| suricata |
ET FTP Possible FTP Daemon Username INSERT INTO SQL Injection Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE CommentCrew Possible APT c2 communications get system |
rev 4 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
GPL SHELLCODE sparc NOOP |
rev 6 |
2019-07-26 |
| suricata |
ET WEB_CLIENT RealPlayer FLV Parsing Integer Overflow Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL TFTP MISC TFTP32 Get Format string attempt |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS OpenKey unicode overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains InternetOpen WinInet API Call - Potentially Dridex MalDoc 2 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE NetWire / Ozone / Darktrack Alien RAT - Client KeepAlive |
rev 6 |
2019-07-26 |
| suricata |
ET WEB_SERVER Possible CVE-2015-1427 Elastic Search Sandbox Escape Remote Code Execution Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS C$ share access |
rev 12 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode attempt |
rev 4 |
2019-07-26 |
| suricata |
ET INFO HSRP Active Router Changed |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL ICMP PING Ping-O-MeterWindows |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE P2P Zeus or ZeroAccess Request To CnC |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE x0Proto Pong |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN DCERPC rpcmgmt ifids Unauthenticated BIND |
rev 3 |
2019-07-26 |
| suricata |
ET INFO SMB2 NT Create AndX Request For a DLL File - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2019-07-26 |
| suricata |
ET SCADA CitectSCADA ODBC Overflow Attempt |
rev 8 |
2019-07-26 |
| suricata |
GPL IMAP status overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoOpen Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Microsoft Windows MPEG Layer-3 Audio Decoder Buffer Overflow |
rev 3 |
2019-07-26 |
| suricata |
ET SCAN ICMP PING IPTools |
rev 7 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Net User Command Response |
rev 3 |
2019-07-26 |
| suricata |
ET FTP Possible FTP Daemon Username SELECT FROM SQL Injection Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap pcnfsd request UDP |
rev 10 |
2019-07-26 |
| suricata |
ET SCAN Amap TCP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
GPL SHELLCODE x86 0x71FB7BAB NOOP unicode |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE NgrBot IRC CnC Channel Join |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 5 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] DorkBot.Downloader CnC Beacon |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M1 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE MSIL/Golroted.B Keylogger FTP |
rev 1 |
2019-07-26 |
| suricata |
ET HUNTING Suspicious Percentage Symbol Usage in FTP Username |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL MISC UPnP Location overflow |
rev 14 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For a .bat File |
rev 2 |
2019-07-26 |