| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.railway .web .id domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.xn--72cg7bdd3bro6b3ab9c8btw4x .com domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.jo3 .org domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.2bd .net domain |
rev 1 |
2026-01-12 |
| snort |
ET ATTACK_RESPONSE 123Stealer Payload Inbound |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.baumgardner .us domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.your .my .id domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.generaloweb .com domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.jo3 .org domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.eminescusm .ro domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.baumgardner .us domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.anjumanallana .in domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.eminescusm .ro domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.anjumanallana .in domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.2bd .net domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.chem101 .com domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.edbtraining .com .au domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.chem101 .com domain |
rev 1 |
2026-01-12 |
| snort |
ET CURRENT_EVENTS GhostFrame Phish Landing Page M2 2026-01-05 |
rev 2 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.railway .web .id domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.generaloweb .com domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.xn--72cg7bdd3bro6b3ab9c8btw4x .com domain |
rev 1 |
2026-01-12 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.edbtraining .com .au domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.anjumanallana .in domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.railway .web .id domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.chem101 .com domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.your .my .id domain |
rev 1 |
2026-01-12 |
| suricata |
ET MALWARE GhostPenguin C2 Beacon Observed |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.2bd .net domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.edbtraining .com .au domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jo3 .org domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.eminescusm .ro domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.generaloweb .com domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.xn--72cg7bdd3bro6b3ab9c8btw4x .com domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.chem101 .com domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.baumgardner .us domain |
rev 1 |
2026-01-12 |
| suricata |
ET PHISHING GhostFrame Phish Landing Page M2 2026-01-05 |
rev 2 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.baumgardner .us domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.generaloweb .com domain |
rev 1 |
2026-01-12 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.2bd .net domain |
rev 1 |
2026-01-12 |