| suricata |
ET MALWARE Win32/Spy.Agent.POX Variant CnC |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT announce_peers request |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap snmpXdmi request UDP |
rev 15 |
2019-07-26 |
| suricata |
ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Linux/ChinaZ DDoS Bot Checkin 2 |
rev 1 |
2019-07-26 |
| suricata |
ET GAMES Gold VIP Club Casino Client in Use |
rev 5 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Volatile Cedar Win32.Explosive CnC Beacon 3 |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE SACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB D$ unicode share access |
rev 9 |
2019-07-26 |
| suricata |
GPL CHAT MSN outbound file transfer accept |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP asn1 overflow attempt |
rev 21 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS ADMIN$ share access |
rev 9 |
2019-07-26 |
| suricata |
ET SCAN SSH BruteForce Tool with fake PUTTY version |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE OSX/AlienSpy RAT Checkin |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap UNSET attempt UDP 111 |
rev 6 |
2019-07-26 |
| suricata |
GPL RPC portmap kcms_server request UDP |
rev 11 |
2019-07-26 |
| suricata |
ET MALWARE Linux/ShellshockCampaign.DDOSBot Reporting IP |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 12 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE SMTP Subject Line Contains C Path and EXE Possible Trojan Reporting Execution Path/Binary Name |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap espd request UDP |
rev 13 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NDdeSetTrustedShareW little endian overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Microsoft Office Visio DXF File Processing Remote Code Execution |
rev 3 |
2019-07-26 |
| suricata |
GPL RPC portmap rusers request UDP |
rev 12 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB RemoteActivation attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap sadmind request UDP |
rev 8 |
2019-07-26 |
| suricata |
ET INFO Powershell Activity Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
ET SCADA Golden FTP Server PASS Command Remote Buffer Overflow Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of document.write # Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 86 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE ZeroAccess udp traffic detected |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP find overflow attempt |
rev 8 |
2019-07-26 |
| suricata |
GPL SQL Slammer Worm propagation attempt |
rev 9 |
2019-07-26 |
| suricata |
ET P2P TOR 1.0 Inbound Circuit Traffic |
rev 5 |
2019-07-26 |
| suricata |
GPL ICMP PING Flowpoint2200 or Network Management Software |
rev 7 |
2019-07-26 |
| suricata |
GPL CHAT MSN outbound file transfer rejected |
rev 7 |
2019-07-26 |
| suricata |
ET MALWARE Skeleton Key Filename in SMB2 Traffic |
rev 2 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS IRC - NICK and 3 Letter Country Code |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE QRat.Java.RAT Post-Checkin Request |
rev 2 |
2019-07-26 |