| snort |
ET WEB_SERVER Possible WebLogic Admin Login With Default Creds |
rev 3 |
2013-12-06 |
| snort |
ET WEB_SPECIFIC_APPS SAP Possible CTC Auth/HTTP Verb Bypass Attempt |
rev 2 |
2013-12-06 |
| snort |
ET WEB_SERVER Possible WebLogic Operator Login With Default Creds |
rev 1 |
2013-12-06 |
| snort |
ET WEB_SERVER Possible WebLogic Monitor Login With Default Creds |
rev 2 |
2013-12-06 |
| snort |
ET WEB_SERVER Possible WebLogic Admin Login With Default Creds |
rev 2 |
2013-12-06 |
| snort |
ET TROJAN Darkness DDoS HTTP Target/EXE |
rev 6 |
2013-11-27 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing management MBeanServer |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Hex Encoded Class file |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing jmx mbeanserver |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing glassfish external statistics impl |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing mbeanserver Introspector |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing tracing Provider Factory |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Importing Classes used in awt exploits |
rev 1 |
2013-11-26 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Mozilla JS Class Creation |
rev 1 |
2013-11-26 |
| snort |
ET INFO Java Downloading Archive flowbit no alert |
rev 5 |
2013-11-25 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class B64 encoded class |
rev 1 |
2013-11-25 |
| snort |
ET INFO Java Downloading Class flowbit no alert |
rev 5 |
2013-11-25 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class Accessing Importing glassfish |
rev 1 |
2013-11-25 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class file Accessing Security Manager |
rev 1 |
2013-11-25 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class file Importing Protection Domain |
rev 1 |
2013-11-25 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 2 |
rev 3 |
2013-11-21 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 1 |
rev 3 |
2013-11-21 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 3 |
rev 3 |
2013-11-21 |
| snort |
ET WEB_SERVER WEBSHELL pwn.jsp shell |
rev 3 |
2013-11-20 |
| snort |
ET EXPLOIT JavaX Toolkit Posting Plugin-Detect Data |
rev 3 |
2013-11-20 |
| snort |
ET TROJAN Trojan.Dropper.Win32.Dapato.braa.AMN CnC traffic |
rev 2 |
2013-11-20 |
| snort |
ET TROJAN Sisproc update |
rev 4 |
2013-11-16 |
| snort |
ET TROJAN Bamital checkin |
rev 2 |
2013-11-15 |
| snort |
ET TROJAN Trojan.BlackRev Download Executable |
rev 4 |
2013-11-15 |
| snort |
ET TROJAN PWS Win32/Lmir.BMQ checkin |
rev 2 |
2013-11-15 |
| snort |
ET TROJAN Possible Stitur Secondary Download |
rev 2 |
2013-11-09 |
| snort |
ET TROJAN FaceBook IM & Web Driven Facebook Trojan Posting Data |
rev 4 |
2013-11-08 |
| snort |
ET TROJAN W32/Citadel.Arx Variant CnC Beacon 1 |
rev 1 |
2013-11-07 |
| snort |
ET TROJAN Possible Schneebly Posting ScreenShot |
rev 1 |
2013-11-07 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS Word DOCX with Many ActiveX Objects and Media |
rev 6 |
2013-11-07 |
| snort |
ET TROJAN W32/Citadel.Arx Varient CnC Beacon 2 |
rev 1 |
2013-11-07 |
| snort |
ET TROJAN Possible Backdoor.Adwind Download |
rev 3 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS connhost.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET INFO Zip File |
rev 4 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS wimhost.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |