| suricata |
ET MALWARE Fasec/FakeAV Alert/Keylogger/Dropper/DNSChanger Possible Rootkit - HTTP GET |
rev 7 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UPDATE SET SQL Injection Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Trojan.Win32.Buzus Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Win32/Momibot Ping Checkin |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla com_some controller Parameter Local File Inclusion Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Zbot CnC GET /lost.dat |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE WindowsEnterpriseSuite FakeAV Reporting via POST |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE W32/Nutiliers.A Downloader CnC Checkin - Request Encrypted Response |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS RJ-iTop Network Vulnerabilities Scan System id UPDATE SET SQL Injection Attempt |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Driveby Exploit Attempt Often to Install Monkif |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Common Downloader Access Count Tracking URL |
rev 6 |
2020-04-21 |
| suricata |
ET WEB_SERVER /bin/tsh In URI Possible Shell Command Execution Attempt |
rev 6 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS PHP-Nuke SQL Injection Attempt -- modules.php pid SELECT |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE Conficker/KernelBot/MS08-067 related Trojan Checkin |
rev 13 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Meciv Checkin |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Dosenjo/Kvadr Proxy Trojan Activity |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Pushdo Update URL Detected |
rev 11 |
2020-04-21 |
| suricata |
ET INFO Http Client Body contains passwd= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter DELETE FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE BestAntivirus2011 Fake AV reporting |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Banker/Banbra Related HTTP Post-infection Checkin |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE Win32.Lager Trojan Reporting |
rev 6 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Incognito Exploit Kit Java request to images.php?t= |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Trojan Downloader.Bancos Reporting |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Nebuler/Dialer.qn HTTP Request - Checkin |
rev 11 |
2020-04-21 |
| suricata |
ET MOBILE_MALWARE Android/Plankton.P Commands Request to CnC Server |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE carberp check in |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS ThWboard SQL Injection Attempt -- index.php board DELETE |
rev 9 |
2020-04-21 |
| suricata |
ET MALWARE Downloader General Bot Checking In - Possible Win32.Small.htz related |
rev 7 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Incognito Exploit Kit PDF request to images.php?t=81118 |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SERVER /bin/ksh In URI Possible Shell Command Execution Attempt |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE W32/DelfInject.A CnC Checkin 2 |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Win32.Sykipot Get Config Request |
rev 6 |
2020-04-21 |
| suricata |
ET INFO Internal Host Getting External IP Address - ip2city.asp |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Daemonize.ft HTTP Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE TrojanDownloader Win32/Harnig.gen-P Reporting |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE SpamTool.Win32.Agent.gy/Grum/Tedroo Or Similar HTTP Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Bot Backdoor Checkin/registration Request |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE Zbot CnC POST /common/timestamps.php |
rev 3 |
2020-04-21 |