| snort |
ET TROJAN IXWARE Stealer Domain in DNS Lookup |
rev 2 |
2020-05-04 |
| suricata |
ET WEB_SERVER Casper Bot Search RFI Scan |
rev 8 |
2020-05-04 |
| suricata |
ET SCAN Pavuk User Agent Detected - Website Mirroring Tool for Off-line Analysis |
rev 5 |
2020-05-04 |
| suricata |
ET WEB_SERVER DD-WRT Information Disclosure Attempt |
rev 6 |
2020-05-04 |
| suricata |
ET WEB_SERVER PHP Scan Precursor |
rev 5 |
2020-05-04 |
| suricata |
ET SCAN Possible WafWoof Web Application Firewall Detection Scan |
rev 5 |
2020-05-04 |
| suricata |
ET SCAN Default Mysqloit User Agent Detected - Mysql Injection Takover Tool |
rev 5 |
2020-05-04 |
| suricata |
ET SCAN w3af Scan Remote File Include Retrieval |
rev 6 |
2020-05-04 |
| suricata |
ET SCAN crimscanner User-Agent detected |
rev 6 |
2020-05-04 |
| suricata |
ET WEB_SPECIFIC_APPS Possible WP CuckooTap Arbitrary File Download |
rev 3 |
2020-05-04 |
| suricata |
ET WEB_SERVER /bin/bash In URI, Possible Shell Command Execution Attempt Within Web Exploit |
rev 7 |
2020-05-04 |
| suricata |
ET WEB_SERVER PHP Large Subnormal Double Precision Floating Point Number PHP DoS in URI |
rev 4 |
2020-05-04 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET EXPLOIT Possible Saltstack Authentication Bypass CVE-2020-11651 M1 |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET MOBILE_MALWARE PHANTOMLANCE CnC Domain in DNS Lookup |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Stolen Credentials Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Generic Stolen Credentials Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Cpanel Cracker Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET MOBILE_MALWARE PHANTOMLANCE CnC Domain in DNS Lookup |
rev 2 |
2020-05-01 |
| snort |
ET MOBILE_MALWARE PHANTOMLANCE CnC Domain in DNS Lookup |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET EXPLOIT Possible SaltStack Authentication Bypass CVE-2020-11651 M2 |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_CLIENT Generic Stolen Credentials Accessed on External Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Cpanel Cracker Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Stolen Credentials Accessed on Internal Server |
rev 2 |
2020-05-01 |
| suricata |
ET EXPLOIT Possible Saltstack Authentication Bypass CVE-2020-11651 M1 |
rev 1 |
2020-05-01 |
| suricata |
ET WEB_CLIENT Generic Stolen Credentials Accessed on External Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-05-01 |
| suricata |
ET MALWARE OSX/Flashback.K/I reporting successful infection 2 |
rev 5 |
2020-05-01 |
| suricata |
ET SCAN Internet Scanning Project HTTP scan |
rev 3 |
2020-05-01 |
| suricata |
ET WEB_CLIENT Generic Stolen Credentials Accessed on External Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_SERVER Generic Stolen Credentials Accessed on Internal Server |
rev 2 |
2020-05-01 |