| snort |
ET WEB_SERVER Possible XXE SYSTEM ENTITY in POST BODY. |
rev 1 |
2014-02-03 |
| snort |
ET TROJAN SolarBot Plugin Download Server Response |
rev 4 |
2014-01-31 |
| snort |
ET TROJAN W32/Neverquest.InfoStealer Configuration Request CnC Beacon |
rev 1 |
2014-01-31 |
| snort |
ET TROJAN Jadtree Downloader rar |
rev 1 |
2014-01-30 |
| snort |
ET TROJAN SolarBot Plugin Download WalletSteal |
rev 1 |
2014-01-30 |
| snort |
ET WEB_CLIENT CookieBomb 2.0 In Server Response Jan 29 2014 |
rev 3 |
2014-01-30 |
| snort |
ET TROJAN SolarBot Plugin Download ComputerInfo |
rev 1 |
2014-01-30 |
| snort |
ET TROJAN SolarBot Plugin Download MessageBox |
rev 1 |
2014-01-30 |
| snort |
ET TROJAN Limitless Logger Sending Data over SMTP 2 |
rev 2 |
2014-01-28 |
| snort |
ET TROJAN W32/LockscreenBEI.Scareware Cnc Beacon |
rev 1 |
2014-01-28 |
| snort |
ET TROJAN LDPinch SMTP Password Report |
rev 6 |
2014-01-28 |
| snort |
ET TROJAN Win32/Xtrat C2 Response |
rev 2 |
2014-01-28 |
| snort |
ET MOBILE_MALWARE Android/HeHe.Spy GetTaskRequest CnC Beacon |
rev 2 |
2014-01-22 |
| snort |
ET TROJAN Cybergate/Rebhip/Spyrat Backdoor Keepalive Response |
rev 6 |
2014-01-21 |
| snort |
ET TROJAN ICEFOG JAVAFOG JAR checkin |
rev 3 |
2014-01-17 |
| snort |
ET TROJAN PWS.Win32/Daceluw.A Checkin |
rev 2 |
2014-01-15 |
| snort |
ET INFO Suspicious Possible Process Dump in POST body |
rev 3 |
2014-01-15 |
| snort |
ET DOS Likely NTP DDoS In Progress MON_LIST Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2014-01-14 |
| snort |
ET TROJAN Kishop.A checkin |
rev 1 |
2014-01-14 |
| snort |
ET POLICY Bitcoin Mining Server Stratum Protocol HTTP Header |
rev 1 |
2014-01-12 |
| snort |
ET WEB_SERVER ATTACKER WebShell - PHP Offender - Title |
rev 2 |
2014-01-11 |
| snort |
ET WEB_SERVER ATTACKER WebShell - PHP Offender - POST Command |
rev 1 |
2014-01-11 |
| snort |
ET TROJAN LDPinch Checkin Post |
rev 1 |
2014-01-10 |
| snort |
ET SCAN FOCA uri |
rev 2 |
2014-01-10 |
| snort |
ET USER_AGENTS FOCA User-Agent |
rev 3 |
2014-01-10 |
| snort |
ET TROJAN Fake/Short Google Search Appliance UA Win32/Ranbyus and Others |
rev 1 |
2014-01-08 |
| snort |
ET POLICY check.torproject.org IP lookup/Tor Usage check over TLS with SNI |
rev 2 |
2014-01-04 |
| snort |
ET TROJAN Trojan Generic - POST To gate.php with no referer |
rev 8 |
2014-01-04 |
| snort |
ET POLICY bridges.torproject.org over TLS with SNI |
rev 2 |
2014-01-04 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed MON_LIST Requests IMPL 0x02 |
rev 2 |
2014-01-03 |
| snort |
ET DOS Possible NTP DDoS Multiple MON_LIST Seq 0 Response Spanning Multiple Packets IMPL 0x03 |
rev 2 |
2014-01-03 |
| snort |
ET DOS Possible NTP DDoS Multiple MON_LIST Seq 0 Response Spanning Multiple Packets IMPL 0x02 |
rev 2 |
2014-01-03 |
| snort |
ET INFO suspicious - gzipped file via JAVA - could be pack200-ed JAR |
rev 2 |
2013-12-31 |
| snort |
ET INFO suspicious - uncompressed pack200-ed JAR |
rev 2 |
2013-12-31 |
| snort |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 3 |
rev 3 |
2013-12-24 |
| snort |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 2 |
rev 3 |
2013-12-24 |
| snort |
ET EXPLOIT Metasploit Plugin-Detect Posting Data 1 |
rev 3 |
2013-12-24 |
| snort |
ET POLICY Autoit Windows Automation tool User-Agent in HTTP Request - Possibly Hostile |
rev 6 |
2013-12-24 |
| snort |
ET TROJAN W32/GMUnpacker.Downloader Download Instructions Response From CnC |
rev 1 |
2013-12-20 |
| snort |
ET CURRENT_EVENTS CritXPack Jar Request |
rev 10 |
2013-12-19 |