| snort |
GPL WEB_SERVER 403 Forbidden |
rev 12 |
2022-05-03 |
| snort |
ET USER_AGENTS AnyDesk Remote Desktop Software User-Agent |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN [PTsecurity] Kuriyama Loader Checkin |
rev 4 |
2022-05-03 |
| snort |
ET EXPLOIT Possible ECLIPSEDWING RPCTOUCH MS08-067 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Observed Certificate Containing Double Base64 Encoded Executable Inbound |
rev 3 |
2022-05-03 |
| snort |
ET FTP Suspicious Quotation Mark Usage in FTP Username |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_videogallery controller parameter Local File Inclusion Attempt |
rev 4 |
2022-05-03 |
| snort |
ET SCAN w3af User Agent |
rev 13 |
2022-05-03 |
| snort |
ET TROJAN Metasploit Meterpreter core_channel_* Command Response |
rev 5 |
2022-05-03 |
| snort |
ET DOS Excessive Large Tree Connect Response |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SERVER MSSQL Server OLEDB asp error |
rev 13 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Successful Banco do Brasil Phish Mar 30 2017 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Windows route Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2022-05-03 |
| snort |
ET EXPLOIT CVE-2016-0189 Common Construct M1 |
rev 2 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS PRADO PHP Framework functional.php Local File Inclusion Vulnerability |
rev 3 |
2022-05-03 |
| snort |
ET ACTIVEX Multiple Altiris Products AeXNSConsoleUtilities.dll ActiveX Control BrowseAndSaveFile Method Buffer Overflow Attempt Function Call |
rev 10 |
2022-05-03 |
| snort |
ET TROJAN Powershell with Decimal Encoded RUNPE Downloaded |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN RegSubsDat Checkin Off Ports |
rev 5 |
2022-05-03 |
| snort |
ET TROJAN Possible MSIL/Solorigate.G!dha/SUPERNOVA Webshell Access Request |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI |
rev 5 |
2022-05-03 |
| snort |
ET TROJAN Metasploit Meterpreter core_channel_* Command Request |
rev 5 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS DRIVEBY [PwC CTD] -- MultiGroup - ScanBox and Targetted Watering Holes ActiveX Call |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Win32.YordanyanActiveAgent CnC Reporting |
rev 2 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Possible TSB Bank Phishing Landing 2018-05-07 |
rev 3 |
2022-05-03 |
| snort |
ET EXPLOIT Possible CVE-2017-0199 HTA Inbound |
rev 4 |
2022-05-03 |
| snort |
ET SCAN Enumiax Inter-Asterisk Exchange Protocol Username Scan |
rev 6 |
2022-05-03 |
| snort |
ET TROJAN Octopus Malware CnC Activity |
rev 3 |
2022-05-03 |
| snort |
ET CHAT IRC PONG response |
rev 19 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Possible Compromised Wordpress - Generic Phishing Landing 2018-01-22 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Win32/Nemty Ransomware Style Geo IP Check M2 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Towerweb Ransomware Landing Page |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Python Monero Miner CnC DNS Query |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN DownloaderExchanger/Cbeplay Variant Checkin |
rev 13 |
2022-05-03 |
| snort |
ET TROJAN eCh0raix/QNAPCrypt CnC Activity - Started |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS Apache CouchDB Remote Code Execution 1 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Win32/Nemty Ransomware Style Geo IP Check M1 |
rev 3 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Possible Dynamic DNS Exploit Pack Landing Page /de/sN |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Sinowal/sinonet/mebroot/Torpig infected host POSTing process list |
rev 5 |
2022-05-03 |
| snort |
ET EXPLOIT Possible CVE-2017-0199 HTA Inbound M2 |
rev 3 |
2022-05-03 |
| snort |
ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt 2 |
rev 6 |
2022-05-03 |