Network IDS rules

Home/Network IDS rules

IDS / IPS

1,435 rules · linked to T1566 · Snort / Suricata signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. Expand a rule to view its source link.

◈

Rules

50 shown of 1,435

et-open credential-theft

ET PHISHING Successful Generic Phish (Meta HTTP-Equiv Refresh) Dec 29 2016

sid 2031574 format suricata

et-open credential-theft

ET PHISHING Successful Chase Phish M1 Aug 15 2017

sid 2031575 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish M1 Sep 15 2017

sid 2031576 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish M2 Sep 15 2017

sid 2031577 format suricata

et-open credential-theft

ET PHISHING Terse POST to Wordpress Folder - Probable Successful Phishing M7

sid 2031579 format suricata

et-open credential-theft

ET PHISHING Successful Outlook Webmail Account Phish 2015-09-02

sid 2031685 format suricata

et-open credential-theft

ET PHISHING Successful Bank of America Phish 2015-10-02

sid 2031686 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Account Phish 2015-10-16

sid 2031687 format suricata

et-open credential-theft

ET PHISHING Successful Zimbra Phish 2015-11-03

sid 2031689 format suricata

et-open credential-theft

ET PHISHING Successful Outlook Webmail Phishing 2015-11-21

sid 2031703 format suricata

et-open credential-theft

ET PHISHING Possible Successful Apple Phish 2015-07-27

sid 2031709 format suricata

et-open credential-theft

ET PHISHING Possible Successful Apple Phish 2015-07-27

sid 2031710 format suricata

et-open credential-theft

ET PHISHING Possible Successful Apple Phish 2015-07-27

sid 2031711 format suricata

et-open credential-theft

ET PHISHING Successful Generic Credential Phish - Loading Messages 2015-08-12

sid 2031719 format suricata

et-open credential-theft

ET PHISHING Successful Survey Credential Phish 2015-08-12

sid 2031720 format suricata

et-open credential-theft

ET PHISHING Successful Commonwealth Bank Phish Fake Error Page 2015-08-20

sid 2031724 format suricata

et-open credential-theft

ET PHISHING Successful Horde Webmail Phish 2015-08-21

sid 2031726 format suricata

et-open credential-theft

ET PHISHING Successful Fake Webmail Quota Phish 2015-09-10

sid 2031727 format suricata

et-open credential-theft

ET PHISHING Successful Battle.net Phish 2015-09-22

sid 2031729 format suricata

et-open credential-theft

ET PHISHING Successful Vmware/Zimbra Phish 2015-09-28

sid 2031730 format suricata

et-open credential-theft

ET PHISHING Successful Outlook Web App Phish 2015-10-15

sid 2031731 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish 2015-10-28

sid 2031732 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish 2015-10-28 3

sid 2031733 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish 2015-11-03 M3

sid 2031734 format suricata

et-open credential-theft

ET PHISHING Successful Paypal Phish 2015-11-03 M4

sid 2031735 format suricata

et-open credential-theft

ET PHISHING Successful Adobe Shared Document Phish 2015-11-14

sid 2031738 format suricata

et-open social-engineering

ET PHISHING Anonisma AES Crypto Observed in Javascript - Possible Phishing Landing 2015-12-29

sid 2031741 format suricata

et-open credential-theft

ET PHISHING Possible Successful Docusign Phish 2015-07-27

sid 2031749 format suricata

et-open credential-theft

ET PHISHING Successful Phish Fake Document Loading Error 2015-07-27

sid 2031750 format suricata

et-open credential-theft

ET PHISHING Possible Successful Google Drive Phish M1 2015-07-28

sid 2031751 format suricata

et-open credential-theft

ET PHISHING Possible Successful Google Drive Phish 2015-07-28

sid 2031752 format suricata

et-open credential-theft

ET PHISHING Possible Successful Fedex Phish 2015-07-28

sid 2031753 format suricata

et-open credential-theft

ET PHISHING Possible Successful Apple Phish 2015-07-30

sid 2031754 format suricata

et-open credential-theft

ET PHISHING Possible Successful Apple Phish 2015-07-31

sid 2031755 format suricata

et-open credential-theft

ET PHISHING Possible Successful Generic Phish 2015-07-31

sid 2031756 format suricata

et-open credential-theft

ET PHISHING Successful Email Credential Phish 2015-08-12

sid 2031758 format suricata

et-open credential-theft

ET PHISHING Successful Canada Revenue Agency Phish 2015-08-18

sid 2031759 format suricata

et-open credential-theft

ET PHISHING Successful Canada Revenue Agency Phish 2015-08-18

sid 2031760 format suricata

et-open credential-theft

ET PHISHING Successful Amazon Account Phish 2015-08-21

sid 2031762 format suricata

et-open credential-theft

ET PHISHING Successful Amazon Account Phish 2015-08-21

sid 2031763 format suricata

et-open credential-theft

ET PHISHING Successful Adobe Online Account Phish 2015-08-21

sid 2031764 format suricata

et-open credential-theft

ET PHISHING Successful BBVA Compass Account Phish 2015-08-21

sid 2031765 format suricata

et-open credential-theft

ET PHISHING Successful Carribean International Bank Account Phish 2015-08-25

sid 2031766 format suricata

et-open credential-theft

ET PHISHING Successful Adobe Phish 2015-08-31

sid 2031767 format suricata

et-open credential-theft

ET PHISHING Successful Account Update Phish 2015-09-01

sid 2031768 format suricata

et-open credential-theft

ET PHISHING Successful EDF Account Phish 2015-09-01

sid 2031769 format suricata

et-open credential-theft

ET PHISHING Successful Amazon Phish 2015-09-22

sid 2031770 format suricata

et-open credential-theft

ET PHISHING Successful Chase Phish 2015-09-24

sid 2031771 format suricata

et-open credential-theft

ET PHISHING Successful Chase Phish 2015-09-24

sid 2031772 format suricata

et-open credential-theft

ET PHISHING Successful Chase Phish 2015-09-24

sid 2031773 format suricata

Showing 451-500 of 1,435

Prev 10 Next

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin