| snort |
ET WEB_SPECIFIC_APPS Horde 3.3.12 Backdoor Attempt |
rev 2 |
2012-02-21 |
| snort |
ET TROJAN W32.Duptwux/Ganelp FTP Username - onthelinux |
rev 1 |
2012-02-18 |
| snort |
ET MOBILE_MALWARE XML Style POST Of IMEI International Mobile Equipment Identity |
rev 6 |
2012-02-12 |
| snort |
ET POLICY File Being Uploaded to SendSpace File Hosting Site |
rev 1 |
2012-02-07 |
| snort |
ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server |
rev 1 |
2012-02-07 |
| snort |
ET TROJAN MSUpdater alt checkin to CnC |
rev 1 |
2012-02-07 |
| snort |
ET TROJAN MSUpdater Connectivity Check to Google |
rev 1 |
2012-02-07 |
| snort |
ET POLICY Outbound HTTP Connection From Cisco IOS Device |
rev 1 |
2012-02-07 |
| snort |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UNION SELECT SQL Injection Attempt |
rev 2 |
2012-02-06 |
| snort |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter INSERT INTO SQL Injection Attempt |
rev 2 |
2012-02-06 |
| snort |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter SELECT FROM SQL Injection Attempt |
rev 2 |
2012-02-06 |
| snort |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter DELETE FROM SQL Injection Attempt |
rev 2 |
2012-02-06 |
| snort |
GPL NETBIOS SMB-DS DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL NETBIOS SMB-DS DCERPC LSASS unicode bind attempt |
rev 8 |
2012-01-31 |
| snort |
ET TROJAN Win32.MSUpdater C&C traffic GET |
rev 1 |
2012-01-31 |
| snort |
GPL NETBIOS SMB-DS DCERPC LSASS direct bind attempt |
rev 7 |
2012-01-31 |
| snort |
GPL NETBIOS SMB DCERPC LSASS direct bind attempt |
rev 7 |
2012-01-31 |
| snort |
GPL SCAN nessus 2.x 404 probe |
rev 2 |
2012-01-31 |
| snort |
GPL NETBIOS DCERPC LSASS direct bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL NETBIOS SMB DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL MISC HP Web JetAdmin file write attempt |
rev 2 |
2012-01-31 |
| snort |
GPL NETBIOS SMB DCERPC LSASS DsRolerUpgradeDownlevelServer exploit attempt |
rev 10 |
2012-01-31 |
| snort |
GPL MISC HP Web JetAdmin setinfo access |
rev 2 |
2012-01-31 |
| snort |
GPL NETBIOS DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL MISC HP Web JetAdmin remote file upload attempt |
rev 3 |
2012-01-31 |
| snort |
GPL P2P eDonkey server response |
rev 4 |
2012-01-31 |
| snort |
ET TROJAN Win32/Cryptrun.B Connectivity check |
rev 2 |
2012-01-31 |
| snort |
GPL FTP MDTM overflow attempt |
rev 6 |
2012-01-31 |
| snort |
ET TROJAN Backdoor.Win32.Poison.AU checkin |
rev 4 |
2012-01-30 |
| snort |
ET TROJAN W32/Mentory CnC Server Providing Update Details |
rev 1 |
2012-01-28 |
| snort |
ET TROJAN W32/DelfInject.A CnC Checkin 2 |
rev 1 |
2012-01-28 |
| snort |
ET MOBILE_MALWARE Android/SndApps.SM Sending Information to CnC |
rev 1 |
2012-01-28 |
| snort |
ET TROJAN Suspicious User-Agent MyAgrent |
rev 1 |
2012-01-28 |
| snort |
ET CURRENT_EVENTS Sakura Exploit Kit Binary Load Request |
rev 1 |
2012-01-24 |
| snort |
ET CURRENT_EVENTS Sakura Exploit Kit Landing Page Request |
rev 1 |
2012-01-24 |
| snort |
ET WEB_SERVER /etc/shadow Detected in URI |
rev 7 |
2012-01-20 |
| snort |
ET SCAN Netsparker Default User-Agent |
rev 7 |
2012-01-18 |
| snort |
ET USER_AGENTS Atomic_Email_Hunter User-Agent Outbound |
rev 2 |
2012-01-18 |
| snort |
ET USER_AGENTS Atomic_Email_Hunter User-Agent Inbound |
rev 3 |
2012-01-18 |
| snort |
GPL NETBIOS DCERPC Workstation Service direct service access attempt |
rev 7 |
2012-01-16 |