| snort |
ET VOIP Modified Sipvicious Asterisk PBX User-Agent |
rev 1 |
2011-02-07 |
| snort |
ET VOIP Possible Inbound VOIP Scan/Misuse With User-Agent Zoiper |
rev 1 |
2011-02-07 |
| snort |
ET WEB_CLIENT Hex Obfuscation of eval % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of parseInt % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of eval %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of substr %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of unescape % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of substr % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET SHELLCODE Common %u0c%u0c%u0c%u0c UTF-8 Heap Spray String |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of substr %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of unescape %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET SHELLCODE Common %u0a0a%u0a0a UTF-16 Heap Spray String |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of unescape %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of eval %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET SHELLCODE Common %u0c0c%u0c0c UTF-16 Heap Spray String |
rev 1 |
2011-02-03 |
| snort |
ET SHELLCODE Common %u0a%u0a%u0a%u0a UTF-8 Heap Spray String |
rev 1 |
2011-02-03 |
| snort |
ET SHELLCODE Common %0c%0c%0c%0c Heap Spray String |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of Script Tag % Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of parseInt %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-8 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET WEB_CLIENT Hex Obfuscation of Script Tag %u UTF-16 Encoding |
rev 1 |
2011-02-03 |
| snort |
ET TROJAN x0Proto Pong |
rev 1 |
2011-01-27 |
| snort |
ET P2P BTWebClient UA uTorrent in use |
rev 2 |
2011-01-27 |
| snort |
ET ACTIVEX Oracle Document Capture File Overwrite or Buffer Overflow Attempt |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible # Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET SHELLCODE Possible Encoded %90 NOP SLED |
rev 2 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Init |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Download Cmd |
rev 1 |
2011-01-27 |
| snort |
ET SHELLCODE Possible UTF-8 %u90 NOP SLED |
rev 2 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Ping |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible %u UTF-8 Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible %u UTF-16 Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN x0Proto Client Info |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Hex Obfuscation of document.write # Encoding |
rev 1 |
2011-01-27 |
| snort |
ET WEB_CLIENT Possible % Encoded Iframe Tag |
rev 1 |
2011-01-27 |
| snort |
ET TROJAN Winsoft.E Checkin 3 |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Spy Banker Outbound Communication Attempt |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Win32/Banbra Banking Trojan Communication |
rev 2 |
2011-01-24 |
| snort |
ET TROJAN Winsoft.E Checkin 1 |
rev 2 |
2011-01-24 |