| snort |
ET POLICY HTTP Request to a *.cw.cm domain |
rev 3 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.cz.cc domain |
rev 5 |
2014-09-12 |
| snort |
ET TROJAN Cnzz.cn Related Dropper Checkin |
rev 4 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.ce.ms domain |
rev 4 |
2014-09-12 |
| snort |
ET TROJAN Ponmocup C2 Sending Data to Controller 2 |
rev 3 |
2014-09-12 |
| snort |
ET TROJAN Trojan.BackDoor-DRV.gen.c Reporting-1 |
rev 3 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.gv.vg domain |
rev 4 |
2014-09-12 |
| snort |
ET TROJAN Suspicious Download Setup_ exe |
rev 4 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.ae.am domain |
rev 2 |
2014-09-12 |
| snort |
ET POLICY request for hide-my-ip.com autoupdate |
rev 4 |
2014-09-12 |
| snort |
ET DOS LOIC POST |
rev 3 |
2014-09-12 |
| snort |
ET POLICY HTTP Request to a *.noc.su domain |
rev 2 |
2014-09-12 |
| snort |
ET TROJAN Known Hostile Domain .ntkrnlpa.info Lookup |
rev 3 |
2014-09-12 |
| snort |
ET DOS LOIC GET |
rev 2 |
2014-09-12 |
| snort |
ET DOS LOIC Javascript DDoS Outbound |
rev 4 |
2014-09-12 |
| snort |
ET TROJAN DecebalPOS User-Agent |
rev 1 |
2014-09-11 |
| snort |
ET TROJAN Dumador Reporting User Activity |
rev 6 |
2014-09-11 |
| snort |
ET SCAN Potential SSH Scan |
rev 19 |
2014-09-10 |
| snort |
ET TROJAN Win32/Poweliks GET Request |
rev 2 |
2014-09-09 |
| snort |
ET WEB_SPECIFIC_APPS WordPress Huge IT Image Gallery 1.0.0 SQL Injection |
rev 1 |
2014-09-09 |
| snort |
ET WEB_SPECIFIC_APPS Possible WP CuckooTap Arbitrary File Download |
rev 1 |
2014-09-08 |
| snort |
ET SCAN Potential VNC Scan 5800-5820 |
rev 5 |
2014-09-06 |
| snort |
ET TROJAN W32/Bapy.Downloader PE Download Request |
rev 1 |
2014-09-05 |
| snort |
ET TROJAN W32/Bravix.Dropper CnC Beacon |
rev 1 |
2014-09-05 |
| snort |
ET TROJAN Backdoor.Win32/Dervec.gen Connectivity Check to Google |
rev 9 |
2014-09-05 |
| snort |
ET WEB_CLIENT Malicious iframe guessing router password 2 |
rev 1 |
2014-09-04 |
| snort |
ET WEB_CLIENT Malicious iframe guessing router password 1 |
rev 1 |
2014-09-04 |
| snort |
ET TROJAN W32/Threebyte.APT Checkin |
rev 1 |
2014-09-04 |
| snort |
ET DOS Possible SSDP Amplification Scan in Progress |
rev 1 |
2014-09-03 |
| snort |
ET POLICY Radmin Remote Control Session Setup Initiate OUTBOUND |
rev 2 |
2014-09-02 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi access attempt |
rev 4 |
2014-09-01 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys access attempt |
rev 3 |
2014-09-01 |
| snort |
ET CURRENT_EVENTS Possible Archie/Metasploit SilverLight Exploit |
rev 2 |
2014-08-30 |
| snort |
ET EXPLOIT F5 BIG-IP rsync cmi authorized_keys successful upload |
rev 2 |
2014-08-30 |
| snort |
ET TROJAN Syrian Malware Checkin |
rev 1 |
2014-08-29 |
| snort |
ET WEB_SERVER Automated Site Scanning for backup_data |
rev 3 |
2014-08-28 |
| snort |
ET TROJAN Windows set Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-28 |
| snort |
ET WEB_SERVER /bin/bash In URI, Possible Shell Command Execution Attempt Within Web Exploit |
rev 9 |
2014-08-28 |
| snort |
ET TROJAN Windows arp -a Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-28 |
| snort |
ET WEB_SERVER Automated Site Scanning for backupdata |
rev 4 |
2014-08-28 |