Browse Rules

Search and filter across all detection sources

248 rules

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh low xml

Shellshock attack attempt

Shellshock attack attempt

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh critical xml

Shellshock attack detected

Shellshock attack detected

wazuh low xml

sshd: SSH Scanning.

sshd: SSH Scanning.

wazuh low xml

Attack against Wordpress detected.

Attack against Wordpress detected.

wazuh medium xml

sendmail: Multiple pre-greetings rejects.

sendmail: Multiple pre-greetings rejects.

wazuh informational xml

Active response: $(script) - $(type)

Active response: $(script) - $(type)

wazuh low xml

sendmail: Multiple relaying attempts of spam.

sendmail: Multiple relaying attempts of spam.

wazuh medium xml

PIX: Attack in progress detected

PIX: Attack in progress detected

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh low xml

sshd: insecure connection attempt (scan).

sshd: insecure connection attempt (scan).

wazuh medium xml

proftpd: Multiple connection attempts from same source.

proftpd: Multiple connection attempts from same source.

wazuh low xml

sendmail: Sendmail rejected due to pre-greeting.

sendmail: Sendmail rejected due to pre-greeting.

wazuh high xml

Auditd: replay attack detected

Auditd: replay attack detected

wazuh medium xml

pure-ftpd: Multiple connection attempts from same source.

pure-ftpd: Multiple connection attempts from same source.

wazuh medium xml

vsftpd: Multiple FTP connection attempts from,same source IP.

vsftpd: Multiple FTP connection attempts from,same source IP.

wazuh low xml

sshd: Reverse lookup error (bad ISP or attack).

sshd: Reverse lookup error (bad ISP or attack).

wazuh low xml

sshd: Reverse lookup error (bad ISP or attack).

sshd: Reverse lookup error (bad ISP or attack).

wazuh medium xml

sendmail: Multiple rejected e-mails from same source ip.

sendmail: Multiple rejected e-mails from same source ip.

wazuh informational xml

Host Blocked by $(script) Active Response

Host Blocked by $(script) Active Response

wazuh informational xml

Host Unblocked by $(script) Active Response

Host Unblocked by $(script) Active Response

wazuh low xml

sendmail: Rejected by access list,(55x: Requested action not taken).

sendmail: Rejected by access list,(55x: Requested action not taken).

wazuh low xml

sendmail: Sender domain is not found,(553: Requested action not taken).

sendmail: Sender domain is not found,(553: Requested action not taken).

wazuh low xml

sendmail: SMF-SAV sendmail milter unable to verify,address (REJECTED).

sendmail: SMF-SAV sendmail milter unable to verify,address (REJECTED).