| snort |
ET TROJAN ZhCAT.HackTool Operation Cleaver HTTP CnC Beacon |
rev 3 |
2014-12-17 |
| snort |
ET MOBILE_MALWARE CoolReaper CnC Beacon 2 |
rev 1 |
2014-12-17 |
| snort |
ET TROJAN W32/TRCrypt.ULPM Downloader CnC Beacon |
rev 1 |
2014-12-16 |
| snort |
ET WEB_SERVER MorXploit Shell Command |
rev 1 |
2014-12-16 |
| snort |
ET TROJAN Trojan.Agent.AIXD Checkin |
rev 2 |
2014-12-16 |
| snort |
ET TROJAN Infostealer.Bancos Sending Stolen info SMTP |
rev 1 |
2014-12-15 |
| snort |
ET TROJAN Trojan/Win32.Espy Report via SMTP |
rev 1 |
2014-12-13 |
| snort |
ET TROJAN Probable Keylogger Report SMTP |
rev 2 |
2014-12-13 |
| snort |
ET TROJAN HawkEye Keylogger Report SMTP |
rev 1 |
2014-12-13 |
| snort |
ET TROJAN Trojan.SpamBanker Report via SMTP |
rev 1 |
2014-12-13 |
| snort |
ET EXPLOIT Possible GoldenPac Priv Esc in-use |
rev 2 |
2014-12-12 |
| snort |
ET POLICY HTTP Request to WebDAV CloudMe Service |
rev 2 |
2014-12-11 |
| snort |
ET TROJAN W32/Fin4.InfoStealer Uploading User Credentials CnC Beacon |
rev 3 |
2014-12-11 |
| snort |
ET TROJAN Cloud Atlas CnC Beacon |
rev 1 |
2014-12-11 |
| snort |
ET TROJAN VirRansom/VirLock Checkin Response |
rev 1 |
2014-12-10 |
| snort |
ET TROJAN VirRansom/VirLock Checkin |
rev 1 |
2014-12-10 |
| snort |
ET WEB_SERVER Insomnia Shell HTTP Request |
rev 1 |
2014-12-09 |
| snort |
ET WEB_SERVER Insomnia Shell Outbound CMD Banner |
rev 1 |
2014-12-09 |
| snort |
ET TROJAN Backdoor.Linux.Turla Download |
rev 2 |
2014-12-09 |
| snort |
ET TROJAN AlienSpy RAT Checkin Set |
rev 2 |
2014-12-05 |
| snort |
ET SMTP Spamcop.net Block Message |
rev 2 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x02 |
rev 3 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET POLICY HTTP OPTIONS invalid method case outbound |
rev 2 |
2014-12-05 |
| snort |
ET EXPLOIT Zollard PHP Exploit Telnet Inbound |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x02 |
rev 4 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely GoodBye 5.2 DDoS tool |
rev 2 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress MON_LIST Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET TROJAN Linux/ShellshockCampaign.DDOSBot Terminate Process CnC Server Message |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress Multiple UNSETTRAP Mode 6 Responses |
rev 4 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely AnonGhost DDoS tool |
rev 2 |
2014-12-05 |
| snort |
ET DOS HTTP GET AAAAAAAA Likely FireFlood |
rev 2 |
2014-12-05 |
| snort |
ET POLICY Bitmessage Activity |
rev 2 |
2014-12-05 |
| snort |
ET SMTP Sorbs.net Block Message |
rev 2 |
2014-12-05 |
| snort |
ET ATTACK_RESPONSE Possible IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval RAKP message 2 status code Unauthorized Name |
rev 2 |
2014-12-05 |
| snort |
ET TROJAN W32/DoubleTap.APT Downloader CnC Beacon |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x03 |
rev 4 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely AnonMafiaIC DDoS tool |
rev 2 |
2014-12-05 |