Relative Time |
Packet |
Source |
Source Port |
Destination |
Dest Port |
Category |
Rule Set |
Signature |
Severity |
---|---|---|---|---|---|---|---|---|---|
0.0 | n/a | 172.16.3.160 | 61616 | 172.16.0.25 | 49918 | Misc activity | ET INFO | Apache ActiveMQ Instance - Vulnerable to CVE-2023-46604 - Remote Instance | 3 |
0.0 | n/a | 172.16.3.160 | 61616 | 172.16.0.25 | 49918 | Misc activity | ET INFO | Apache ActiveMQ Instance - Vulnerable to CVE-2023-46604 - Local Instance | 3 |
0.0 | 18 | 172.16.3.190 | 80 | 172.16.3.160 | 46998 | Misc activity | ET INFO | Python SimpleHTTP ServerBanner | 3 |
0.0 | 4 | 172.16.0.25 | 49918 | 172.16.3.160 | 61616 | Attempted Administrator Privilege Gain | ET EXPLOIT | Apache ActiveMQ Remote Code Execution Attempt (CVE-2023-46604) | 1 |
0.0 | 6 | 172.16.0.25 | 49918 | 172.16.3.160 | 61616 | Attempted Administrator Privilege Gain | ET EXPLOIT | Apache ActiveMQ Remote Code Execution Attempt (CVE-2023-46604) | 1 |
0.0 | 8 | 172.16.3.160 | 61616 | 172.16.0.25 | 49918 | Misc activity | ET INFO | Apache ActiveMQ Instance - Vulnerable to CVE-2023-46604 - Remote Instance | 3 |
0.0 | 8 | 172.16.3.160 | 61616 | 172.16.0.25 | 49918 | Misc activity | ET INFO | Apache ActiveMQ Instance - Vulnerable to CVE-2023-46604 - Local Instance | 3 |