| suricata |
ET MALWARE X-Tag Zeus Mitmo user agent |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect unicode little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB CoGetInstanceFromFile unicode attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of arguments.callee % Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attacking Message |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Possible Kali Linux hostname in DHCP Request Packet |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE US-CERT TA14-353A Wiper 2 |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT php script double base64 encoded Remote Code Execution 2 |
rev 2 |
2019-07-26 |
| suricata |
ET DOS DNS Amplification Attack Possible Inbound Windows Non-Recursive Root Hint Reserved Port |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Suspicious inbound to PostgreSQL port 5432 |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Powershell Command With No Profile Argument Over SMB - Likely Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET INFO HTTP OPTIONS invalid method case outbound |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x02 |
rev 2 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 - Known Exploit Instance |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful TCP Map to External Network |
rev 2 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Getblocktemplate Protocol Server Connection |
rev 3 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For an Executable File |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Exim Internet Mailer Remote Code Execution |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Windows-Based OpenSSL Tunnel Outbound |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS D$ share access |
rev 9 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2015-7547 Long Response to A lookup |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 UTF-8 Inbound Web Servers Likely Command Execution 6 |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Microsoft RDP Client for Mac RCE |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 6 |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Phorpiex Template 4 Active - Outbound Malicious Email Spam |
rev 1 |
2019-07-26 |
| suricata |
ET INFO WMIC WMI Request Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS Session Setup NTMLSSP unicode asn1 overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
GPL VOIP SIP INVITE message flooding |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Win32/VB.SDB CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Linux/KDefend Checkin |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Protocol 41 IPv6 encapsulation potential 6in4 IPv6 tunnel active |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 1 |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Predator Pain Keylogger FTP |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2019-07-26 |
| suricata |
ET MALWARE Linux/ChinaZ DDoS Bot Checkin |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS ADMIN$ unicode share access |
rev 9 |
2019-07-26 |