| suricata |
ET WEB_SERVER suhosin.simulation PHP config option in uri |
rev 6 |
2020-09-18 |
| suricata |
ET MALWARE Unknown Webserver Backdoor |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE W32/Caphaw CnC Configuration File Request |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE Revoyem Ransomware Check-in |
rev 6 |
2020-09-18 |
| suricata |
ET MOBILE_MALWARE Android/GoldDream Infected Device Registration |
rev 6 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT Styx Exploit Kit Jerk.cgi TDS |
rev 4 |
2020-09-18 |
| suricata |
ET MALWARE Trojan.Win32.VB.cefz Checkin |
rev 4 |
2020-09-18 |
| suricata |
ET EXPLOIT_KIT - Possible Redkit 1-4 char JNLP request |
rev 8 |
2020-09-18 |
| suricata |
ET WEB_SERVER Possible SQLi xp_cmdshell POST body |
rev 5 |
2020-09-18 |
| suricata |
ET MALWARE Possible Linux/Cdorked.A CnC |
rev 4 |
2020-09-18 |
| snort |
ET POLICY Possible HTTP-TUNNEL detected |
rev 2 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Domen SocEng CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT Unknown EK Landing URL |
rev 13 |
2020-09-17 |
| suricata |
ET HUNTING Suspicious services.exe in URI |
rev 16 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .eu.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE FIN8 ShellTea CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET INFO TuneIn Internet Radio Usage Detected |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Possible PHP.MAILER WebShell Register Shutdown Function Request Inbound |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Unsupported/Fake Internet Explorer Version MSIE 5. |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .us.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Magecart CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO DNS Query for Suspicious .ch.vu Domain |
rev 8 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Possible ShadowHammer DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .edu.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET INFO Internal Host Retrieving External IP Via myip.ozymo.com |
rev 4 |
2020-09-17 |