| snort |
ET TROJAN W32/DownloaderAgent.fajk Second Stage Download List Requested |
rev 1 |
2013-01-30 |
| snort |
ET CURRENT_EVENTS JDB Exploit Kit Landing Page |
rev 3 |
2013-01-30 |
| snort |
ET TROJAN W32/DownloaderAgent.fajk Successful Infection CnC Beacon |
rev 1 |
2013-01-30 |
| snort |
ET WEB_SERVER Non-Standard HTML page in Joomla /com_content/ dir |
rev 6 |
2013-01-30 |
| snort |
ET TROJAN Linux/SSHDoor.A Reporting Backdoor CnC Beacon |
rev 1 |
2013-01-30 |
| snort |
ET CURRENT_EVENTS Possible JDB Exploit Kit Class Request |
rev 5 |
2013-01-30 |
| snort |
ET ACTIVEX Possible Aloaha PDF Crypter activex SaveToFile method arbitrary file overwrite |
rev 2 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_collector Component Arbitrary File Upload Vulnerability |
rev 2 |
2013-01-25 |
| snort |
ET TROJAN W32/Bilakip.A Downloader API Ping CnC Beacon |
rev 1 |
2013-01-25 |
| snort |
ET CURRENT_EVENTS TDS - in.php |
rev 1 |
2013-01-25 |
| snort |
ET TROJAN W32/Bilakip.A Downloader Viruslist Download For Populating FakeAV |
rev 1 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS Banana Dance name Parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS GetSimple CMS path parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET WEB_SPECIFIC_APPS CubeCart loc parameter Local File Inclusion Attempt |
rev 1 |
2013-01-25 |
| snort |
ET USER_AGENTS Suspicious Win32 User Agent |
rev 2 |
2013-01-24 |
| snort |
ET CURRENT_EVENTS Gondad Exploit Kit Post Exploitation Request |
rev 1 |
2013-01-24 |
| snort |
ET CURRENT_EVENTS Possible Red Dot Exploit Kit Single Character JAR Request |
rev 1 |
2013-01-24 |
| snort |
ET WEB_SERVER WebShell - Symlink_Sa |
rev 1 |
2013-01-22 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based header |
rev 2 |
2013-01-22 |
| snort |
ET CURRENT_EVENTS StyX Landing Page |
rev 5 |
2013-01-22 |
| snort |
ET WEB_SPECIFIC_APPS Cartweaver 3 Local File Inclusion Attempt |
rev 1 |
2013-01-18 |
| snort |
ET ACTIVEX Possible Samsung Kies ActiveX PrepareSync method Buffer overflow |
rev 2 |
2013-01-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_ztautolink controller parameter Local File Inclusion Attempt |
rev 2 |
2013-01-18 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_bit controller parameter Local File Inclusion Attempt |
rev 2 |
2013-01-18 |
| snort |
ET TROJAN Possible Red October proxy CnC 2 |
rev 1 |
2013-01-17 |
| snort |
ET TROJAN Possible Red October proxy CnC 3 |
rev 1 |
2013-01-17 |
| snort |
ET TROJAN Possible Red October proxy CnC 1 |
rev 2 |
2013-01-17 |
| snort |
ET SCAN GET with HTML tag in start of URI seen with PHPMyAdmin scanning |
rev 1 |
2013-01-16 |
| snort |
ET TROJAN W32/Iyus.H Initial CnC Beacon |
rev 2 |
2013-01-15 |
| snort |
ET MOBILE_MALWARE Android/CoolPaperLeak Sending Information To CnC |
rev 1 |
2013-01-15 |
| snort |
ET TROJAN W32/Zemra.DDoS.Bot Variant CnC Beacon |
rev 1 |
2013-01-15 |
| snort |
ET TROJAN W32/Downloader Secondary Download Request - W32/Hupigon.Backdoor Likely Secondary Payload |
rev 2 |
2013-01-15 |
| snort |
ET TROJAN W32/Iyus.H work_troy.php CnC Request |
rev 2 |
2013-01-15 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser upload.php file Script Execution Attempt |
rev 1 |
2013-01-12 |
| snort |
ET ACTIVEX Possible Honeywell Tema Remote Installer ActiveX DownloadFromURL method Remote Code Execution |
rev 2 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS Free Blog Arbitrary File Deletion Attempt |
rev 2 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser edit.php file Script Execution Attempt |
rev 1 |
2013-01-12 |
| snort |
ET WEB_SPECIFIC_APPS TinyBrowser tinybrowser.php file Script Execution Attempt |
rev 2 |
2013-01-12 |
| snort |
ET SNMP missing community string attempt 2 |
rev 2 |
2013-01-10 |
| snort |
ET SNMP missing community string attempt 1 |
rev 2 |
2013-01-10 |