| snort |
ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound |
rev 1 |
2021-11-18 |
| snort |
ET INFO Possible UPnP UUID Overflow Exploit Attempt from Internal Host - SUBSCRIBE/UNSUBSCRIBE |
rev 1 |
2021-11-18 |
| snort |
ET INFO Possible UPnP UUID Overflow Exploit Attempt from External Host - SUBSCRIBE/UNSUBSCRIBE |
rev 1 |
2021-11-18 |
| snort |
ET TROJAN ELF/AbcBot Requesting Commands from CnC |
rev 1 |
2021-11-18 |
| snort |
ET INFO Possible UPnP UUID Overflow Exploit Attempt from External Host - NOTIFY |
rev 1 |
2021-11-18 |
| snort |
ET TROJAN ELF/AbcBot CnC Checkin |
rev 1 |
2021-11-18 |
| snort |
ET MALWARE Unattributed WebShell Access - Command Execution |
rev 1 |
2021-11-18 |
| suricata |
ET MALWARE Unattributed WebShell Access - File Upload |
rev 1 |
2021-11-18 |
| suricata |
ET INFO Burp Collaborator Domain in TLS SNI |
rev 2 |
2021-11-18 |
| suricata |
ET MALWARE Unattributed WebShell Access - Command Execution |
rev 1 |
2021-11-18 |
| suricata |
ET SCAN Laravel Debug Mode Information Disclosure Probe Inbound |
rev 1 |
2021-11-18 |
| suricata |
ET INFO Burp Collaborator Certificate Inbound |
rev 1 |
2021-11-18 |
| suricata |
ET MALWARE ELF/AbcBot CnC Checkin |
rev 1 |
2021-11-18 |
| suricata |
ET INFO Burp Collaborator Domain in DNS Query |
rev 1 |
2021-11-18 |
| suricata |
ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI |
rev 7 |
2021-11-17 |
| snort |
ET CURRENT_EVENTS Nourblog1 Phish Kit |
rev 2 |
2021-11-16 |
| snort |
ET TROJAN Win32/Farfli.CUY KeepAlive M1 |
rev 1 |
2021-11-16 |
| snort |
ET CURRENT_EVENTS Nourblog1 Phish Kit |
rev 1 |
2021-11-16 |
| snort |
ET CURRENT_EVENTS Nourblog1 Phish Kit |
rev 2 |
2021-11-16 |
| suricata |
ET PHISHING Nourblog1 Phish Kit |
rev 2 |
2021-11-16 |
| suricata |
ET PHISHING Nourblog1 Phish Kit |
rev 2 |
2021-11-16 |
| suricata |
ET PHISHING Nourblog1 Phish Kit |
rev 2 |
2021-11-16 |
| suricata |
ET MALWARE Win32/Farfli.CUY KeepAlive M1 |
rev 1 |
2021-11-16 |
| snort |
ET TROJAN Cobalt Strike Malleable C2 JQuery Custom Profile M5 |
rev 2 |
2021-11-15 |
| snort |
ET INFO Suspicious Terse HTTP Request to textbin |
rev 1 |
2021-11-15 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 1 |
2021-11-12 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 1 |
2021-11-12 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Compromised Server |
rev 1 |
2021-11-12 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Compromised Server |
rev 1 |
2021-11-12 |
| snort |
ET TROJAN Parallax CnC Response Activity M14 |
rev 2 |
2021-11-11 |
| snort |
ET TROJAN Parallax CnC Response Activity M16 |
rev 2 |
2021-11-11 |
| snort |
ET TROJAN Jasper URI Path Observed M4 |
rev 2 |
2021-11-11 |
| snort |
ET TROJAN Parallax CnC Response Activity M15 |
rev 1 |
2021-11-11 |
| snort |
ET TROJAN Jasper URI Path Observed M3 |
rev 2 |
2021-11-11 |
| suricata |
ET MALWARE Jasper URI Path Observed M3 |
rev 2 |
2021-11-11 |
| suricata |
ET MALWARE Jasper URI Path Observed M4 |
rev 2 |
2021-11-11 |
| snort |
ET CURRENT_EVENTS Successful PlayerUnknown's Battlegrounds Phish 2021-11-10 |
rev 2 |
2021-11-10 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2021-11-10 |
rev 2 |
2021-11-10 |
| suricata |
ET PHISHING Successful PlayerUnknown's Battlegrounds Phish 2021-11-10 |
rev 2 |
2021-11-10 |
| snort |
ET TROJAN LYCEUM CnC Domain in DNS Lookup |
rev 2 |
2021-11-09 |