Browse Rules

Search and filter across all detection sources

65 rules

sagan medium other

[BIND] Version attempt

[BIND] Version attempt
sagan medium other

[BIND] DNS update denied

[BIND] DNS update denied
sagan medium other

[SENDMAIL] EXPN command - rejected

[SENDMAIL] EXPN command - rejected
sagan medium other

[SENDMAIL] VRFY command - rejected

[SENDMAIL] VRFY command - rejected
sagan medium other

[SNORT] Attempted Information Leak

[SNORT] Attempted Information Leak
sagan medium other

[ZSCALER] FOCA User-Agent

[ZSCALER] FOCA User-Agent
sagan medium other

[BIND] Denied zone transfer attempt

[BIND] Denied zone transfer attempt
sagan medium other

[SENDMAIL] EXPN command - [not rejected]

[SENDMAIL] EXPN command - [not rejected]
sagan medium other

[SENDMAIL] VRFY command - [not rejected]

[SENDMAIL] VRFY command - [not rejected]
sagan medium other

[WEB-ATTACKS] DotDotPwn User-Agent

[WEB-ATTACKS] DotDotPwn User-Agent
sagan medium other

[WEB-ATTACKS] Hydra User-Agent

[WEB-ATTACKS] Hydra User-Agent
sagan medium other

[WEB-ATTACKS] Medusa User-Agent

[WEB-ATTACKS] Medusa User-Agent
sagan medium other

[WEB-ATTACKS] Nessus User Agent

[WEB-ATTACKS] Nessus User Agent
sagan medium other

[WEB-ATTACKS] w3af User Agent

[WEB-ATTACKS] w3af User Agent
sagan medium other

[APACHE] PHPinfo access attempt [0/5]

[APACHE] PHPinfo access attempt [0/5]
sagan medium other

[BIND] Refused notify from non-master

[BIND] Refused notify from non-master
sagan medium other

[SENDMAIL] VRFY or EXPN root attempt

[SENDMAIL] VRFY or EXPN root attempt
sagan medium other

[SONICWALL] Wan Failover - Possible recon attempt

[SONICWALL] Wan Failover - Possible recon attempt
sagan medium other

[WEB-ATTACKS] Hmap Webserver Fingerprint Scan

[WEB-ATTACKS] Hmap Webserver Fingerprint Scan
sagan medium other

[WEB-ATTACKS] Netsparker Default User-Agent

[WEB-ATTACKS] Netsparker Default User-Agent
sagan medium other

[WEB-ATTACKS] OpenVAS User-Agent Inbound

[WEB-ATTACKS] OpenVAS User-Agent Inbound
sagan medium other

[WEB-ATTACKS] Paros Proxy Scanner Detected

[WEB-ATTACKS] Paros Proxy Scanner Detected
sagan medium other

[WEB-ATTACKS] Possible jBroFuzz Fuzzer Detected

[WEB-ATTACKS] Possible jBroFuzz Fuzzer Detected
sagan medium other

[WEB-ATTACKS] Sqlmap SQL Injection Scan

[WEB-ATTACKS] Sqlmap SQL Injection Scan
sagan medium other

[WEB-ATTACKS] Vega Web Application Scan

[WEB-ATTACKS] Vega Web Application Scan