| suricata |
GPL RPC mountd UDP mount path overflow attempt |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE PWS Win32/Lmir.BMQ checkin |
rev 3 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT get_peers request |
rev 5 |
2019-07-26 |
| suricata |
ET COINMINER CoinMiner Malicious Authline Seen After CVE-2017-10271 Exploit |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic plain Inbound Web Servers Likely Command Execution 11 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to mySQL port 3306 |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrconnect overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN Enumiax Inter-Asterisk Exchange Protocol Username Scan |
rev 3 |
2019-07-26 |
| suricata |
GPL RPC portmap mountd request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For a .bat File |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NDdeSetTrustedShareW overflow attempt |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NDdeSetTrustedShareW unicode overflow attempt |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET ACTIVEX Microsoft Internet Explorer Tabular DataURL ActiveX Control Memory Corruption Attempt |
rev 8 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB RemoteActivation little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE W32/DoubleTap.APT Downloader Socks5 Setup Request |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT DynoRoot DHCP - Client Command Injection |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN StarDotStar HELO, suspected AUTH LOGIN botnet |
rev 3 |
2019-07-26 |
| suricata |
GPL ICMP PING Flowpoint2200 or Network Management Software |
rev 7 |
2019-07-26 |
| suricata |
ET MALWARE UBoatRAT CnC Check-in |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2018-4407 - Apple ICMP DoS PoC |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS InitiateSystemShutdown unicode little endian attempt |
rev 10 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NDdeSetTrustedShareW overflow attempt |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Spy.Agent.POX Variant CnC |
rev 2 |
2019-07-26 |
| suricata |
GPL FTP SITE CPWD overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
GPL TFTP GET passwd |
rev 5 |
2019-07-26 |
| suricata |
ET INFO PTUNNEL OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE x0Proto Client Info |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Gimmiv Infection Ping Outbound |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Optix Pro Trojan/Keylogger Reporting Installation via Email |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 1 |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SERVER Perl/Mambo.WebShell Spreader IRC Scanning Message |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE FakeM RAT CnC Beacon |
rev 5 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of document.write %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET INFO SMB2 NT Create AndX Request For a Powershell .ps1 File |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to Oracle SQL port 1521 |
rev 3 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Microsoft Office Visio DXF File Processing Remote Code Execution |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN Behavioral Unusual Port 135 traffic Potential Scan or Infection |
rev 15 |
2019-07-26 |