| suricata |
ET P2P Vuze BT UDP Connection |
rev 7 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap network-status-monitor request UDP |
rev 7 |
2019-07-26 |
| suricata |
ET SCAN Possible DavTest WebDav Vulnerability Scanner Initial Check Detected |
rev 4 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS IRC - NICK and -PC |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Banker.Delf Infection variant 4 - Sending Initial Email to Owner |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Cisco Smart Install Exploitation Tool - Update Ios and Execute |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap bootparam request UDP |
rev 14 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE SuperCMD CnC Beacon |
rev 2 |
2019-07-26 |
| suricata |
ET MOBILE_MALWARE Android/Code4hk.A Checkin |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB InitiateSystemShutdown unicode little endian attempt |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Enchanim C2 Injection Download |
rev 5 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Write Request |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB D$ unicode share access |
rev 9 |
2019-07-26 |
| suricata |
GPL CHAT MSN outbound file transfer accept |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Weak Netbios Lanman Auth Challenge Detected |
rev 8 |
2019-07-26 |
| suricata |
GPL RPC portmap cachefsd request UDP |
rev 12 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 5 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Linux/Venom CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN External to Internal UPnP Request udp port 1900 |
rev 4 |
2019-07-26 |
| suricata |
ET SCADA SEIG Modbus 3.4 - Remote Code Execution |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE PandoraRat/Refroso.bsp Activity |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap rstatd request UDP |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE Windows WMIC NETLOGIN get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT nodes reply |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Linux.DDoS Checkin |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Cisco IKEv1 Information Disclosure Vulnerability CVE-2016-6415 |
rev 1 |
2019-07-26 |
| suricata |
GPL ICMP PING *NIX |
rev 8 |
2019-07-26 |
| suricata |
ET EXPLOIT HID VertX and Edge door controllers command_blink_on Remote Command Execution |
rev 2 |
2019-07-26 |
| suricata |
GPL DNS zone transfer UDP |
rev 8 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of charCodeAt %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap cmsd request UDP |
rev 9 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET FTP Possible FTP Daemon Username SELECT FROM SQL Injection Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] DorkBot.Downloader CnC Response |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound |
rev 3 |
2019-07-26 |
| suricata |
GPL RPC portmap ypserv request UDP |
rev 13 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Ramnit Checkin |
rev 5 |
2019-07-26 |