| suricata |
GPL IMAP delete overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile unicode attempt |
rev 4 |
2019-07-26 |
| suricata |
ET WEB_CLIENT RealPlayer FLV Parsing Integer Overflow Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL SCAN PING Sniffer Pro/NetXRay network scan |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN HTExploit Method |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoOpen Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attacking Message |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN DCERPC rpcmgmt ifids Unauthenticated BIND |
rev 3 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE LaZagne Artifact Outbound in FTP |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET SCADA CitectSCADA ODBC Overflow Attempt |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 70 |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT php script base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN ICMP PING IPTools |
rev 7 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of charCodeAt %u UTF-16 Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded ASCII Inbound Web Servers Likely Command Execution 4 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Behavioral Unusual Port 137 traffic Potential Scan or Infection |
rev 15 |
2019-07-26 |
| suricata |
ET FTP Possible FTP Daemon Username UPDATE SET SQL Injection Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE NetWire / Ozone / Darktrack Alien RAT - Client KeepAlive |
rev 6 |
2019-07-26 |
| suricata |
ET SCAN Voiper Fuzzing Scan |
rev 3 |
2019-07-26 |
| suricata |
GPL ICMP PING Network Toolbox 3 Windows |
rev 8 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrconnect unicode overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET P2P Kazaa over UDP |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE SC-KeyLog Keylogger Installed - Sending Log Email Report |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB IrotIsRunning unicode attempt |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN Amap TCP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE x0Proto Pong |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP status overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x03 |
rev 3 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2019-07-26 |
| suricata |
ET VOIP INVITE Message Flood UDP |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Cisco Smart Install Exploitation Tool - GetConfig |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of String.fromCharCode % Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET ACTIVEX SoftCab Sound Converter ActiveX SaveFormat File overwrite Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL DNS zone transfer UDP |
rev 8 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Microsoft Windows MPEG Layer-3 Audio Decoder Buffer Overflow |
rev 3 |
2019-07-26 |