| snort |
ET DOS DNS Amplification Attack Inbound |
rev 8 |
2014-10-01 |
| snort |
ET MOBILE_MALWARE iOS/Xsser Checkin |
rev 1 |
2014-10-01 |
| snort |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 2 |
2014-10-01 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 Attempt Against SIP Proxy |
rev 2 |
2014-10-01 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK |
rev 4 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in HTTP Cookie |
rev 2 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in URI |
rev 3 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible bash shell piped to dev udp Inbound to WebServer |
rev 2 |
2014-09-30 |
| snort |
ET TROJAN Linux/ShellshockCampaign.DDOSBot Reporting IP |
rev 1 |
2014-09-29 |
| snort |
ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion LF |
rev 2 |
2014-09-28 |
| snort |
ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion CRLF |
rev 2 |
2014-09-28 |
| snort |
ET TROJAN BlackEnergy v2 POST Request |
rev 1 |
2014-09-26 |
| snort |
ET TROJAN BlackEnergy POST Request |
rev 1 |
2014-09-26 |
| snort |
ET ATTACK_RESPONSE Output of id command from HTTP server |
rev 1 |
2014-09-26 |
| snort |
ET TROJAN Linux/Yangji.A Checkin |
rev 1 |
2014-09-24 |
| snort |
ET TROJAN Linux/BillGates Checkin Response |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN Linux/AES.DDoS Sending Real/Fake CPU&BW Info |
rev 3 |
2014-09-22 |
| snort |
ET TROJAN Bossabot DDoS tool RFI attempt |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN Linux/BillGates Checkin |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN CommentCrew downloader without user-agent string exe download without User Agent |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN Gh0st Trojan CnC 2 |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN W32/Zeus.InfoStealer Infection Campaign Heap.exe Request |
rev 2 |
2014-09-19 |
| snort |
ET SCAN Simple Slowloris Flooder |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN Georgian Targeted Attack - Trojan Checkin |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN OneLouder EXE download possibly installing Zeus P2P |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications sleep2 |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT backdoor download logo.png |
rev 4 |
2014-09-19 |
| snort |
ET TROJAN W32/Tobfy.Ransomware CnC Request - status.php |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN W32/Zeus.InfoStealer Infection Campaign Wav.exe Request |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications get command client key |
rev 5 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications get system |
rev 4 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications sleep |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT backdoor stage 2 download base64 update.gif |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN W32/Tobfy.Ransomware Invalid URI CnC Request |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications download client.png |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN Zeus.Downloader Campaign Unknown Initial CnC Beacon |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN Trojan Downloader GetBooks UA |
rev 7 |
2014-09-19 |
| snort |
ET WEB_SERVER Joomla Component SQLi Attempt |
rev 2 |
2014-09-19 |
| snort |
ET TROJAN Zbot UA |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications sleep5 |
rev 3 |
2014-09-19 |