| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter UNION SELECT SQL Injection Attempt |
rev 2 |
2010-09-29 |
| snort |
ET TROJAN Knock.php Shiz or Rohimafo CnC Server Contact URL |
rev 2 |
2010-09-29 |
| snort |
ET TROJAN Shiz or Rohimafo Reporting Listening Socket to CnC Server |
rev 2 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter UPDATE SET SQL Injection Attempt |
rev 3 |
2010-09-29 |
| snort |
ET TROJAN Trojan.Win32.Cosmu.xet CnC Beacon |
rev 2 |
2010-09-29 |
| snort |
ET SCAN Nikto Scan Remote File Include Retrieval |
rev 2 |
2010-09-29 |
| snort |
ET SCAN w3af Scan Remote File Include Retrieval |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS Joomla NoticeBoard Component controller Parameter Local File Inclusion Attempt |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter INSERT INTO SQL Injection Attempt |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter SELECT FROM SQL Injection Attempt |
rev 2 |
2010-09-29 |
| snort |
ET WORM Win32.Socks.s HTTP Post Checkin |
rev 6 |
2010-09-29 |
| snort |
ET WEB_CLIENT phoenix exploit kit - admin login page detected |
rev 2 |
2010-09-28 |
| snort |
ET TROJAN Stuxnet index.php |
rev 2 |
2010-09-28 |
| snort |
ET WEB_SERVER Local Website Infected By Gootkit |
rev 2 |
2010-09-28 |
| snort |
ET WEB_SERVER Gootkit Website Infection Receiving FTP Credentials from Control Server |
rev 2 |
2010-09-28 |
| snort |
ET TROJAN FakeAV Win32/Antivirus2008 CnC Beacon |
rev 5 |
2010-09-26 |
| snort |
ET WEB_CLIENT VLC Media Player smb URI Handling Remote Buffer Overflow Attempt |
rev 4 |
2010-09-25 |
| snort |
ET WEB_CLIENT VLC Media Player .ass File Buffer Overflow Attempt |
rev 4 |
2010-09-25 |
| snort |
ET SCAN crimscanner User-Agent detected |
rev 6 |
2010-09-23 |
| snort |
ET POLICY POSSIBLE Web Crawl using Curl |
rev 8 |
2010-09-22 |
| snort |
ET SCAN Sivus VOIP Vulnerability Scanner SIP Scan |
rev 6 |
2010-09-21 |
| snort |
ET SNMP Attempted UDP Access Attempt to Cisco IOS 12.1 Hidden Read/Write Community String cable-docsis |
rev 4 |
2010-09-21 |
| snort |
ET SCAN Sipvicious Scan |
rev 6 |
2010-09-21 |
| snort |
ET SCAN Possible WafWoof Web Application Firewall Detection Scan |
rev 4 |
2010-09-21 |
| snort |
ET SCAN Possible DavTest WebDav Vulnerability Scanner Initial Check Detected |
rev 4 |
2010-09-21 |
| snort |
ET SCAN Stompy Web Application Session Scan |
rev 4 |
2010-09-21 |
| snort |
ET POLICY Outbound Multiple Non-SMTP Server Emails |
rev 12 |
2010-09-21 |
| snort |
ET SCAN Wikto Backend Data Miner Scan |
rev 7 |
2010-09-21 |
| snort |
ET POLICY External Unencrypted Connection to BASE Console |
rev 3 |
2010-09-21 |
| snort |
ET SCAN Wikto Scan |
rev 6 |
2010-09-21 |
| snort |
ET SCAN w3af Scan In Progress ARGENTINA Req Method |
rev 6 |
2010-09-21 |
| snort |
ET SCAN SIP erase_registrations/add registrations attempt |
rev 5 |
2010-09-21 |
| snort |
ET POLICY Inbound Frequent Emails - Possible Spambot Inbound |
rev 10 |
2010-09-21 |
| snort |
ET SCAN Wapiti Web Server Vulnerability Scan |
rev 8 |
2010-09-21 |
| snort |
ET POLICY AOL Webmail Message Send |
rev 8 |
2010-09-21 |
| snort |
ET SCAN WSFuzzer Web Application Fuzzing |
rev 7 |
2010-09-21 |
| snort |
ET SCAN Sipsak SIP scan |
rev 4 |
2010-09-21 |
| snort |
ET POLICY External Unencrypted Connection To Aanval Console |
rev 3 |
2010-09-21 |
| snort |
ET SCAN Smap VOIP Device Scan |
rev 7 |
2010-09-21 |
| snort |
ET ATTACK_RESPONSE Weak Netbios Lanman Auth Challenge Detected |
rev 10 |
2010-09-20 |