| snort |
ET INFO Python BaseHTTP ServerBanner |
rev 4 |
2026-04-14 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.cadit .com .au domain |
rev 1 |
2026-04-14 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.cadit .com .au domain |
rev 1 |
2026-04-14 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.cadit .com .au domain |
rev 1 |
2026-04-14 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.cadit .com .au domain |
rev 1 |
2026-04-14 |
| suricata |
ET INFO Python BaseHTTP ServerBanner |
rev 4 |
2026-04-14 |
| sigma |
Registry Tampering by Potentially Suspicious Processes |
experimental |
2026-04-14 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.albacetediario .com domain |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.shredsurf .com domain |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.albacetediario .com domain |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.shredsurf .com domain |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.mrlewburger .com domain |
rev 1 |
2026-04-13 |
| snort |
ET TROJAN CripStealer Data Exfiltration Attempt |
rev 1 |
2026-04-13 |
| snort |
ET TROJAN XorBee RAT CNC Checkin M1 |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.mrlewburger .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shredsurf .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mrlewburger .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.albacetediario .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.shredsurf .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET MALWARE XorBee RAT CNC Checkin M1 |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.mrlewburger .com domain |
rev 1 |
2026-04-13 |
| suricata |
ET MALWARE CripStealer Data Exfiltration Attempt |
rev 1 |
2026-04-13 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.albacetediario .com domain |
rev 1 |
2026-04-13 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.dehme .com domain |
rev 1 |
2026-04-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.dehme .com domain |
rev 1 |
2026-04-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.dehme .com domain |
rev 1 |
2026-04-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.dehme .com domain |
rev 1 |
2026-04-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.truecircle .com domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.tzhang .net domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.truecircle .com domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.runbsd .io domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.tzhang .net domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.runbsd .io domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.runbsd .io domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.tzhang .net domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.truecircle .com domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.truecircle .com domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.tzhang .net domain |
rev 1 |
2026-04-10 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.runbsd .io domain |
rev 1 |
2026-04-10 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.maverickden .com domain |
rev 1 |
2026-04-09 |