| suricata |
ET SCADA CitectSCADA ODBC Overflow Attempt |
rev 8 |
2019-07-26 |
| suricata |
ET VOIP Multiple Unauthorized SIP Responses UDP |
rev 1 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS DCERPC IrotIsRunning attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Overtoolbar.net Backdoor ICMP Checkin Request |
rev 3 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of arguments.callee % Encoding |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of String.fromCharCode %u UTF-16 Encoding |
rev 2 |
2019-07-26 |
| suricata |
GPL ICMP PING BayRS Router |
rev 7 |
2019-07-26 |
| suricata |
ET EXPLOIT CloudMe Sync Buffer Overflow |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Skeleton Key Filename in SMB2 Traffic |
rev 5 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Net User Command Response |
rev 3 |
2019-07-26 |
| suricata |
GPL EXPLOIT kadmind buffer overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
ET INFO Nslookup Command in SMB Traffic - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
ET P2P BitTorrent DHT ping request |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Skeleton Key Filename in SMB2 Traffic |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not found |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound 2 |
rev 2 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 4 |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Proxy - OWASP Zed Attack Proxy Certificate Seen |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 10 |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB OpenKey little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT NB8-01 - Unauthed RCE via bprd |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 73 |
rev 1 |
2019-07-26 |
| suricata |
GPL ATTACK_RESPONSE id check returned root |
rev 7 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Gh0st Remote Access Trojan Encrypted Session To CnC Server |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Overtoolbar.net Backdoor ICMP Checkin Response |
rev 3 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Actiontec C1000A backdoor account M2 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE MSIL.Orion Stealer Exfil via FTP |
rev 2 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Work Server Response |
rev 3 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 2 |
rev 2 |
2019-07-26 |
| suricata |
GPL SHELLCODE Linux shellcode |
rev 10 |
2019-07-26 |
| suricata |
GPL VOIP SIP 407 Proxy Authentication Required Flood |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Denisca.A CnC Beacon |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 5 |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN ICMP =XXXXXXXX Likely Precursor to Scan |
rev 3 |
2019-07-26 |