| snort |
ET TROJAN Optix Pro Trojan/Keylogger Reporting Installation via Email |
rev 5 |
2013-08-19 |
| snort |
ET SHELLCODE Possible UTF-16 u9090 NOP SLED |
rev 3 |
2013-08-19 |
| snort |
ET TROJAN W32/Spy.KeyLogger.OCI CnC Checkin |
rev 1 |
2013-08-19 |
| snort |
ET TROJAN DarkComet-RAT server join acknowledgement |
rev 3 |
2013-08-19 |
| snort |
ET TROJAN ATTACKER IRCBot - net add PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - net localgroup - PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - netsh - PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - PRIVMSG Response - ipconfig command output |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - reg - PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - PRIVMSG Response - Directory Listing |
rev 3 |
2013-08-16 |
| snort |
ET WEB_SERVER Possible Attempt to Get SQL Server Version in URI using SELECT VERSION |
rev 5 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - net user - PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - PRIVMSG Response - net command output |
rev 5 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - The command completed successfully - PRIVMSG Response |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - ipconfig - PRIVMSG Command |
rev 4 |
2013-08-16 |
| snort |
ET TROJAN ATTACKER IRCBot - PRIVMSG Response - Directory Listing *nix |
rev 5 |
2013-08-16 |
| snort |
ET POLICY Pirate Browser Download |
rev 1 |
2013-08-15 |
| snort |
ET INFO SUSPICIOUS Reassigned Eval Function 2 |
rev 2 |
2013-08-15 |
| snort |
ET INFO SUSPICIOUS Reassigned Eval Function 3 |
rev 2 |
2013-08-15 |
| snort |
ET TROJAN SUSPICIOUS IRC - NICK and -PC |
rev 4 |
2013-08-14 |
| snort |
ET WEB_SERVER Joomla Upload File Filter Bypass |
rev 1 |
2013-08-14 |
| snort |
ET TROJAN Sinowal/sinonet/mebroot/Torpig infected host checkin |
rev 9 |
2013-08-14 |
| snort |
ET TROJAN SUSPICIOUS IRC - NICK and Win |
rev 4 |
2013-08-14 |
| snort |
ET INFO SUSPICIOUS IRC - NICK and 3 Letter Country Code |
rev 6 |
2013-08-14 |
| snort |
ET TROJAN Possible FortDisco Reporting Hacked Accounts |
rev 3 |
2013-08-12 |
| snort |
ET ATTACK_RESPONSE python shell spawn attempt |
rev 2 |
2013-08-12 |
| snort |
ET TROJAN FortDisco Reporting Status |
rev 2 |
2013-08-12 |
| snort |
ET CURRENT_EVENTS Possible FortDisco Wordpress Brute-force Site list download 10+ wp-login.php |
rev 2 |
2013-08-12 |
| snort |
ET INFO Adobe PKG Download Flowbit Set |
rev 2 |
2013-08-07 |
| snort |
ET WEB_SERVER - EXE File Uploaded - Hex Encoded |
rev 1 |
2013-08-07 |
| snort |
ET WEB_SERVER Possible Apache Struts OGNL in Dynamic Action |
rev 3 |
2013-08-07 |
| snort |
ET WEB_SERVER Possible OpenX Backdoor Backdoor Access POST to flowplayer |
rev 2 |
2013-08-07 |
| snort |
ET TROJAN Win32.Rovnix.I Checkin |
rev 1 |
2013-08-06 |
| snort |
ET TROJAN W32/StealRat.SpamBot Email Template Request |
rev 1 |
2013-08-05 |
| snort |
ET TROJAN Comfoo Checkin |
rev 2 |
2013-08-01 |
| snort |
ET WEB_SERVER WebShell Generic - ASP File Uploaded |
rev 10 |
2013-07-31 |
| snort |
ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdImport Method Access Buffer Overflow 2 |
rev 3 |
2013-07-26 |
| snort |
ET ACTIVEX Possible NET-i viewer ActiveX Control ConnectDDNS Method Access Code Execution Vulnerability |
rev 5 |
2013-07-26 |
| snort |
ET ACTIVEX Potential ThreeDify Designer ActiveX Control cmdOpen Method Access Buffer Overflow 2 |
rev 3 |
2013-07-26 |
| snort |
ET ACTIVEX Possible SonicWALL SSL-VPN End-Point Interrogator/Installer ActiveX Control Install3rdPartyComponent Method Buffer Overflow |
rev 3 |
2013-07-26 |