| snort |
ET TROJAN Drive Receiving GET DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Drive Receiving IP DDoS instructions |
rev 2 |
2013-06-22 |
| snort |
ET TROJAN Win32/Comotor.A!dll Reporting 1 |
rev 4 |
2013-06-20 |
| snort |
ET TROJAN Unknown Webserver Backdoor |
rev 1 |
2013-06-18 |
| snort |
ET ATTACK_RESPONSE Net User Command Response |
rev 3 |
2013-06-18 |
| snort |
ET TROJAN TripleNine RAT Checkin |
rev 4 |
2013-06-15 |
| snort |
ET EXPLOIT Possible 2012-1533 altjvm RCE via JNLP command injection |
rev 1 |
2013-06-13 |
| snort |
ET WEB_SERVER Possible SQLi xp_cmdshell POST body |
rev 3 |
2013-06-13 |
| snort |
ET TROJAN Win32/Tobfy.S |
rev 3 |
2013-06-12 |
| snort |
ET TROJAN EXE Download When Server Claims To Send Audio File - Must Be Win32 |
rev 5 |
2013-06-11 |
| snort |
ET TROJAN KeyBoy Backdoor Login |
rev 2 |
2013-06-08 |
| snort |
ET TROJAN Alina Server Response Code |
rev 3 |
2013-06-08 |
| snort |
ET INFO Executable Served From /tmp/ Directory - Malware Hosting Behaviour |
rev 1 |
2013-06-07 |
| snort |
ET WEB_SERVER allow_url_include PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET WEB_SERVER auto_prepend_file PHP config option in uri |
rev 2 |
2013-06-06 |
| snort |
ET WEB_SERVER Access to /phppath/php Possible Plesk 0-day Exploit June 05 2013 |
rev 1 |
2013-06-06 |
| snort |
ET WEB_SERVER disable_functions PHP config option in uri |
rev 4 |
2013-06-06 |
| snort |
ET TROJAN Win32/Travnet.A Checkin |
rev 4 |
2013-06-06 |
| snort |
ET WEB_SERVER suhosin.simulation PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET WEB_SERVER open_basedir PHP config option in uri |
rev 3 |
2013-06-06 |
| snort |
ET WEB_SERVER safe_mode PHP config option in uri |
rev 2 |
2013-06-06 |
| snort |
ET TROJAN W32/Symmi Remote File Injector Initial CnC Beacon |
rev 1 |
2013-06-04 |
| snort |
ET CURRENT_EVENTS Sakura obfuscated javascript Jun 1 2013 |
rev 7 |
2013-06-04 |
| snort |
ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in client_body |
rev 2 |
2013-06-01 |
| snort |
ET TROJAN Dorkbot GeoIP Lookup to wipmania |
rev 6 |
2013-06-01 |
| snort |
ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in URI |
rev 2 |
2013-06-01 |
| snort |
ET EXPLOIT Apache Struts Possible OGNL AllowStaticMethodAccess in client body |
rev 2 |
2013-06-01 |
| snort |
ET EXPLOIT Apache Struts Possible OGNL Java WriteFile in URI |
rev 2 |
2013-06-01 |
| snort |
ET TROJAN Possible Win32.Bicololo Checkin |
rev 2 |
2013-05-31 |
| snort |
ET TROJAN Backdoor.Win32.Trup.CX Checkin 1 |
rev 4 |
2013-05-31 |
| snort |
ET TROJAN Vobfus Check-in |
rev 1 |
2013-05-29 |
| snort |
ET TROJAN W32/Safe User Agent Fantasia |
rev 1 |
2013-05-29 |
| snort |
ET TROJAN Variant.Kazy.174106 Checkin |
rev 1 |
2013-05-29 |
| snort |
ET POLICY Unsupported/Fake FireFox Version 0. |
rev 2 |
2013-05-24 |
| snort |
ET POLICY Unsupported/Fake FireFox Version 2. |
rev 2 |
2013-05-24 |
| snort |
ET POLICY Unsupported/Fake FireFox Version 1. |
rev 2 |
2013-05-24 |
| snort |
ET POLICY Unsupported/Fake Internet Explorer Version MSIE 3. |
rev 2 |
2013-05-24 |
| snort |
ET WEB_SERVER Apache Struts Possible xwork Disable Method Execution |
rev 1 |
2013-05-24 |
| snort |
ET POLICY Unsupported/Fake Internet Explorer Version MSIE 2. |
rev 2 |
2013-05-24 |
| snort |
ET POLICY Unsupported/Fake Windows NT Version 5.0 |
rev 2 |
2013-05-24 |