| snort |
ET CURRENT_EVENTS SUSPICIOUS wsqmocn.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS connhost.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS waulct.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS msctcd.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET TROJAN Possible Backdoor.Adwind Download |
rev 3 |
2013-11-06 |
| snort |
ET INFO Zip File |
rev 4 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS taskmgr.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS winhosts.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS lgfxsrvc.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET TROJAN W32/Badur.Spy User Agent lawl |
rev 1 |
2013-11-01 |
| snort |
ET TROJAN FakeAV Install |
rev 1 |
2013-10-30 |
| snort |
ET INFO Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits |
rev 1 |
2013-10-28 |
| snort |
ET WEB_SERVER Possible Encrypted Webshell in POST |
rev 2 |
2013-10-28 |
| snort |
ET INFO JAR Size Under 30K Size - Potentially Hostile |
rev 2 |
2013-10-28 |
| snort |
ET TROJAN Known Sinkhole Response Header |
rev 3 |
2013-10-23 |
| snort |
ET WEB_SPECIFIC_APPS WHMCS lt 5.2.8 SQL Injection |
rev 4 |
2013-10-21 |
| snort |
ET TROJAN Kuluoz Activity |
rev 2 |
2013-10-21 |
| snort |
ET SCAN NETWORK Outgoing Masscan detected |
rev 2 |
2013-10-18 |
| snort |
ET TROJAN Possible W32/KanKan tools.ini Request |
rev 2 |
2013-10-14 |
| snort |
ET TROJAN Possible W32/KanKan Update officeaddinupdate.xml Request |
rev 1 |
2013-10-14 |
| snort |
ET TROJAN CryptoLocker EXE Download |
rev 2 |
2013-10-12 |
| snort |
ET WEB_SPECIFIC_APPS Possible VBulletin Unauthorized Admin Account Creation |
rev 1 |
2013-10-10 |
| snort |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX EJBInvokerServlet RCE Using Marshalled Object |
rev 2 |
2013-10-10 |
| snort |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet RCE Using Marshalled Object |
rev 2 |
2013-10-10 |
| snort |
ET CURRENT_EVENTS DRIVEBY SweetOrange - Java Exploit Downloaded |
rev 4 |
2013-10-07 |
| snort |
ET TROJAN Mevade Checkin |
rev 1 |
2013-10-05 |
| snort |
ET CURRENT_EVENTS Sweet Orange Landing with Applet Oct 4 2013 |
rev 5 |
2013-10-05 |
| snort |
ET POLICY Windows 3.1 User-Agent Detected - Possible Malware or Non-Updated System |
rev 7 |
2013-10-04 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id INSERT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id DELETE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id DELETE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id INSERT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id UPDATE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id SELECT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJDating SQL Injection Attempt -- view_profile.php user_id UNION SELECT |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Classifieds SQL Injection Attempt -- postingdetails.php postingid SELECT |
rev 7 |
2013-10-03 |
| snort |
ET CURRENT_EVENTS DotkaChef EK initial landing from Oct 02 2013 mass-site compromise EK campaign |
rev 1 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id UPDATE |
rev 7 |
2013-10-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id SELECT |
rev 7 |
2013-10-02 |
| snort |
ET CURRENT_EVENTS LightsOut EK POST Compromise POST |
rev 1 |
2013-09-30 |