| suricata |
ET INFO HTTP Request to a *.tc domain |
rev 7 |
2020-09-15 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Hopto.org |
rev 5 |
2020-09-15 |
| suricata |
ET HUNTING HTTP request for resource ending in .scr |
rev 7 |
2020-09-15 |
| suricata |
ET INFO DNS Query for Suspicious .cz.cc Domain |
rev 6 |
2020-09-15 |
| suricata |
ET MALWARE Jadtree Downloader rar |
rev 5 |
2020-09-15 |
| suricata |
ET MALWARE Ponmocup Post Infection DNS Lookup intohave |
rev 4 |
2020-09-15 |
| suricata |
ET MALWARE Win32/Pift DNS TXT CnC Lookup ppift.net |
rev 6 |
2020-09-15 |
| suricata |
ET MALWARE MageCart Exfil URI |
rev 1 |
2020-09-15 |
| suricata |
ET MALWARE Known Hostile Domain .ntkrnlpa.info Lookup |
rev 6 |
2020-09-15 |
| suricata |
ET INFO HTTP Request to a *.co.cc domain |
rev 9 |
2020-09-15 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Myvnc.com |
rev 5 |
2020-09-15 |
| suricata |
ET INFO Android Adups Firmware DNS Query 4 |
rev 4 |
2020-09-15 |
| suricata |
ET WEB_SPECIFIC_APPS WP Jetpack/Twentyfifteen Possible XSS Request |
rev 5 |
2020-09-15 |
| suricata |
ET INFO HTTP Request to a *.tk domain |
rev 12 |
2020-09-15 |
| suricata |
ET INFO HTTP Request to a *.osa.pl domain |
rev 6 |
2020-09-15 |
| suricata |
ET INFO DNS Query Domain .bit |
rev 5 |
2020-09-15 |
| suricata |
ET MALWARE Ponmocup Post Infection DNS Lookup fasternation |
rev 4 |
2020-09-15 |
| suricata |
ET INFO DNS Query for a Suspicious *.co.tv domain |
rev 6 |
2020-09-15 |
| suricata |
ET INFO Android Adups Firmware DNS Query 3 |
rev 4 |
2020-09-15 |
| suricata |
ET MALWARE Scarlet Mimic DNS Lookup 42 |
rev 4 |
2020-09-15 |
| suricata |
ET DNS Query to a *.top domain - Likely Hostile |
rev 4 |
2020-09-15 |
| suricata |
ET INFO Android Adups Firmware DNS Query 2 |
rev 4 |
2020-09-15 |
| suricata |
ET INFO Dropbox DNS Lookup - Possible Offsite File Backup in Use |
rev 4 |
2020-09-15 |
| suricata |
ET INFO possible Xiaomi phone data leakage DNS |
rev 4 |
2020-09-15 |
| suricata |
ET INFO DNS Query For XXX Adult Site Top Level Domain |
rev 4 |
2020-09-15 |
| suricata |
ET INFO request to .xxx TLD |
rev 6 |
2020-09-15 |
| suricata |
ET INFO DNS Query for a Suspicious *.cu.cc domain |
rev 5 |
2020-09-15 |
| snort |
ET CURRENT_EVENTS Zimbra Phishing Landing on Appspot Hosting |
rev 2 |
2020-09-14 |
| suricata |
ET MOBILE_MALWARE Android/TrojanDropper.Agent.BKY DNS Lookup 4 |
rev 4 |
2020-09-14 |
| suricata |
ET WEB_SERVER Attempt To Access MSSQL xp_enumerrorlogs Stored Procedure Via URI to View Error Logs |
rev 8 |
2020-09-14 |
| suricata |
ET WEB_SPECIFIC_APPS AJ Classifieds SQL Injection Attempt -- postingdetails.php postingid UPDATE |
rev 9 |
2020-09-14 |
| suricata |
ET WEB_SERVER SELECT INSTR in URI Possible ORACLE Related Blind SQL Injection Attempt |
rev 7 |
2020-09-14 |
| suricata |
ET WEB_SERVER Tilde in URI - potential .cgi source disclosure vulnerability |
rev 9 |
2020-09-14 |
| suricata |
ET WEB_SERVER Tilde in URI - potential .asp source disclosure vulnerability |
rev 15 |
2020-09-14 |
| suricata |
ET PHISHING Zimbra Phishing Landing on Appspot Hosting |
rev 2 |
2020-09-14 |
| suricata |
ET MALWARE Win32.Bicololo Response 1 |
rev 4 |
2020-09-14 |
| suricata |
ET WEB_SPECIFIC_APPS fystyq Duyuru Scripti SQL Injection Attempt -- goster.asp id UNION SELECT |
rev 9 |
2020-09-14 |
| suricata |
ET WEB_SERVER Possible 3Com OfficeConnect Router Default User Account Remote Command Execution Attempt |
rev 7 |
2020-09-14 |
| suricata |
ET MOBILE_MALWARE Android/TrojanDropper.Agent.BKY DNS Lookup 1 |
rev 4 |
2020-09-14 |
| suricata |
ET MALWARE Possible Dragonfly APT Activity HTTP URI OPTIONS |
rev 3 |
2020-09-14 |