| snort |
ET INFO DYNAMIC_DNS Query to a *.airwise .cl domain |
rev 1 |
2025-03-29 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.airwise .cl domain |
rev 1 |
2025-03-29 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.davidandjacquelinebarbee .com domain |
rev 1 |
2025-03-29 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.airwise .cl domain |
rev 1 |
2025-03-29 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.davidandjacquelinebarbee .com domain |
rev 1 |
2025-03-29 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.airwise .cl domain |
rev 1 |
2025-03-29 |
| snort |
ET EXPLOIT [CORELIGHT] - CVE-2025-27218 Sitecore unsafe deserialization attempt |
rev 2 |
2025-03-28 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.mexicommerce .com domain |
rev 1 |
2025-03-28 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.mexicommerce .com domain |
rev 1 |
2025-03-28 |
| suricata |
ET EXPLOIT [CORELIGHT] - CVE-2025-27218 Sitecore unsafe deserialization attempt |
rev 2 |
2025-03-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.mexicommerce .com domain |
rev 1 |
2025-03-28 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.mexicommerce .com domain |
rev 1 |
2025-03-28 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.0000004 .xyz domain |
rev 1 |
2025-03-27 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.0000004 .xyz domain |
rev 1 |
2025-03-27 |
| snort |
ET ATTACK_RESPONSE Unknown Payload Downloader Inbound |
rev 1 |
2025-03-27 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.0000004 .xyz domain |
rev 1 |
2025-03-27 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.0000004 .xyz domain |
rev 1 |
2025-03-27 |
| suricata |
ET ATTACK_RESPONSE Unknown Payload Downloader Inbound |
rev 1 |
2025-03-27 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.pmis-m .be domain |
rev 1 |
2025-03-25 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.pmis-m .be domain |
rev 1 |
2025-03-25 |
| snort |
ET EXPLOIT F5 TMUI RCE vulnerability CVE-2020-5902 Attempt M2 |
rev 3 |
2025-03-25 |
| snort |
ET INFO External IP Lookup via Country .is |
rev 1 |
2025-03-25 |
| snort |
ET EXPLOIT F5 TMUI RCE vulnerability CVE-2020-5902 Attempt M1 |
rev 6 |
2025-03-25 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.pmis-m .be domain |
rev 1 |
2025-03-25 |
| suricata |
ET EXPLOIT F5 TMUI RCE vulnerability CVE-2020-5902 Attempt M1 |
rev 7 |
2025-03-25 |
| suricata |
ET INFO External IP Lookup via Country .is |
rev 1 |
2025-03-25 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.pmis-m .be domain |
rev 1 |
2025-03-25 |
| suricata |
ET EXPLOIT F5 TMUI RCE vulnerability CVE-2020-5902 Attempt M2 |
rev 4 |
2025-03-25 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kick .sh domain |
rev 1 |
2025-03-24 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.kick .sh domain |
rev 1 |
2025-03-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kick .sh domain |
rev 1 |
2025-03-24 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.kick .sh domain |
rev 1 |
2025-03-24 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.savwhatsup .com domain |
rev 1 |
2025-03-22 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.savwhatsup .com domain |
rev 1 |
2025-03-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.savwhatsup .com domain |
rev 1 |
2025-03-22 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.savwhatsup .com domain |
rev 1 |
2025-03-22 |
| snort |
ET TROJAN SvcStealer CNC Tasking Checkin |
rev 1 |
2025-03-21 |
| snort |
ET TROJAN SvcStealer Data Exfiltration Attempt |
rev 1 |
2025-03-21 |
| snort |
ET TROJAN MacOS/Adload Proxy Node Response |
rev 3 |
2025-03-21 |
| suricata |
ET MALWARE SvcStealer CNC Tasking Checkin |
rev 1 |
2025-03-21 |