| suricata |
ET MALWARE Conficker/KernelBot/MS08-067 related Trojan Checkin |
rev 13 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS PHP-Nuke SQL Injection Attempt -- modules.php pid SELECT |
rev 8 |
2020-04-21 |
| suricata |
ET INFO Http Client Body contains pword= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET INFO Internal Host Getting External IP Address - ip2city.asp |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE Backdoor.Win32.Sykipot Get Config Request |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE MSUpdater alt checkin to CnC |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE W32/Downvision.A Initial Checkin |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Carberp checkin task |
rev 8 |
2020-04-21 |
| suricata |
ET WEB_SERVER /bin/csh In URI Possible Shell Command Execution Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE OSX/Flashback.K/I reporting successful infection |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Lop.gfr/Swizzor HTTP Update/Checkin |
rev 10 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Unkown exploit kit pdf download |
rev 2 |
2020-04-21 |
| suricata |
ET MALWARE Win32/Chekafe.A or Related Infection Checkin |
rev 6 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT TDS Sutra - HTTP header redirecting to a SutraTDS |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Atya Dropper Possible Rootkit - HTTP GET |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE Possible Ponmocup Driveby Download |
rev 4 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Sakura Exploit Kit Binary Load Request |
rev 3 |
2020-04-21 |
| suricata |
ET MALWARE Internet Protection FakeAV checkin |
rev 4 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT DRIVEBY Incognito Payload Requested /getfile.php by Java Client |
rev 2 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS IBBY nouvelles.php id Parameter UNION SELECT SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE OSX/Flashback.K first execution checkin |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Rouge Security Software Win32.BHO.egw |
rev 7 |
2020-04-21 |
| suricata |
ET MALWARE Common Downloader Install Report URL |
rev 9 |
2020-04-21 |
| suricata |
ET MALWARE TROJAN Win32-WebSec Reporting |
rev 6 |
2020-04-21 |
| suricata |
ET MALWARE Fake AV GET |
rev 8 |
2020-04-21 |
| suricata |
ET MALWARE OSX/Flashback.K/I reporting failed infection |
rev 5 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter INSERT INTO SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET INFO HTTP POST contains pass= in cleartext |
rev 4 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS RJ-iTop Network Vulnerabilities Scan System id INSERT INTO SQL Injection Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Likely Fake Antivirus Download InternetAntivirusPro.exe |
rev 11 |
2020-04-21 |
| suricata |
ET EXPLOIT_KIT Sakura Exploit Kit Version 1.1 Archive Request |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SERVER Possible attempt to enumerate MS SQL Server version |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS Joomla com_some controller Parameter Local File Inclusion Attempt |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE MSUpdater POST checkin to CnC |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE W32/118GotYourNo Reporting to CnC |
rev 5 |
2020-04-21 |
| suricata |
ET MALWARE Bot Backdoor Checkin/registration Request |
rev 8 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter SELECT FROM SQL Injection Attempt |
rev 4 |
2020-04-21 |
| suricata |
ET MALWARE W32/Nutiliers.A Downloader CnC Checkin - Request Encrypted Response |
rev 3 |
2020-04-21 |
| suricata |
ET WEB_SPECIFIC_APPS pfile file.php id Parameter UPDATE SET SQL Injection Attempt |
rev 4 |
2020-04-21 |