| suricata |
GPL RPC portmap yppasswd request UDP |
rev 9 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect unicode overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Executable contained in DICOM Medical Image SMB File Transfer |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Port Unreachable Response to Xprobe2 OS Fingerprint Scan |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Mashigoom/Tranwos/RevProxy ClickFraud - hello |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET P2P eMule KAD Network Server Status Request |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE x0Proto Client Info |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS InitiateSystemShutdown unicode little endian attempt |
rev 10 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Multiple MON_LIST Seq 0 Response Spanning Multiple Packets IMPL 0x02 |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Adobe Reader and Acrobat U3D File Invalid Array Index Remote Code Execution Attempt |
rev 6 |
2019-07-26 |
| suricata |
ET EXPLOIT ETERNALBLUE Exploit M2 MS17-010 |
rev 2 |
2019-07-26 |
| suricata |
ET SCADA SEIG SYSTEM 9 - Remote Code Execution |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Malicious NAT-PMP Response to External Network |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Backdoor.Win32.VB.brg C&C Checkin |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN Behavioral Unusual Port 135 traffic Potential Scan or Infection |
rev 15 |
2019-07-26 |
| suricata |
ET MALWARE W32/Bakcorox.A ProxyBot CnC Server Connection |
rev 2 |
2019-07-26 |
| suricata |
ET VOIP Modified Sipvicious Asterisk PBX User-Agent |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Cisco Smart Install Exploitation Tool - ChangeConfig |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE LuminosityLink - Data Channel Server Response |
rev 1 |
2019-07-26 |
| suricata |
GPL RPC portmap nisd request UDP |
rev 10 |
2019-07-26 |
| suricata |
ET MALWARE MAGICHOUND.LEASH IRC CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Suspected ExtraPulsar Backdoor |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS RemoteActivation attempt |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT bin bash base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
GPL TFTP GET passwd |
rev 5 |
2019-07-26 |
| suricata |
GPL TFTP GET Admin.dll |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Carbanak APT CnC Beacon 2 |
rev 1 |
2019-07-26 |
| suricata |
GPL ICMP PING Microsoft Windows |
rev 8 |
2019-07-26 |
| suricata |
GPL IMAP unsubscribe literal overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL SHELLCODE sparc NOOP |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE DoS.Linux/Elknot.E Checkin |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrpc create tree attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Gimmiv Infection Ping Outbound |
rev 3 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attack Done Message |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to Oracle SQL port 1521 |
rev 3 |
2019-07-26 |
| suricata |
ET SCAN Amap UDP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows nbtstat -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-07-26 |