| suricata |
ET DOS DNS Amplification Attack Possible Inbound Windows Non-Recursive Root Hint Reserved Port |
rev 2 |
2019-07-26 |
| suricata |
ET VOIP INVITE Message Flood UDP |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Cisco Smart Install Exploitation Tool - GetConfig |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
GPL VOIP SIP INVITE message flooding |
rev 4 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
ET GAMES Guild Wars connection |
rev 5 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Firefox Plugin Parameter EnsureCachedAttrParamArrays Remote Code Execution Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive |
rev 2 |
2019-07-26 |
| suricata |
ET HUNTING SUSPICIOUS IRC - NICK and Win |
rev 4 |
2019-07-26 |
| suricata |
ET SCAN ICMP @hello request Likely Precursor to Scan |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET INFO HTTP OPTIONS invalid method case outbound |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap cmsd request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of charCodeAt %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
GPL DNS zone transfer UDP |
rev 8 |
2019-07-26 |
| suricata |
ET INFO HSRP Active Router Changed |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE P2P Zeus or ZeroAccess Request To CnC |
rev 9 |
2019-07-26 |
| suricata |
ET MALWARE Linux/KDefend Checkin |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Predator Pain Keylogger FTP |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT ping request |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE X-Tag Zeus Mitmo user agent |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT CVE-2016-1287 Public Exploit ShellCode |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Win32/VB.SDB CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE W32/Dinwod.Dropper Win32/Xtrat.B CnC Beacon |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
ET INFO SMB2 NT Create AndX Request For a DLL File - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE SC-KeyLog Keylogger Installed - Sending Log Email Report |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN ICMP PING IPTools |
rev 7 |
2019-07-26 |
| suricata |
ET SCAN sipscan probe |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap mountd request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET SCAN Amap TCP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE x0Proto Pong |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Sisproc |
rev 3 |
2019-07-26 |
| suricata |
GPL RPC portmap SET attempt UDP 111 |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE MSIL/Golroted.B Keylogger FTP |
rev 1 |
2019-07-26 |