| suricata |
GPL NETBIOS SMB llsrconnect little endian overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL DNS zone transfer UDP |
rev 8 |
2019-07-26 |
| suricata |
ET HUNTING Suspicious Percentage Symbol Usage in FTP Username |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Win32/VB.SDB CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Backdoor.Win32.Poison.AU checkin |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS ADMIN$ unicode share access |
rev 9 |
2019-07-26 |
| suricata |
GPL TFTP GET shadow |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE NetWire Variant - Server Directory Listing Request |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrconnect unicode overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN Cisco Torch TFTP Scan |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE NetWire / Ozone / Darktrack Alien RAT - Client KeepAlive |
rev 6 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For an Executable File |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE SACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL SHELLCODE sparc NOOP |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET INFO Incoming Chromoting Session Response |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 6 |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Potential CLDAP Amplification Reflection |
rev 1 |
2019-07-26 |
| suricata |
GPL SHELLCODE sparc setuid 0 |
rev 7 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET SCAN External to Internal UPnP Request udp port 1900 |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE PandoraRat/Refroso.bsp Activity |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS C$ unicode share access |
rev 11 |
2019-07-26 |
| suricata |
ET SCAN HID VertX and Edge door controllers discover |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Juniper ScreenOS telnet Backdoor Default Password Attempt |
rev 1 |
2019-07-26 |
| suricata |
GPL SCAN superscan echo |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE ELF.MrBlack DOS.TF Variant |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE NetWire / Ozone / Darktrack Alien RAT - Server Hello |
rev 6 |
2019-07-26 |
| suricata |
GPL DNS named iquery attempt |
rev 9 |
2019-07-26 |
| suricata |
ET SCAN Potential SSH Scan OUTBOUND |
rev 7 |
2019-07-26 |
| suricata |
ET EXPLOIT bin bash base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB RemoteActivation unicode attempt |
rev 4 |
2019-07-26 |
| suricata |
ET P2P Vuze BT UDP Connection |
rev 7 |
2019-07-26 |
| suricata |
ET MALWARE Windows arp -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap rstatd request UDP |
rev 10 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoOpen Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Possible Emotet DGA NXDOMAIN Responses |
rev 1 |
2019-07-26 |