| snort |
ET WEB_SPECIFIC_APPS WordPress Huge IT Image Gallery 1.0.0 SQL Injection |
rev 1 |
2014-09-09 |
| snort |
ET TROJAN Win32/Poweliks GET Request |
rev 2 |
2014-09-09 |
| snort |
ET WEB_SPECIFIC_APPS Possible WP CuckooTap Arbitrary File Download |
rev 1 |
2014-09-08 |
| snort |
ET SCAN Potential VNC Scan 5800-5820 |
rev 5 |
2014-09-06 |
| snort |
ET TROJAN W32/Bravix.Dropper CnC Beacon |
rev 1 |
2014-09-05 |
| snort |
ET TROJAN Backdoor.Win32/Dervec.gen Connectivity Check to Google |
rev 9 |
2014-09-05 |
| snort |
ET TROJAN W32/Bapy.Downloader PE Download Request |
rev 1 |
2014-09-05 |
| snort |
ET WEB_CLIENT Malicious iframe guessing router password 2 |
rev 1 |
2014-09-04 |
| snort |
ET WEB_CLIENT Malicious iframe guessing router password 1 |
rev 1 |
2014-09-04 |
| snort |
ET TROJAN W32/Threebyte.APT Checkin |
rev 1 |
2014-09-04 |
| snort |
ET DOS Possible SSDP Amplification Scan in Progress |
rev 1 |
2014-09-03 |
| snort |
ET POLICY Radmin Remote Control Session Setup Initiate OUTBOUND |
rev 2 |
2014-09-02 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys access attempt |
rev 3 |
2014-09-01 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi access attempt |
rev 4 |
2014-09-01 |
| snort |
ET CURRENT_EVENTS Possible Archie/Metasploit SilverLight Exploit |
rev 2 |
2014-08-30 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful upload |
rev 2 |
2014-08-30 |
| snort |
ET TROJAN Syrian Malware Checkin |
rev 1 |
2014-08-29 |
| snort |
ET WEB_SERVER /bin/bash In URI, Possible Shell Command Execution Attempt Within Web Exploit |
rev 9 |
2014-08-28 |
| snort |
ET TROJAN Windows set Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-28 |
| snort |
ET WEB_SERVER Automated Site Scanning for backupdata |
rev 4 |
2014-08-28 |
| snort |
ET TROJAN Windows arp -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-28 |
| snort |
ET WEB_SERVER Automated Site Scanning for backup_data |
rev 3 |
2014-08-28 |
| snort |
ET SCAN SQLNinja MSSQL Version Scan |
rev 4 |
2014-08-27 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Windows ipconfig Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET DNS Reply Sinkhole - 106.187.96.49 blacklistthisdomain.com |
rev 6 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Windows net start Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET TROJAN Windows systeminfo Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Dyreza RAT Ex-filtrating Data |
rev 5 |
2014-08-26 |
| snort |
ET TROJAN Dyreza RAT Fake Server Header |
rev 2 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Win32/Spy.Tuscas |
rev 1 |
2014-08-25 |
| snort |
ET TROJAN Machete FTP activity |
rev 1 |
2014-08-22 |
| snort |
ET TROJAN ZeroLocker Activity |
rev 2 |
2014-08-22 |
| snort |
ET TROJAN Secure-Soft.Stealer Checkin |
rev 2 |
2014-08-22 |
| snort |
ET TROJAN Win32/Nubjub.A HTTP Check-in |
rev 7 |
2014-08-22 |
| snort |
ET TROJAN Hoic.zip retrieval |
rev 2 |
2014-08-21 |
| snort |
ET DOS HOIC with booster inbound |
rev 1 |
2014-08-21 |