| snort |
ET ATTACK_RESPONSE Backdoor reDuh http tunnel |
rev 6 |
2012-03-13 |
| snort |
ET WEB_SERVER /bin/csh In URI Possible Shell Command Execution Attempt |
rev 6 |
2012-03-13 |
| snort |
GPL WEB_SERVER Tomcat server snoop access |
rev 12 |
2012-03-13 |
| snort |
ET FTP Suspicious Percentage Symbol Usage in FTP Username |
rev 2 |
2012-03-12 |
| snort |
ET CURRENT_EVENTS Likely Scalaxy Exploit Kit URL template download |
rev 2 |
2012-03-10 |
| snort |
ET POLICY MS Remote Desktop Administrator Login Request |
rev 5 |
2012-03-10 |
| snort |
ET TROJAN W32/Coced.PasswordStealer User-Agent 5.0 |
rev 1 |
2012-03-09 |
| snort |
ET TROJAN SMTP Subject Line Contains C Path and EXE Possible Trojan Reporting Execution Path/Binary Name |
rev 2 |
2012-03-09 |
| snort |
ET SCAN Port Unreachable Response to Xprobe2 OS Fingerprint Scan |
rev 6 |
2012-03-08 |
| snort |
ET TROJAN Trojan.Win32.Genome.aetqe Checkin |
rev 2 |
2012-03-07 |
| snort |
ET POLICY Coral Web Proxy/Content Distribution Net Use |
rev 2 |
2012-03-07 |
| snort |
ET WEB_SPECIFIC_APPS Fork-CMS js.php module parameter Local File Inclusion Attempt |
rev 2 |
2012-03-06 |
| snort |
ET ACTIVEX ASUS Net4Switch ActiveX CxDbgPrint Format String Function Call Attempt |
rev 2 |
2012-03-06 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_bch controller Local File Inclusion Attempt |
rev 2 |
2012-03-06 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_boss controller Local File Inclusion Attempt |
rev 2 |
2012-03-06 |
| snort |
ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow |
rev 3 |
2012-03-06 |
| snort |
ET TROJAN W32/Koobface Variant Checkin Attempt |
rev 1 |
2012-03-05 |
| snort |
ET TROJAN W32/Backdoor.BlackMonay Checkin |
rev 2 |
2012-03-05 |
| snort |
ET TROJAN W32/TCYWin.Downloader User-Agent |
rev 1 |
2012-03-05 |
| snort |
ET CURRENT_EVENTS DRIVEBY Java Atomic Exploit Downloaded |
rev 4 |
2012-03-01 |
| snort |
ET WEB_SERVER eval/base64_decode Exploit Attempt Inbound |
rev 2 |
2012-03-01 |
| snort |
ET CURRENT_EVENTS DRIVEBY Java Rhino Scripting Engine Exploit Downloaded |
rev 3 |
2012-02-29 |
| snort |
ET TROJAN Backdoor.Win32.PEx.942728546 Checkin |
rev 1 |
2012-02-29 |
| snort |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter UNION SELECT SQL Injection Attempt |
rev 2 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS Horde 3.3.12 Backdoor Attempt |
rev 2 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter INSERT INTO SQL Injection Attempt |
rev 2 |
2012-02-21 |
| snort |
ET POLICY Http Client Body contains passwd= in cleartext |
rev 2 |
2012-02-21 |
| snort |
ET POLICY Http Client Body contains pword= in cleartext |
rev 2 |
2012-02-21 |
| snort |
ET POLICY HTTP POST contains pass= in cleartext |
rev 2 |
2012-02-21 |
| snort |
ET TROJAN Query for Known Hostile *test.3322.org.cn Domain |
rev 1 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter DELETE FROM SQL Injection Attempt |
rev 2 |
2012-02-21 |
| snort |
ET POLICY Http Client Body contains passphrase= in cleartext |
rev 2 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter UPDATE SET SQL Injection Attempt |
rev 2 |
2012-02-21 |
| snort |
ET POLICY Http Client Body contains pwd= in cleartext |
rev 2 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_visa controller Local File Inclusion Attempt |
rev 2 |
2012-02-21 |
| snort |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter SELECT FROM SQL Injection Attempt |
rev 2 |
2012-02-21 |
| snort |
ET TROJAN W32.Duptwux/Ganelp FTP Username - onthelinux |
rev 1 |
2012-02-18 |
| snort |
ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity |
rev 6 |
2012-02-12 |
| snort |
ET POLICY Outbound HTTP Connection From Cisco IOS Device |
rev 1 |
2012-02-07 |
| snort |
ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server |
rev 1 |
2012-02-07 |