| snort |
GPL SNMP SNMP trap Format String detected |
rev 5 |
2014-10-30 |
| snort |
ET TROJAN Win32/Ropest.H CnC - INBOUND |
rev 1 |
2014-10-30 |
| snort |
ET TROJAN Win32/Ropest.H CnC - INBOUND set |
rev 1 |
2014-10-30 |
| snort |
GPL VOIP SIP INVITE message flooding |
rev 4 |
2014-10-30 |
| snort |
GPL VOIP SIP 407 Proxy Authentication Required Flood |
rev 4 |
2014-10-30 |
| snort |
GPL VOIP EXPLOIT SIP UDP Softphone overflow attempt |
rev 2 |
2014-10-30 |
| snort |
ET TROJAN W32/ZxShell Server Checkin Response |
rev 1 |
2014-10-29 |
| snort |
ET TROJAN Sofacy HTTP Request microsof-update.com |
rev 2 |
2014-10-29 |
| snort |
GPL CHAT Jabber/Google Talk Logon Success |
rev 3 |
2014-10-28 |
| snort |
GPL CHAT Jabber/Google Talk Outgoing Traffic |
rev 3 |
2014-10-28 |
| snort |
GPL CHAT Google Talk Startup |
rev 3 |
2014-10-28 |
| snort |
ET TROJAN OLDBAIT Checkin sptr |
rev 2 |
2014-10-28 |
| snort |
ET WEB_SERVER WEB-PHP phpinfo access |
rev 5 |
2014-10-28 |
| snort |
ET TROJAN OLDBAIT Checkin 2 brvc |
rev 5 |
2014-10-28 |
| snort |
GPL CHAT Jabber/Google Talk Outoing Message |
rev 3 |
2014-10-28 |
| snort |
GPL CHAT Google Talk Version Check |
rev 4 |
2014-10-28 |
| snort |
GPL CHAT Jabber/Google Talk Incoming Message |
rev 3 |
2014-10-28 |
| snort |
GPL CHAT Google Talk Logon |
rev 4 |
2014-10-28 |
| snort |
ET POLICY Possible IP Check api.ipify.org |
rev 1 |
2014-10-27 |
| snort |
ET TROJAN W32/Siggen.Dropper CnC Beacon |
rev 1 |
2014-10-27 |
| snort |
ET TROJAN JST Perl IrcBot download |
rev 1 |
2014-10-27 |
| snort |
ET TROJAN DarkComet-RAT init connection |
rev 4 |
2014-10-24 |
| snort |
ET TROJAN W32/24x7Help.ScareWare CnC Beacon |
rev 2 |
2014-10-23 |
| snort |
ET CURRENT_EVENTS Nuclear EK Gate Injected iframe Oct 22 2014 |
rev 1 |
2014-10-23 |
| snort |
ET TROJAN vSkimmer.PoS Checkin |
rev 4 |
2014-10-23 |
| snort |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful UDP Map to External Network |
rev 2 |
2014-10-22 |
| snort |
ET EXPLOIT Possible Malicious NAT-PMP Response Successful TCP Map to External Network |
rev 2 |
2014-10-22 |
| snort |
ET WEB_SERVER MongoDB Negated Parameter Server Side JavaScript Injection Attempt |
rev 1 |
2014-10-17 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M4 |
rev 1 |
2014-10-15 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS PPT Download with Embedded OLE Object |
rev 5 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M2 |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M6 |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M5 |
rev 1 |
2014-10-15 |
| snort |
ET SMTP SUSPICIOUS SMTP Attachment Inbound PPT attachment with Embedded OLE Object M3 |
rev 1 |
2014-10-15 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DNS |
rev 1 |
2014-10-15 |
| snort |
ET WEB_CLIENT Possible CVE-2014-4113 Exploit Download with Hurricane Panda IOC |
rev 1 |
2014-10-15 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 malicious DNS response |
rev 1 |
2014-10-15 |
| snort |
ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt Client Body |
rev 4 |
2014-10-14 |
| snort |
ET TROJAN Neverquest Request URI Struct |
rev 2 |
2014-10-10 |
| snort |
ET TROJAN Trojan.Win32.Buzus Checkin |
rev 4 |
2014-10-10 |