| snort |
ET INFO HTTP Request to a *.ch.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a .noip.cn domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.upas.su domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.bg.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.osa.pl domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.at.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.de.ms domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.c0m.li domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.uni.cc domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.int.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET TROJAN Urlzone/Bebloh/Bublik Checkin /was/vas.php |
rev 4 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a 3322.org.cn Domain |
rev 2 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.ru.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET TROJAN Possible SKyWIper/Win32.Flame POST |
rev 6 |
2014-09-15 |
| snort |
ET INFO HTTP Request to a *.sg.tf domain |
rev 2 |
2014-09-15 |
| snort |
ET TROJAN Win32.HLLW.Autoruner USA_Load UA |
rev 2 |
2014-09-15 |
| snort |
ET POLICY HTTP Request to a *.co.be domain |
rev 4 |
2014-09-13 |
| snort |
ET POLICY HTTP Request to a *.dlinkddns.com domain |
rev 3 |
2014-09-13 |
| snort |
ET POLICY HTTP Request to a *.cu.cc domain |
rev 2 |
2014-09-13 |
| snort |
ET TROJAN Possible Tracur.Q HTTP Communication |
rev 2 |
2014-09-13 |
| snort |
ET TROJAN Suspicious flash_player.exe Download |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Tinba Server Response |
rev 1 |
2014-09-12 |
| snort |
ET TROJAN Slugin.A PatchTimeCheck.dat Request |
rev 3 |
2014-09-12 |
| snort |
ET TROJAN Ponmocup C2 Post-infection Checkin |
rev 9 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.noc.su domain |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Possible Worm W32.Svich or Other Infection Request for setting.xls |
rev 2 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.vv.cc domain |
rev 3 |
2014-09-12 |
| snort |
ET TROJAN Hiloti loader requesting payload URL |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Bredolab CnC URL Detected |
rev 3 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.co.cc domain |
rev 5 |
2014-09-12 |
| snort |
ET TROJAN Suspicious Download Setup_ exe |
rev 4 |
2014-09-12 |
| snort |
ET TROJAN Possible Worm W32.Svich or Other Infection Request for setting.doc |
rev 2 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.gv.vg domain |
rev 4 |
2014-09-12 |
| snort |
ET TROJAN Suspicious bot.exe Request |
rev 3 |
2014-09-12 |
| snort |
ET DOS LOIC GET |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Known Hostile Domain .ntkrnlpa.info Lookup |
rev 3 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.co.tv domain |
rev 2 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.be.ma domain |
rev 2 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.qc.cx domain |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Rogue AV Downloader concat URI |
rev 5 |
2014-09-12 |