| suricata |
ET EXPLOIT_KIT TDS Sutra - HTTP header redirecting to a SutraTDS |
rev 6 |
2020-04-21 |
| suricata |
ET WEB_SERVER Possible attempt to enumerate MS SQL Server version |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SERVER /bin/tsh In URI Possible Shell Command Execution Attempt |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Dosenjo/Kvadr Proxy Trojan Activity |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Pushdo Update URL Detected |
rev 11 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Meciv Checkin |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Zbot CnC GET /lost.dat |
rev 4 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Incognito Exploit Kit PDF request to images.php?t=81118 |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter DELETE FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Rogue.Win32/Winwebsec Checkin |
rev 9 |
2020-04-21 |
| suricata |
ET MALWARE BestAntivirus2011 Fake AV reporting |
rev 4 |
2020-04-21 |
| suricata |
ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE W32/Downvision.A Initial Checkin |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE W32/DelfInject.A CnC Checkin 2 |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE MSUpdater alt checkin to CnC |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS ThWboard SQL Injection Attempt -- index.php board DELETE |
rev 9 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Unkown exploit kit pdf download |
rev 2 |
2020-04-21 |
| suricata |
ET WEB_SERVER /bin/sh In URI Possible Shell Command Execution Attempt |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE Internet Protection FakeAV checkin |
rev 4 |
2020-04-21 |
| suricata |
ET INFO Http Client Body contains passwd= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Mac Flashback Checkin 1 |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE carberp check in |
rev 4 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Incognito Exploit Kit Java request to images.php?t= |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Win32.Lager Trojan Initial Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Optix Pro Trojan/Keylogger Reporting Installation via HTTP-Email Post |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Win32.Sykipot Get Config Request |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Daemonize.ft HTTP Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE SpamTool.Win32.Agent.gy/Grum/Tedroo Or Similar HTTP Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE W32/118GotYourNo Reporting to CnC |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Bzub2 Related RPC/Http Checkin |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE TrojanDownloader Win32/Harnig.gen-P Reporting |
rev 6 |
2020-04-21 |
| suricata |
ET INFO Internal Host Getting External IP Address - ip2city.asp |
rev 3 |
2020-04-21 |
| suricata |
ET INFO HTTP POST contains pass= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Generic Dropper/Clicker Checkin |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Common Downloader Install Report URL |
rev 9 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS RJ-iTop Network Vulnerabilities Scan System id INSERT INTO SQL Injection Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE OSX/Flashback.K first execution checkin |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Fake AV GET |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE Fasec/FakeAV Alert/Keylogger/Dropper/DNSChanger Possible Rootkit - HTTP GET |
rev 7 |
2020-04-21 |