| snort |
ET TROJAN JST Perl IrcBot download |
rev 1 |
2014-10-27 |
| snort |
ET POLICY Possible IP Check api.ipify.org |
rev 1 |
2014-10-27 |
| snort |
ET TROJAN DarkComet-RAT init connection |
rev 4 |
2014-10-24 |
| snort |
ET CURRENT_EVENTS Nuclear EK Gate Injected iframe Oct 22 2014 |
rev 1 |
2014-10-23 |
| snort |
ET TROJAN W32/24x7Help.ScareWare CnC Beacon |
rev 2 |
2014-10-23 |
| snort |
ET TROJAN vSkimmer.PoS Checkin |
rev 4 |
2014-10-23 |
| snort |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful TCP Map to External Network |
rev 2 |
2014-10-22 |
| snort |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful UDP Map to External Network |
rev 2 |
2014-10-22 |
| snort |
ET WEB_SERVER MongoDB Negated Parameter Server Side JavaScript Injection Attempt |
rev 1 |
2014-10-17 |
| snort |
ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M4 |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M5 |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M3 |
rev 1 |
2014-10-15 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DNS |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M6 |
rev 1 |
2014-10-15 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS PPT Download with Embedded OLE Object |
rev 5 |
2014-10-15 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 malicious DNS response |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M2 |
rev 1 |
2014-10-15 |
| snort |
ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt Client Body |
rev 4 |
2014-10-14 |
| snort |
ET TROJAN Trojan.Win32.Buzus Checkin |
rev 4 |
2014-10-10 |
| snort |
ET TROJAN Neverquest Request URI Struct |
rev 2 |
2014-10-10 |
| snort |
ET CURRENT_EVENTS DRIVEBY Sednit EK IE Exploit CVE-2013-1347 M1 |
rev 1 |
2014-10-09 |
| snort |
ET CURRENT_EVENTS DRIVEBY Sednit EK IE Exploit CVE-2014-1776 M1 |
rev 2 |
2014-10-09 |
| snort |
ET TROJAN Win32/Ursnif Connectivity Check |
rev 2 |
2014-10-09 |
| snort |
ET TROJAN Gozi/Ursnif/Papras Connectivity Check |
rev 3 |
2014-10-09 |
| snort |
ET POLICY 2Downloadz.com File Sharing User-Agent |
rev 1 |
2014-10-08 |
| snort |
ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt URI |
rev 1 |
2014-10-08 |
| snort |
ET INFO Generic CollectGarbage in Hex |
rev 4 |
2014-10-08 |
| snort |
ET TROJAN W32.Virut.A joining an IRC Channel |
rev 7 |
2014-10-07 |
| snort |
ET INFO HTTP Request to a *.tc domain |
rev 3 |
2014-10-06 |
| snort |
ET TROJAN Reply Sinkhole - irc-sinkhole.cert.pl |
rev 1 |
2014-10-06 |
| snort |
ET TROJAN Dirt Jumper/Russkill3 Checkin |
rev 9 |
2014-10-03 |
| snort |
ET EXPLOIT Possible Pure-FTPd CVE-2014-6271 attempt |
rev 1 |
2014-10-02 |
| snort |
ET CURRENT_EVENTS DRIVEBY Generic URLENCODED CollectGarbage |
rev 3 |
2014-10-02 |
| snort |
ET SMTP Possible ComputerCop Log Transmitted via SMTP |
rev 1 |
2014-10-02 |
| snort |
ET MOBILE_MALWARE iOS/Xsser Checkin |
rev 1 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in URI |
rev 3 |
2014-10-01 |
| snort |
ET DOS DNS Amplification Attack Inbound |
rev 8 |
2014-10-01 |
| snort |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 2 |
2014-10-01 |
| snort |
ET EXPLOIT Possible Qmail CVE-2014-6271 Mail From attempt |
rev 2 |
2014-10-01 |