non-TCP) | info |
| 4811 | HDHomerun Server Detection | info |
| 4809 | Hamachi VPN Version Detection | info |
| 4808 | Hamachi VPN Detection | info |
| 4622 | Grendel Web Application Scanner Detection (deprecated) | info |
| 4138 | IBM AppScan Detection | medium |
| 4443 | Orb Client Detection | info |
| 4428 | KiSS PC-Link Client Detection | info |
| 4427 | KiSS PC-Link Server Detection (UDP) | medium |
| 4426 | KiSS PC-Link Server Detection (TCP) | info |
| 4302 | Maltego Tool Detection | info |
| 3930 | Qualys Scanner Detection | low |
| 4212 | Tor Tunnel 'End Point' Server Detection | medium |
| 4194 | Netopia Timbuktu Detection | info |
| 4160 | proxy.org Client Detection | info |
| 3957 | SIPScan VOIP Vulnerability Scanner Detection | info |
| 3956 | SIPScan VOIP Vulnerability Scanner Detection | info |
| 3926 | Xbox Console Detection | info |
| 3914 | SQLiX SQL Injection Tool Detection | medium |
| 3909 | Sensepost Wikto Detection | medium |
