[Guest Diary] Insights from August Web Traffic Surge - SANS Internet Storm Center
Tags
attack-pattern: | Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Malware - T1587.001 Malware - T1588.001 Vulnerabilities - T1588.006 |
Common Information
Type | Value |
---|---|
UUID | d6a98838-69ab-4e8c-a263-815aa669e0d2 |
Fingerprint | e531089b8316b1c5 |
Analysis status | DONE |
Considered CTI value | 2 |
Text language | |
Published | Nov. 6, 2024, midnight |
Added to db | Nov. 6, 2024, 6:23 a.m. |
Last updated | Nov. 17, 2024, 7:44 p.m. |
Headline | Internet Storm Center |
Title | [Guest Diary] Insights from August Web Traffic Surge - SANS Internet Storm Center |
Detected Hints/Tags/Attributes | 29/1/31 |
Source URLs
Redirection | Url | |
---|---|---|
Details | Source | https://isc.sans.edu/diary/rss/31408 |
URL Provider
RSS Feed
Details | Id | Enabled | Feed title | Url | Added to db |
---|---|---|---|---|---|
Details | 142 | ✔ | SANS Internet Storm Center, InfoCON: green | https://isc.sans.edu/rssfeed_full.xml | 2024-08-30 22:08 |
Attributes
Details | Type | #Events | CTI | Value |
---|---|---|---|---|
Details | CVE | 2 | cve-2024-1561 |
|
Details | CVE | 1 | cve-2024-27920 |
|
Details | CVE | 1 | cve-2008-2052 |
|
Details | Domain | 71 | sans.edu |
|
Details | Domain | 14 | www.sans.edu |
|
Details | Domain | 425 | isc.sans.edu |
|
Details | Domain | 4127 | github.com |
|
Details | Domain | 180 | readme.md |
|
Details | Domain | 571 | www.cve.org |
|
Details | Domain | 641 | nvd.nist.gov |
|
Details | Domain | 29 | www.cvedetails.com |
|
Details | Domain | 360 | attack.mitre.org |
|
Details | Domain | 268 | www.virustotal.com |
|
Details | Domain | 9 | www.abuseipdb.com |
|
Details | Domain | 58 | www.shodan.io |
|
Details | Domain | 1 | www.speedguide.net |
|
Details | File | 1 | port.php |
|
Details | Github username | 5 | bruneaug |
|
Details | IPv4 | 1 | 23.95.107.6 |
|
Details | Url | 8 | https://www.sans.edu/cyber-security-programs/bachelors-degree |
|
Details | Url | 1 | https://isc.sans.edu/myweblogs |
|
Details | Url | 1 | https://github.com/bruneaug/dshield-siem/blob/main/readme.md |
|
Details | Url | 564 | https://www.cve.org/cverecord?id=cve |
|
Details | Url | 1 | https://nvd.nist.gov/vuln/detail/cve-2024-27920 |
|
Details | Url | 1 | https://www.cvedetails.com/cve/cve-2008-2052 |
|
Details | Url | 1 | https://attack.mitre.org/tactics/ta0043 |
|
Details | Url | 1 | https://www.virustotal.com/gui/ip-address/23.95.107.6/detection |
|
Details | Url | 1 | https://www.abuseipdb.com/check/23.95.107.6 |
|
Details | Url | 1 | https://www.shodan.io/host/23.95.107.6 |
|
Details | Url | 1 | https://www.speedguide.net/port.php?port=5222 |
|
Details | Url | 1 | https://www.speedguide.net/port.php?port=5269 |