| suricata |
ET INFO Office Document Containing AutoOpen Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded ASCII Inbound Web Servers Likely Command Execution 4 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET SCAN Behavioral Unusual Port 1434 traffic Potential Scan or Infection |
rev 15 |
2019-07-26 |
| suricata |
GPL SHELLCODE Digital UNIX NOOP |
rev 7 |
2019-07-26 |
| suricata |
ET MALWARE Possible Linux/Moose Telnet CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
GPL ICMP PING BeOS4.x |
rev 8 |
2019-07-26 |
| suricata |
GPL RPC portmap admind request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Work Server Response |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Potential SSH Scan |
rev 20 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS IrotIsRunning attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Denisca.A CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M5 |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP auth overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
GPL EXPLOIT kadmind buffer overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE AtomLogger Exfil via FTP |
rev 2 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT find_node request |
rev 7 |
2019-07-26 |
| suricata |
GPL SHELLCODE x86 0x71FB7BAB NOOP |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-0777 Client Sent Roaming Resume Request |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Py/MechaFlounder CnC Activity - Reporting Download Command Error |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Bulta CnC Beacon |
rev 2 |
2019-07-26 |
| suricata |
ET P2P Vuze BT Connection |
rev 5 |
2019-07-26 |
| suricata |
GPL SCAN ISS Pinger |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE SEASALT Client Checkin |
rev 2 |
2019-07-26 |
| suricata |
ET DOS MC-SQLR Response Inbound Possible DDoS Target |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-0777 Server Advertises Suspicious Roaming Support |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Club World Casino Client in Use |
rev 4 |
2019-07-26 |
| suricata |
ET SCAN Sivus VOIP Vulnerability Scanner SIP Components Scan |
rev 3 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 7 |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Windows nbtstat -s Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Smap VOIP Device Scan |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Google Talk TLS Client Traffic |
rev 4 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET P2P MS WUDO Peer Sync |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 72 |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC tooltalk UDP overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
ET VOIP REGISTER Message Flood TCP |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |