| snort |
ET CURRENT_EVENTS StyX Landing Page |
rev 5 |
2013-01-22 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based header |
rev 2 |
2013-01-22 |
| snort |
ET ACTIVEX Possible Samsung Kies ActiveX PrepareSync method Buffer overflow |
rev 2 |
2013-01-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_ztautolink controller parameter Local File Inclusion Attempt |
rev 2 |
2013-01-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_bit controller parameter Local File Inclusion Attempt |
rev 2 |
2013-01-18 |
| snort |
ET WEB_SPECIFIC_APPS Cartweaver 3 Local File Inclusion Attempt |
rev 1 |
2013-01-18 |
| snort |
ET TROJAN Possible Red October proxy CnC 2 |
rev 1 |
2013-01-17 |
| snort |
ET TROJAN Possible Red October proxy CnC 1 |
rev 2 |
2013-01-17 |
| snort |
ET TROJAN Possible Red October proxy CnC 3 |
rev 1 |
2013-01-17 |
| snort |
ET SCAN GET with HTML tag in start of URI seen with PHPMyAdmin scanning |
rev 1 |
2013-01-16 |
| snort |
ET TROJAN W32/Iyus.H Initial CnC Beacon |
rev 2 |
2013-01-15 |
| snort |
ET TROJAN W32/Zemra.DDoS.Bot Variant CnC Beacon |
rev 1 |
2013-01-15 |
| snort |
ET TROJAN W32/Iyus.H work_troy.php CnC Request |
rev 2 |
2013-01-15 |
| snort |
ET TROJAN W32/Downloader Secondary Download Request - W32/Hupigon.Backdoor Likely Secondary Payload |
rev 2 |
2013-01-15 |
| snort |
ET MOBILE_MALWARE Android/CoolPaperLeak Sending Information To CnC |
rev 1 |
2013-01-15 |
| snort |
ET ACTIVEX Possible Honeywell Tema Remote Installer ActiveX DownloadFromURL method Remote Code Execution |
rev 2 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser tinybrowser.php file Script Execution Attempt |
rev 2 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser upload.php file Script Execution Attempt |
rev 1 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS Free Blog Arbitrary File Deletion Attempt |
rev 2 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser edit.php file Script Execution Attempt |
rev 1 |
2013-01-12 |
| snort |
ET SNMP missing community string attempt 1 |
rev 2 |
2013-01-10 |
| snort |
ET SNMP missing community string attempt 4 |
rev 2 |
2013-01-10 |
| snort |
ET SNMP missing community string attempt 2 |
rev 2 |
2013-01-10 |
| snort |
ET WEB_SERVER WebShell - JSP RAT |
rev 2 |
2013-01-09 |
| snort |
ET WEB_SERVER ColdFusion adminapi access |
rev 3 |
2013-01-09 |
| snort |
ET TROJAN FakeAV security_scanner.exe |
rev 1 |
2013-01-09 |
| snort |
ET WEB_SERVER WebShell - JSP File Admin - POST Structure - dir |
rev 2 |
2013-01-09 |
| snort |
ET WEB_SERVER ColdFusion administrator access |
rev 3 |
2013-01-09 |
| snort |
ET WEB_SERVER ColdFusion componentutils access |
rev 4 |
2013-01-09 |
| snort |
ET TROJAN ProxyBox - HTTP CnC - proxy_info.php |
rev 1 |
2013-01-08 |
| snort |
ET TROJAN Generic -POST To file.php w/Extended ASCII Characters |
rev 7 |
2013-01-08 |
| snort |
ET WEB_SPECIFIC_APPS Simple Machines Forum ssi_function parameter path disclosure vulnerability |
rev 1 |
2013-01-05 |
| snort |
ET ACTIVEX Possible Sony PC Companion Load method Stack-based Unicode Buffer Overload SEH |
rev 2 |
2013-01-05 |
| snort |
ET ACTIVEX Possible Sony PC Companion CheckCompatibility method Stack-based Unicode Buffer Overload |
rev 2 |
2013-01-05 |
| snort |
ET ACTIVEX Possible Sony PC Companion Admin_RemoveDirectory Stack-based Unicode Buffer Overload SEH |
rev 2 |
2013-01-05 |
| snort |
ET WEB_SPECIFIC_APPS Wordpress Google Doc Embedder plugin file parameter Local File Inclusion Attempt |
rev 1 |
2013-01-05 |
| snort |
ET CURRENT_EVENTS Injected iframe leading to Redkit Jan 02 2013 |
rev 2 |
2013-01-03 |
| snort |
ET INFO PTUNNEL INBOUND |
rev 3 |
2013-01-03 |
| snort |
ET TROJAN Request for fake postal receipt from e-mail link |
rev 1 |
2013-01-03 |
| snort |
ET INFO PTUNNEL OUTBOUND |
rev 2 |
2013-01-03 |