| suricata |
ET MALWARE W32/HelloBridge.Backdoor Login CnC Beacon |
rev 4 |
2020-09-24 |
| suricata |
ET MALWARE Sefnit Checkin |
rev 5 |
2020-09-24 |
| suricata |
ET INFO HTTP Connection To DDNS Domain myftp.com |
rev 4 |
2020-09-23 |
| suricata |
ET SCAN Hikvision DVR attempted Synology Recon Scan |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain serveblog.net |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Adultdns.net |
rev 4 |
2020-09-23 |
| suricata |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp |
rev 6 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Zapto.org |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Redirectme.net |
rev 4 |
2020-09-23 |
| snort |
ET TROJAN RampantKitten APT TelB Python Variant - CnC Checkin M1 |
rev 2 |
2020-09-22 |
| snort |
ET TROJAN RampantKitten APT TelB Python Variant - CnC Checkin M2 |
rev 2 |
2020-09-22 |
| suricata |
ET MALWARE Alman Dropper Checkin |
rev 7 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS lgfxsrvc.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS wimhost.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET EXPLOIT_KIT CritXPack Jar Request |
rev 14 |
2020-09-22 |
| suricata |
ET MALWARE RampantKitten APT TelB Python Variant - CnC Checkin M2 |
rev 1 |
2020-09-22 |
| suricata |
ET HUNTING Suspicious Possible Process Dump in POST body |
rev 6 |
2020-09-22 |
| suricata |
ET WEB_SERVER IIS ISN BackDoor Command GetLog |
rev 7 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS winhosts.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS mssrs.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS alg.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS waulct.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS winlog.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET WEB_SERVER WEBSHELL pwn.jsp shell |
rev 6 |
2020-09-22 |
| suricata |
ET WEB_SERVER Apache Tomcat Boundary Overflow DOS/File Upload Attempt |
rev 4 |
2020-09-22 |
| suricata |
ET INFO myip.ru IP lookup |
rev 6 |
2020-09-22 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2020-09-21 |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| snort |
ET INFO Suspicious HTTP POST to Free Web Host Atwebpages |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP SESSION SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP ENV SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP COOKIE SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP COOKIE SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP GET SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET HUNTING SUSPICIOUS wsqmocn.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP ENV SuperGlobal in URI |
rev 4 |
2020-09-21 |