| snort |
ET WEB_SERVER ColdFusion password.properties access |
rev 2 |
2013-05-09 |
| snort |
ET WEB_SERVER ColdFusion path disclosure to get the absolute path |
rev 3 |
2013-05-09 |
| snort |
ET EXPLOIT Exim/Dovecot Possible MAIL FROM Command Execution |
rev 2 |
2013-05-08 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 1 |
rev 2 |
2013-05-07 |
| snort |
ET EXPLOIT Metasploit mstime_malloc no-spray |
rev 2 |
2013-05-07 |
| snort |
ET EXPLOIT Metasploit js_property_spray sprayHeap |
rev 2 |
2013-05-07 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 2 |
rev 2 |
2013-05-07 |
| snort |
ET INFO Suspicious Possible CollectGarbage in base64 3 |
rev 2 |
2013-05-07 |
| snort |
ET TROJAN DEEP PANDA Checkin 1 |
rev 3 |
2013-05-04 |
| snort |
ET TROJAN Suspicious Fake Opera 10 User-Agent |
rev 3 |
2013-05-04 |
| snort |
ET TROJAN W32/Rovnix Activity |
rev 6 |
2013-05-03 |
| snort |
ET TROJAN Zeus POST Request to CnC sk1 and bn1 post parameters |
rev 4 |
2013-05-02 |
| snort |
GPL SMTP EXPN overflow attempt |
rev 9 |
2013-05-02 |
| snort |
ET TROJAN Cookies/Cookiebag Checkin |
rev 1 |
2013-05-02 |
| snort |
ET TROJAN FakeAV FakeSmoke HTTP POST check-in |
rev 8 |
2013-05-02 |
| snort |
ET INFO myobfuscate.com Encoded Script Calling home |
rev 3 |
2013-05-01 |
| snort |
ET CURRENT_EVENTS Possible Metasploit Java Payload |
rev 2 |
2013-04-29 |
| snort |
ET CURRENT_EVENTS Possible Java Applet JNLP applet_ssv_validated Click To Run Bypass |
rev 1 |
2013-04-28 |
| snort |
ET CURRENT_EVENTS Possible Metasploit Java Exploit |
rev 3 |
2013-04-28 |
| snort |
ET TROJAN Koobface C&C availability check |
rev 7 |
2013-04-25 |
| snort |
ET CURRENT_EVENTS Unknown - Java Request - gt 60char hex-ascii |
rev 6 |
2013-04-24 |
| snort |
ET POLICY Logmein.com Host List Download |
rev 8 |
2013-04-22 |
| snort |
ET TROJAN Win32/Enchanim Process List Dump |
rev 1 |
2013-04-19 |
| snort |
ET INFO Generic HTTP EXE Upload Inbound |
rev 1 |
2013-04-19 |
| snort |
ET INFO Generic HTTP EXE Upload Outbound |
rev 1 |
2013-04-19 |
| snort |
ET TROJAN Win32/Enchanim C2 Injection Download |
rev 4 |
2013-04-19 |
| snort |
ET TROJAN Win32/Enchanim Check-in Response |
rev 1 |
2013-04-19 |
| snort |
ET TROJAN OSX/Flashback.K/I reporting successful infection 2 |
rev 4 |
2013-04-18 |
| snort |
ET INFO PDF - Acrobat Enumeration - var PDFObject |
rev 1 |
2013-04-18 |
| snort |
ET INFO PDF - Acrobat Enumeration - pdfobject.js |
rev 1 |
2013-04-18 |
| snort |
ET CURRENT_EVENTS SofosFO obfuscator string 19 Dec 12 - possible landing |
rev 4 |
2013-04-17 |
| snort |
ET WEB_SERVER WebShell - PHPShell - PHPKonsole URI |
rev 1 |
2013-04-17 |
| snort |
ET POLICY Bitcoin Mining Extensions Header |
rev 3 |
2013-04-16 |
| snort |
ET WEB_SERVER WebShell - PHPShell - Haxplorer URI |
rev 1 |
2013-04-16 |
| snort |
ET WEB_SERVER WebShell - PHPShell - Comment |
rev 1 |
2013-04-16 |
| snort |
ET INFO Suspicious svchost.exe in URI - Possible Process Dump/Trojan Download |
rev 12 |
2013-04-13 |
| snort |
ET CURRENT_EVENTS Unknown_gmf EK - pdfx.html |
rev 2 |
2013-04-12 |
| snort |
ET INFO Suspicious smss.exe in URI |
rev 12 |
2013-04-10 |
| snort |
ET INFO Suspicious explorer.exe in URI |
rev 12 |
2013-04-10 |
| snort |
ET TROJAN Haxdoor Reporting User Activity 2 |
rev 7 |
2013-04-10 |