| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x02 |
rev 3 |
2014-12-05 |
| snort |
ET SMTP Spamcop.net Block Message |
rev 2 |
2014-12-05 |
| snort |
ET SCAN SSH BruteForce Tool with fake PUTTY version |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x03 |
rev 4 |
2014-12-05 |
| snort |
ET SCADA DATAC RealWin SCADA Server 2 On_FC_CONNECT_FCS_a_FILE Buffer Overflow Vulnerability |
rev 2 |
2014-12-05 |
| snort |
ET POLICY Splashtop Remote Control Session Keepalive Response |
rev 2 |
2014-12-05 |
| snort |
ET TROJAN W32/DoubleTap.APT Downloader CnC Beacon |
rev 2 |
2014-12-05 |
| snort |
ET DOS HTTP GET AAAAAAAA Likely FireFlood |
rev 2 |
2014-12-05 |
| snort |
ET SMTP Sorbs.net Block Message |
rev 2 |
2014-12-05 |
| snort |
ET SCADA Golden FTP Server PASS Command Remote Buffer Overflow Attempt |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress MON_LIST Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET ATTACK_RESPONSE Possible IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval RAKP message 2 status code Unauthorized Name |
rev 2 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely LOIC |
rev 2 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely AnonMafiaIC DDoS tool |
rev 2 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST Requests IMPL 0x02 |
rev 3 |
2014-12-05 |
| snort |
ET EXPLOIT Zollard PHP Exploit Telnet Inbound |
rev 2 |
2014-12-05 |
| snort |
ET TROJAN OSX/AlienSpy RAT Checkin |
rev 2 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely AnonGhost DDoS tool |
rev 2 |
2014-12-05 |
| snort |
ET TROJAN W32/SCKeyLog.InfoStealer Installation Confirmation Via SMTP |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress Multiple UNSETTRAP Mode 6 Responses |
rev 4 |
2014-12-05 |
| snort |
ET TROJAN Linux/ShellshockCampaign.DDOSBot Terminate Process CnC Server Message |
rev 2 |
2014-12-05 |
| snort |
ET DOS Likely NTP DDoS In Progress GET_RESTRICT Response to Non-Ephemeral Port IMPL 0x02 |
rev 4 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed GET_RESTRICT Requests IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET TROJAN AlienSpy RAT Checkin Set |
rev 2 |
2014-12-05 |
| snort |
ET POLICY HTTP OPTIONS invalid method case outbound |
rev 2 |
2014-12-05 |
| snort |
ET POLICY Bitmessage Activity |
rev 2 |
2014-12-05 |
| snort |
ET TROJAN Win32/Enchanim C2 Client Check-in |
rev 2 |
2014-12-05 |
| snort |
ET EXPLOIT Zollard PHP Exploit Telnet Outbound |
rev 2 |
2014-12-05 |
| snort |
ET ACTIVEX HP Easy Printer Care Software XMLCacheMgr ActiveX Control Remote Code Execution Attempt |
rev 2 |
2014-12-05 |
| snort |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x03 |
rev 3 |
2014-12-05 |
| snort |
ET DOS Terse HTTP GET Likely GoodBye 5.2 DDoS tool |
rev 2 |
2014-12-05 |
| snort |
ET MOBILE_MALWARE Android/Code4hk.A Checkin |
rev 2 |
2014-12-05 |
| snort |
ET WEB_CLIENT PDF With Hidden Embedded File |
rev 1 |
2014-12-03 |
| snort |
ET TROJAN Linux/ShellshockCampaign.DDOSBot Execute Shell Command CnC Server Message |
rev 2 |
2014-12-03 |
| snort |
ET INFO Microsoft Compact Office Document Format File Download |
rev 1 |
2014-12-02 |
| snort |
ET TROJAN W32/Hyteod.Downloader CnC Beacon |
rev 1 |
2014-12-01 |
| snort |
ET TROJAN Possible Regin Init CnC Beacon UDP |
rev 1 |
2014-11-26 |
| snort |
ET WEB_SERVER PHP.//Input in HTTP POST |
rev 3 |
2014-11-26 |
| snort |
ET TROJAN W32/DoubleTap.APT Downloader Socks5 Setup Request |
rev 2 |
2014-11-26 |