| snort |
ET SCAN SQLNinja MSSQL Version Scan |
rev 4 |
2014-08-27 |
| snort |
ET TROJAN Windows ipconfig Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Windows systeminfo Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET TROJAN Windows net start Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2014-08-26 |
| snort |
ET DNS Reply Sinkhole - 106.187.96.49 blacklistthisdomain.com |
rev 6 |
2014-08-26 |
| snort |
ET TROJAN Dyreza RAT Ex-filtrating Data |
rev 5 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Dyreza RAT Fake Server Header |
rev 2 |
2014-08-26 |
| snort |
ET DOS Likely NTP DDoS In Progress PEER_LIST_SUM Response to Non-Ephemeral Port IMPL 0x02 |
rev 3 |
2014-08-26 |
| snort |
ET TROJAN Win32/Spy.Tuscas |
rev 1 |
2014-08-25 |
| snort |
ET TROJAN ZeroLocker Activity |
rev 2 |
2014-08-22 |
| snort |
ET TROJAN Machete FTP activity |
rev 1 |
2014-08-22 |
| snort |
ET TROJAN Secure-Soft.Stealer Checkin |
rev 2 |
2014-08-22 |
| snort |
ET TROJAN Win32/Nubjub.A HTTP Check-in |
rev 7 |
2014-08-22 |
| snort |
ET DOS HOIC with booster inbound |
rev 1 |
2014-08-21 |
| snort |
ET WEB_CLIENT DRIVEBY Social Engineering Toolkit Web Clone code detected |
rev 1 |
2014-08-21 |
| snort |
ET TROJAN Hoic.zip retrieval |
rev 2 |
2014-08-21 |
| snort |
ET SCAN Skipfish Web Application Scan Detected |
rev 5 |
2014-08-21 |
| snort |
ET TROJAN LDPinch SMTP Password Report with mail client The Bat! |
rev 6 |
2014-08-21 |
| snort |
ET TROJAN Python.Ragua Checkin |
rev 1 |
2014-08-20 |
| snort |
ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR filename detected |
rev 1 |
2014-08-20 |
| snort |
ET WEB_CLIENT DRIVEBY Social Engineering Toolkit JAR Download |
rev 1 |
2014-08-20 |
| snort |
ET TROJAN ZeroLocker Downloading Config |
rev 1 |
2014-08-19 |
| snort |
ET TROJAN ShellBot.C retrieval |
rev 1 |
2014-08-19 |
| snort |
ET TROJAN Suspicious X-mailer Synapse |
rev 1 |
2014-08-14 |
| snort |
ET TROJAN OneLouder Common URI Struct |
rev 1 |
2014-08-13 |
| snort |
ET TROJAN Possible WEBC2-GREENCAT Response - Embedded CnC APT1 Related |
rev 3 |
2014-08-13 |
| snort |
ET TROJAN Smart Fortress FakeAV/Kryptik.ABNC Checkin |
rev 3 |
2014-08-13 |
| snort |
ET TROJAN PRISM Backdoor |
rev 3 |
2014-08-12 |
| snort |
ET TROJAN Lurk Click fraud Template Request |
rev 1 |
2014-08-12 |
| snort |
ET POLICY possible Xiaomi phone data leakage HTTP |
rev 1 |
2014-08-11 |
| snort |
ET CURRENT_EVENTS Nuclear Exploit Kit exe.exe Payload |
rev 1 |
2014-08-08 |
| snort |
ET TROJAN Win32/Nitol.A Checkin |
rev 6 |
2014-08-05 |
| snort |
ET TROJAN Win32/Zemot Checkin |
rev 4 |
2014-08-05 |
| snort |
ET TROJAN Ddex Loader Check-in |
rev 1 |
2014-08-05 |
| snort |
ET TROJAN Troj/ReRol.A Checkin 2 |
rev 2 |
2014-08-04 |
| snort |
ET TROJAN Infostealer.Mysayad Checkin 2 |
rev 1 |
2014-08-04 |
| snort |
ET TROJAN Troj/ReRol.A Checkin 1 |
rev 3 |
2014-08-04 |