| snort |
ET TROJAN Fake Variation of Mozilla 4.0 - Likely Trojan |
rev 8 |
2014-04-10 |
| snort |
ET SCAN IBM NSA User Agent |
rev 10 |
2014-04-09 |
| snort |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp - content |
rev 1 |
2014-04-07 |
| snort |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp |
rev 3 |
2014-04-07 |
| snort |
ET WEB_SERVER WEBSHELL K-Shell/ZHC Shell 1.0/Aspx Shell Backdoor NetCat_Listener |
rev 1 |
2014-04-07 |
| snort |
ET TROJAN Hangover Campaign Keylogger 2 checkin |
rev 2 |
2014-04-02 |
| snort |
ET CURRENT_EVENTS Hikvision DVR attempted Synology Recon Scan |
rev 1 |
2014-04-02 |
| snort |
ET CURRENT_EVENTS SofosFO/GrandSoft landing applet plus class Mar 03 2013 |
rev 3 |
2014-04-02 |
| snort |
ET TROJAN Kazy Checkin |
rev 4 |
2014-04-01 |
| snort |
ET TROJAN Backdoor.Win32.Dorkbot.AR Join IRC channel |
rev 4 |
2014-03-31 |
| snort |
ET TROJAN W32/SpeedingUpMyPC.Rootkit CnC Beacon |
rev 1 |
2014-03-28 |
| snort |
ET TROJAN W32/SpeedingUpMyPC.Rootkit Install CnC Beacon |
rev 1 |
2014-03-28 |
| snort |
ET TROJAN Bozok.RAT checkin |
rev 3 |
2014-03-27 |
| snort |
ET TROJAN Win32/Sisproc |
rev 1 |
2014-03-26 |
| snort |
ET TROJAN Known Sinkhole Response Header |
rev 2 |
2014-03-26 |
| snort |
ET SCAN NMAP SIP Version Detect OPTIONS Scan |
rev 1 |
2014-03-25 |
| snort |
ET SCAN NMAP SIP Version Detection Script Activity |
rev 1 |
2014-03-25 |
| snort |
ET TROJAN Dorkbot Loader Payload Request |
rev 3 |
2014-03-24 |
| snort |
ET MOBILE_MALWARE SMSSend Fake flappy bird APK |
rev 2 |
2014-03-24 |
| snort |
ET TROJAN W32/Hesperus.Banker Nlog.php Variant Sending Data To CnC |
rev 4 |
2014-03-24 |
| snort |
ET WEB_SERVER WEBSHELL CFM Shell Access |
rev 1 |
2014-03-18 |
| snort |
ET CHAT GaduGadu Chat Server Login OK Packet |
rev 4 |
2014-03-17 |
| snort |
ET TROJAN RDP Brute Force Bot Checkin |
rev 2 |
2014-03-12 |
| snort |
ET TROJAN W32/PointOfSales.Misc CnC Beacon |
rev 1 |
2014-03-11 |
| snort |
ET TROJAN Citadel Activity POST |
rev 4 |
2014-03-11 |
| snort |
ET TROJAN W32/PointOfSales.Misc CnC Activity |
rev 1 |
2014-03-11 |
| snort |
ET TROJAN SMSHoax Riskware checkin |
rev 1 |
2014-03-06 |
| snort |
ET TROJAN Darkshell.A Checkin XOR C0 Win XP |
rev 2 |
2014-03-06 |
| snort |
ET POLICY W32/Installiq.Adware Install Information Beacon |
rev 2 |
2014-03-06 |
| snort |
ET INFO HTTP Connection To DDNS Domain myftp.com |
rev 1 |
2014-03-05 |
| snort |
ET CURRENT_EVENTS SWF filename used in IE 2014-0322 Watering Hole Attacks |
rev 2 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain Adultdns.net |
rev 1 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain Redirectme.net |
rev 1 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain Myvnc.com |
rev 1 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain serveblog.net |
rev 1 |
2014-03-05 |
| snort |
ET POLICY InstallIQ Updater Software request |
rev 3 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain Hopto.org |
rev 1 |
2014-03-05 |
| snort |
ET INFO HTTP Connection To DDNS Domain Zapto.org |
rev 1 |
2014-03-05 |
| snort |
ET TROJAN Downloader.Win32.Geral Checkin |
rev 2 |
2014-03-04 |
| snort |
ET TROJAN W32/Qakbot.Bot Version 8 CnC Beacon |
rev 2 |
2014-03-04 |