| suricata |
GPL IMAP find overflow attempt |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Java/QRat Checkin |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Py/MechaFlounder CnC Activity - Reporting Download Command Success |
rev 1 |
2019-07-26 |
| suricata |
GPL SQL Slammer Worm propagation attempt |
rev 9 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 8 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE SuperCMD CnC Beacon |
rev 2 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Cisco TclShell TFTP Download |
rev 2 |
2019-07-26 |
| suricata |
GPL ICMP PING WhatsupGold Windows |
rev 6 |
2019-07-26 |
| suricata |
GPL RPC portmap kcms_server request UDP |
rev 11 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap cachefsd request UDP |
rev 12 |
2019-07-26 |
| suricata |
ET MALWARE Linux/Venom CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Linux/ChinaZ 2.0 DDoS Bot Checkin 3 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
GPL DNS named version attempt |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 3 |
rev 8 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible MySQL CVE-2016-6662 Attempt |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Possible Powershell .ps1 Script Use Over SMB |
rev 2 |
2019-07-26 |
| suricata |
GPL SCAN ISS Pinger |
rev 4 |
2019-07-26 |
| suricata |
ET DOS MC-SQLR Response Inbound Possible DDoS Target |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE W32/Mentory CnC Server Providing Update Details |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Conficker.b Shellcode |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 69 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Gh0st Remote Access Trojan Encrypted Session To CnC Server |
rev 5 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 1 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS DCERPC CoGetInstanceFromFile overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET SCAN ICMP =XXXXXXXX Likely Precursor to Scan |
rev 3 |
2019-07-26 |
| suricata |
ET SCAN Potential SSH Scan |
rev 20 |
2019-07-26 |
| suricata |
ET SCAN NMAP SIP Version Detection Script Activity |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Rapid POP3 Connections - Possible Brute Force Attack |
rev 7 |
2019-07-26 |
| suricata |
GPL VOIP SIP 407 Proxy Authentication Required Flood |
rev 4 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Output of id command from HTTP server |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Hawkeye Keylogger SMTP Beacon |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Bitmessage Activity |
rev 2 |
2019-07-26 |
| suricata |
GPL SHELLCODE x86 0x71FB7BAB NOOP |
rev 3 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Data Transfer with Cisco config |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-0777 Server Advertises Suspicious Roaming Support |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Linux/AES.DDoS Sending Real/Fake CPU&BW Info |
rev 3 |
2019-07-26 |