IDS / IPS
Network IDS rules
6,731 rules · Snort / Suricata signatures
Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.
◈
Rules
50 shown of 6,731
et-open
domain-c2
ET MALWARE Likely Malicious SSL Cert With Script Tags
et-open
domain-c2
ET MALWARE Malicious SSL certificate detected (Possible Sinkhole)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (Bancos Variant CnC)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (CoreBot C2)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (Coin-Hive In Browser Mining)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (Ursnif Inject Domain)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (ServHelper CnC)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (APT29)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (StrongPity Domain)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (StrongPity Domain)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (StrongPity Domain)
et-open
domain-c2
ET MALWARE Observed Malicious SSL Cert (StrongPity Domain)
Showing 1-50 of 6,731