| snort |
ET CURRENT_EVENTS DRIVEBY Sednit EK IE Exploit CVE-2013-1347 M1 |
rev 1 |
2014-10-09 |
| snort |
ET TROJAN Win32/Ursnif Connectivity Check |
rev 2 |
2014-10-09 |
| snort |
ET CURRENT_EVENTS DRIVEBY Sednit EK IE Exploit CVE-2014-1776 M1 |
rev 2 |
2014-10-09 |
| snort |
ET TROJAN Gozi/Ursnif/Papras Connectivity Check |
rev 3 |
2014-10-09 |
| snort |
ET INFO Generic CollectGarbage in Hex |
rev 4 |
2014-10-08 |
| snort |
ET WEB_SPECIFIC_APPS Bugzilla token.cgi HPP e-mail validation bypass Attempt URI |
rev 1 |
2014-10-08 |
| snort |
ET POLICY 2Downloadz.com File Sharing User-Agent |
rev 1 |
2014-10-08 |
| snort |
ET TROJAN W32.Virut.A joining an IRC Channel |
rev 7 |
2014-10-07 |
| snort |
ET TROJAN Reply Sinkhole - irc-sinkhole.cert.pl |
rev 1 |
2014-10-06 |
| snort |
ET INFO HTTP Request to a *.tc domain |
rev 3 |
2014-10-06 |
| snort |
ET TROJAN Dirt Jumper/Russkill3 Checkin |
rev 9 |
2014-10-03 |
| snort |
ET SMTP Possible ComputerCop Log Transmitted via SMTP |
rev 1 |
2014-10-02 |
| snort |
ET CURRENT_EVENTS DRIVEBY Generic URLENCODED CollectGarbage |
rev 3 |
2014-10-02 |
| snort |
ET EXPLOIT Possible Pure-FTPd CVE-2014-6271 attempt |
rev 1 |
2014-10-02 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 Attempt Against SIP Proxy |
rev 2 |
2014-10-01 |
| snort |
ET MOBILE_MALWARE iOS/Xsser sending files |
rev 1 |
2014-10-01 |
| snort |
ET EXPLOIT Possible Qmail CVE-2014-6271 Mail From attempt |
rev 2 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in HTTP Cookie |
rev 2 |
2014-10-01 |
| snort |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 2 |
2014-10-01 |
| snort |
ET MOBILE_MALWARE iOS/Xsser sending GPS info |
rev 1 |
2014-10-01 |
| snort |
ET MOBILE_MALWARE iOS/Xsser checking library version |
rev 1 |
2014-10-01 |
| snort |
ET DOS DNS Amplification Attack Inbound |
rev 8 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible CVE-2014-6271 Attempt in URI |
rev 3 |
2014-10-01 |
| snort |
ET EXPLOIT Possible CVE-2014-6271 exploit attempt via malicious DHCP ACK |
rev 4 |
2014-10-01 |
| snort |
ET EXPLOIT Possible OpenVPN CVE-2014-6271 attempt |
rev 2 |
2014-10-01 |
| snort |
ET MOBILE_MALWARE iOS/Xsser Checkin |
rev 1 |
2014-10-01 |
| snort |
ET WEB_SERVER Possible bash shell piped to dev udp Inbound to WebServer |
rev 2 |
2014-09-30 |
| snort |
ET TROJAN Linux/ShellshockCampaign.DDOSBot Reporting IP |
rev 1 |
2014-09-29 |
| snort |
ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion LF |
rev 2 |
2014-09-28 |
| snort |
ET WEB_SERVER CVE-2014-6271 Attempt In HTTP Headers Line Continuation Evasion CRLF |
rev 2 |
2014-09-28 |
| snort |
ET TROJAN BlackEnergy v2 POST Request |
rev 1 |
2014-09-26 |
| snort |
ET ATTACK_RESPONSE Output of id command from HTTP server |
rev 1 |
2014-09-26 |
| snort |
ET TROJAN BlackEnergy POST Request |
rev 1 |
2014-09-26 |
| snort |
ET TROJAN Linux/Yangji.A Checkin |
rev 1 |
2014-09-24 |
| snort |
ET TROJAN Bossabot DDoS tool RFI attempt |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN Linux/AES.DDoS Sending Real/Fake CPU&BW Info |
rev 3 |
2014-09-22 |
| snort |
ET TROJAN Linux/BillGates Checkin |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN Linux/BillGates Checkin Response |
rev 1 |
2014-09-22 |
| snort |
ET TROJAN W32/Tobfy.Ransomware CnC Request - status.php |
rev 3 |
2014-09-19 |
| snort |
ET TROJAN CommentCrew Possible APT c2 communications sleep5 |
rev 3 |
2014-09-19 |