| snort |
ET CURRENT_EVENTS Successful Apple Phish 2016-03-09 |
rev 2 |
2017-05-08 |
| snort |
ET ACTIVEX winhlp32 ActiveX control attack - phase 3 |
rev 13 |
2017-05-08 |
| snort |
ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery cat_id parameter SQL Injection |
rev 5 |
2017-05-08 |
| snort |
ET TROJAN Known Hostile Domain ilo.brenz .pl Lookup |
rev 4 |
2017-05-08 |
| snort |
ET WEB_SPECIFIC_APPS DevelopItEasy Photo Gallery photo_id parameter SQL Injection |
rev 5 |
2017-05-08 |
| snort |
ET TROJAN Known Hostile Domain ant.trenz .pl Lookup |
rev 1 |
2017-05-08 |
| snort |
ET ACTIVEX winhlp32 ActiveX control attack - phase 1 |
rev 15 |
2017-05-08 |
| snort |
ET TROJAN MSIL/NewHT Ransomware CnC Checkin |
rev 1 |
2017-05-05 |
| snort |
ET TROJAN SuperCMD CnC Beacon |
rev 2 |
2017-05-04 |
| snort |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound 2 |
rev 2 |
2017-05-02 |
| snort |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound |
rev 3 |
2017-05-02 |
| snort |
ET EXPLOIT Possible CVE-2016-1287 Invalid Fragment Size Inbound 3 |
rev 2 |
2017-05-02 |
| snort |
ET WEB_SERVER Jorgee Scan |
rev 2 |
2017-05-01 |
| snort |
ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability |
rev 12 |
2017-04-28 |
| snort |
ET TROJAN Cobalt Strike Malleable C2 Amazon Profile |
rev 1 |
2017-04-28 |
| snort |
ET WEB_SERVER Tilde in URI - potential .pl source disclosure vulnerability |
rev 11 |
2017-04-28 |
| snort |
ET WEB_SERVER Tilde in URI - potential .conf source disclosure vulnerability |
rev 11 |
2017-04-28 |
| snort |
ET WEB_SERVER Tilde in URI - potential .asp source disclosure vulnerability |
rev 11 |
2017-04-28 |
| snort |
ET WEB_SERVER Tilde in URI - potential .cgi source disclosure vulnerability |
rev 5 |
2017-04-28 |
| snort |
ET WEB_SERVER Tilde in URI - potential .aspx source disclosure vulnerability |
rev 11 |
2017-04-28 |
| snort |
ET MOBILE_MALWARE Android.KorBanker Fake Banking App Install CnC Beacon |
rev 2 |
2017-04-27 |
| snort |
ET TROJAN ARM Binary Downloaded via WGET Containing Suspicious Netcat Command - Possible IoT Malware |
rev 1 |
2017-04-25 |
| snort |
ET CURRENT_EVENTS Successful OWA Phish Apr 25 2017 |
rev 1 |
2017-04-25 |
| snort |
ET TROJAN ARM Binary Downloaded via WGET Containing GoAhead and Multiple Camera RCE 0Day Vulnerabilities |
rev 1 |
2017-04-25 |
| snort |
ET POLICY Radmin Remote Control Session Authentication Initiate |
rev 5 |
2017-04-21 |
| snort |
ET INFO SMTP PDF Attachment Flowbit Set |
rev 2 |
2017-04-21 |
| snort |
ET POLICY Radmin Remote Control Session Authentication Response |
rev 6 |
2017-04-21 |
| snort |
ET EXPLOIT BlueCoat CAS v1.3.7.1 Report Email Command Injection attempt |
rev 1 |
2017-04-21 |
| snort |
ET CURRENT_EVENTS Known Malicious Expires Header Seen In Malicious JavaScript Downloader Campaign |
rev 1 |
2017-04-20 |
| snort |
ET INFO Lets Encrypt Free SSL Cert Observed with IDN/Punycode Domain - Possible Phishing |
rev 1 |
2017-04-19 |
| snort |
ET WEB_CLIENT Office UA FB SET |
rev 2 |
2017-04-19 |
| snort |
ET CURRENT_EVENTS Successful iCloud Phish 2015-12-02 |
rev 2 |
2017-04-19 |
| snort |
ET WEB_CLIENT Office Discovery HTA file Likely CVE-2017-0199 Request M2 |
rev 2 |
2017-04-19 |
| snort |
ET TROJAN MSIL/Runsome Ransomware CnC Checkin |
rev 1 |
2017-04-19 |
| snort |
ET EXPLOIT Possible EXPLODINGCAN IIS5.0/6.0 Exploit Attempt |
rev 1 |
2017-04-18 |
| snort |
ET TROJAN Possible Malicious Gzip PowerShell over HTTP |
rev 1 |
2017-04-18 |
| snort |
ET EXPLOIT Possible Successful ETERNALROMANCE MS17-010 - Windows Executable Observed |
rev 2 |
2017-04-17 |
| snort |
ET EXPLOIT Possible ETERNALROMANCE MS17-010 |
rev 2 |
2017-04-17 |
| snort |
ET EXPLOIT Possible ETERNALCHAMPION MS17-010 Sync Response |
rev 3 |
2017-04-17 |
| snort |
ET EXPLOIT Possible ECLIPSEDWING MS08-067 |
rev 2 |
2017-04-17 |