| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Win32/VB.SDB CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS PerlBot Version Message |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP subscribe literal overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN ICMP =XXXXXXXX Likely Precursor to Scan |
rev 3 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Windows 32bit procdump Dump File Exfiltration |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS OpenKey overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Ipconfig Command in SMB Traffic - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
GPL ATTACK_RESPONSE id check returned root |
rev 7 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL SCAN webtrends scanner |
rev 5 |
2019-07-26 |
| suricata |
GPL RPC portmap RQUOTA request UDP |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Tapazom.A |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Windows |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT NB8-01 - Unauthed RCE via bprd |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS OpenKey unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 1 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE oversized Security Descriptor attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Spotify P2P Client |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Malicious Chrome Extension Click Fraud Activity via Websocket |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE QRat.Java.RAT Checkin Response |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB InitiateSystemShutdown unicode attempt |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 - Known Exploit Instance |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 1 |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE W32.Duptwux/Ganelp FTP Username - onthelinux |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Perl/Shellbot.SM IRC CnC Checkin |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap cmsd request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE X-Tag Zeus Mitmo user agent |
rev 5 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Multiple MON_LIST Seq 0 Response Spanning Multiple Packets IMPL 0x03 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT Exim Internet Mailer Remote Code Execution |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 6 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Actiontec C1000A backdoor account M2 |
rev 3 |
2019-07-26 |
| suricata |
ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
rev 9 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Initial Connection Server Response |
rev 2 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For an Executable File |
rev 2 |
2019-07-26 |
| suricata |
GPL EXPLOIT Microsoft cmd.exe banner |
rev 7 |
2019-07-26 |