| suricata |
ET WEB_SPECIFIC_APPS AWStats Totals sort parameter Remote Code Execution Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Simple Machines Forum ssi_function parameter path disclosure vulnerability |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SERVER PIWIK Backdoored Version calls home |
rev 5 |
2020-04-22 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - .com.tw/check_version.php |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT RedKit - Potential Payload Requested - /2Digit.html |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Unknown Java Exploit Kit 32-32 byte hex initial landing |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE Shylock Module Data POST |
rev 5 |
2020-04-22 |
| suricata |
ET WEB_SERVER ColdFusion adminapi access |
rev 5 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Sakura exploit kit exploit download request /nano.php |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Wordpress Plugin Is-human type Parameter Remote Code Execution Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Oficla Downloader Activity Observed |
rev 8 |
2020-04-22 |
| suricata |
ET WEB_SERVER Brutus Scan Inbound |
rev 4 |
2020-04-22 |
| suricata |
ET MOBILE_MALWARE Android/Updtkiller Sending Device Information |
rev 3 |
2020-04-22 |
| suricata |
ET INFO poclbm BitCoin miner |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Trojan.Win32.Jorik.Totem.vg HTTP request |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - JSP File Admin - POST Structure - dir |
rev 4 |
2020-04-22 |
| suricata |
ET INFO GNU/Linux YUM User-Agent Outbound likely related to package management |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE W32/Downloader.FakeFlashPlayer Status.Php CnC Beacon |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Simploo CMS x parameter Remote PHP Code Execution Attempt |
rev 5 |
2020-04-22 |
| suricata |
ET MOBILE_MALWARE Suspected PROJECTSPY Cookie |
rev 2 |
2020-04-22 |
| suricata |
ET MALWARE Win32.Hupigon.dkwt Related Checkin |
rev 10 |
2020-04-22 |
| suricata |
ET MALWARE Avzhan DDoS Bot User-Agent MyIE |
rev 8 |
2020-04-22 |
| suricata |
ET WEB_SERVER SQL Injection BULK INSERT in URI to Insert File Content into Database Table |
rev 6 |
2020-04-22 |
| suricata |
ET WEB_SERVER ColdFusion administrator access |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE Mac Flashback Checkin 2 |
rev 7 |
2020-04-22 |
| suricata |
ET HUNTING Suspicious NULL DNS Request |
rev 1 |
2020-04-22 |
| suricata |
ET MALWARE Request for fake postal receipt from e-mail link |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Likely TDS redirecting to exploit kit |
rev 5 |
2020-04-22 |
| suricata |
ET MALWARE WORM_VOBFUS Checkin 1 |
rev 9 |
2020-04-22 |
| suricata |
ET MALWARE Potentially Unwanted Program RebateInformerSetup.exe Download Reporting |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet Auth Bypass Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT CritXPack PDF Request |
rev 12 |
2020-04-22 |
| suricata |
ET MALWARE Gamania Trojan Check-in |
rev 10 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - PostMan |
rev 8 |
2020-04-22 |
| suricata |
ET MALWARE FakeAvCn-A Checkin 3 |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Request to Wordpress W3TC Plug-in dbcache Directory |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE Densmail.com Related Trojan Checkin |
rev 6 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure w/multipart |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT CritXPack - No Java URI - Dot.class |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_CLIENT Possible Malvertising FlashPost - POST to *.stats |
rev 4 |
2020-04-22 |