| suricata |
ET MALWARE OSX/AlienSpy RAT Checkin |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE CommentCrew Possible APT c2 communications html return 1 |
rev 3 |
2019-07-26 |
| suricata |
GPL IMAP subscribe literal overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL SCAN webtrends scanner |
rev 5 |
2019-07-26 |
| suricata |
GPL RPC STATD UDP monitor mon_name format string exploit attempt |
rev 10 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Mambo Scanning Message |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows RRAS SMB Remote Code Execution |
rev 1 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M4 |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attacking Message |
rev 2 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Initial Connection Server Response |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to MSSQL port 1433 |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 3 |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 8 |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT IPMI Cipher 0 Authentication mode set |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET VOIP Possible Modified Sipvicious OPTIONS Scan |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 2 |
2019-07-26 |
| suricata |
ET SCADA Siemens FactoryLink 8 CSService Logging Buffer Overflow Vulnerability |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of arguments.callee %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Powershell Command With NonInteractive Argument Over SMB - Likely Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Perl/Shellbot.SM IRC CnC Checkin |
rev 1 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound 3 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN LibSSH Based Frequent SSH Connections Likely BruteForce Attack |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE NCSC XAgent itwm beacon v1 |
rev 1 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT find_node request |
rev 7 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful TCP Map to External Network |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Linux |
rev 1 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x02 |
rev 2 |
2019-07-26 |
| suricata |
ET DOS DNS Amplification Attack Possible Inbound Windows Non-Recursive Root Hint Reserved Port |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap NFS request UDP |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Linux/AES.DDoS Sending Real/Fake CPU&BW Info |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Multiple FTP Root Login Attempts from Single Source - Possible Brute Force Attempt |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Machete FTP activity |
rev 2 |
2019-07-26 |
| suricata |
GPL VOIP SIP INVITE message flooding |
rev 4 |
2019-07-26 |