| suricata |
ET WEB_SPECIFIC_APPS Slooze Web Photo Album file Parameter Command Execution Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET MOBILE_MALWARE Suspected PROJECTSPY Cookie |
rev 2 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS WordPress WP-Property Plugin uploadify.php Arbitrary File Upload Vulnerability |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Sakura exploit kit exploit download request /nano.php |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Gamania Trojan Check-in |
rev 10 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Coppermine Photo Gallery output Parameter Remote Command Execution Attempt |
rev 5 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS AWStats Totals sort parameter Remote Code Execution Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Densmail.com Related Trojan Checkin |
rev 6 |
2020-04-22 |
| suricata |
ET MOBILE_MALWARE Android/Updtkiller Sending Device Information |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_CLIENT Possible Malvertising FlashPost - POST to *.stats |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - PHP eMailer |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT CritXPack - No Java URI - Dot.class |
rev 3 |
2020-04-22 |
| suricata |
ET INFO GNU/Linux YUM User-Agent Outbound likely related to package management |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure w/multipart |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS dev4u CMS SQL Injection Attempt -- index.php gruppe_id INSERT |
rev 9 |
2020-04-22 |
| suricata |
ET WEB_SERVER ColdFusion adminapi access |
rev 5 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT RedKit - Potential Payload Requested - /2Digit.html |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Unknown Java Exploit Kit 32-32 byte hex initial landing |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE FakeAvCn-A Checkin 3 |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Mac Flashback Checkin 2 |
rev 7 |
2020-04-22 |
| suricata |
ET WEB_SERVER SQL Injection BULK INSERT in URI to Insert File Content into Database Table |
rev 6 |
2020-04-22 |
| suricata |
ET HUNTING Suspicious NULL DNS Request |
rev 1 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Hostile Gate landing seen with pamdql/Sweet Orange base64 |
rev 3 |
2020-04-22 |
| suricata |
ET MALWARE W32.Daws/Sanny CnC Initial Beacon |
rev 4 |
2020-04-22 |
| suricata |
ET MALWARE Request for fake postal receipt from e-mail link |
rev 3 |
2020-04-22 |
| suricata |
ET EXPLOIT_KIT Likely TDS redirecting to exploit kit |
rev 5 |
2020-04-22 |
| suricata |
ET MALWARE Win32.Hupigon.dkwt Related Checkin |
rev 10 |
2020-04-22 |
| suricata |
ET MALWARE Potentially Unwanted Program RebateInformerSetup.exe Download Reporting |
rev 4 |
2020-04-22 |
| suricata |
ET INFO GNU/Linux APT User-Agent Outbound likely related to package management |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE ProxyBox - HTTP CnC - proxy_info.php |
rev 3 |
2020-04-22 |
| suricata |
ET WEB_SERVER ColdFusion administrator access |
rev 6 |
2020-04-22 |
| suricata |
ET MALWARE WORM_VOBFUS Checkin 1 |
rev 9 |
2020-04-22 |
| suricata |
ET MALWARE Oficla Downloader Activity Observed |
rev 8 |
2020-04-22 |
| suricata |
ET WEB_SPECIFIC_APPS Wordpress Plugin Is-human type Parameter Remote Code Execution Attempt |
rev 4 |
2020-04-22 |
| suricata |
ET WEB_SERVER Brutus Scan Inbound |
rev 4 |
2020-04-22 |
| suricata |
GPL EXPLOIT .cmd executable file parsing attack |
rev 6 |
2020-04-22 |
| snort |
ET TROJAN JS Skimmer Domain in DNS Lookup |
rev 2 |
2020-04-21 |
| snort |
ET TROJAN MalDoc Requesting Payload 2020-04-21 |
rev 2 |
2020-04-21 |
| snort |
ET TROJAN JS Skimmer Domain in DNS Lookup |
rev 2 |
2020-04-21 |
| suricata |
ET MALWARE Zbot CnC GET /lost.dat |
rev 4 |
2020-04-21 |