| snort |
ET EXPLOIT Metasploit -Java Atomic Exploit Downloaded |
rev 1 |
2012-12-13 |
| snort |
ET WEB_CLIENT Possible Malvertising FlashPost - POST to *.stats |
rev 2 |
2012-12-13 |
| snort |
ET WEB_SPECIFIC_APPS Achievo atknodetype parameter Local File Inclusion Vulnerability |
rev 2 |
2012-12-08 |
| snort |
ET TROJAN SmokeBot grab data plaintext |
rev 3 |
2012-12-08 |
| snort |
ET TROJAN Win32/Necurs |
rev 1 |
2012-12-08 |
| snort |
ET TROJAN Win32/Trojan.Agent.AXMO CnC Beacon |
rev 1 |
2012-12-08 |
| snort |
ET INFO MySQL Database Query Version OS compile |
rev 2 |
2012-12-06 |
| snort |
ET ATTACK_RESPONSE MySQL User Account Enumeration |
rev 2 |
2012-12-06 |
| snort |
ET CURRENT_EVENTS RedKit - Potential Payload Requested - /2Digit.html |
rev 1 |
2012-12-06 |
| snort |
ET SCAN MYSQL MySQL Remote FAST Account Password Cracking |
rev 5 |
2012-12-05 |
| snort |
ET CURRENT_EVENTS Zuponcic Hostile JavaScript |
rev 1 |
2012-12-04 |
| snort |
ET TROJAN WORM_VOBFUS Checkin 1 |
rev 5 |
2012-11-30 |
| snort |
ET CURRENT_EVENTS Unknown EK Landing URL |
rev 10 |
2012-11-30 |
| snort |
ET TROJAN Lyposit Ransomware Checkin 2 |
rev 1 |
2012-11-29 |
| snort |
ET SNMP Samsung Printer SNMP Hardcode RW Community String |
rev 2 |
2012-11-29 |
| snort |
ET CURRENT_EVENTS CritXPack PDF Request |
rev 11 |
2012-11-29 |
| snort |
ET WEB_SPECIFIC_APPS Piwik Backdoor Access |
rev 2 |
2012-11-28 |
| snort |
ET WEB_SPECIFIC_APPS Piwik Backdoor Access 2 |
rev 1 |
2012-11-28 |
| snort |
ET WEB_SERVER PIWIK Backdoored Version calls home |
rev 3 |
2012-11-28 |
| snort |
ET WEB_SERVER WebShell - PostMan |
rev 6 |
2012-11-27 |
| snort |
ET SCAN SFTP/FTP Password Exposure via sftp-config.json |
rev 1 |
2012-11-27 |
| snort |
ET CURRENT_EVENTS Possible Glazunov Java payload request /5-digit |
rev 1 |
2012-11-24 |
| snort |
ET WEB_SERVER WebShell - PHP eMailer |
rev 1 |
2012-11-24 |
| snort |
ET WEB_SERVER WebShell - Unknown - .php?x=img&img= |
rev 1 |
2012-11-24 |
| snort |
ET WEB_SERVER WebShell - Unknown - self-kill |
rev 1 |
2012-11-24 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based header w/colons |
rev 2 |
2012-11-21 |
| snort |
ET WEB_SERVER WebShell - D.K - Title |
rev 1 |
2012-11-21 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based POST structure w/multipart |
rev 1 |
2012-11-21 |
| snort |
ET WEB_SERVER WebShell - Generic - c99shell based header |
rev 1 |
2012-11-21 |
| snort |
ET TROJAN Win32/TrojanDownloader.Wauchos.A CnC Activity |
rev 1 |
2012-11-20 |
| snort |
ET CURRENT_EVENTS CritXPack - No Java URI - Dot.class |
rev 1 |
2012-11-14 |
| snort |
ET CURRENT_EVENTS CritXPack Landing Page |
rev 1 |
2012-11-14 |
| snort |
ET CURRENT_EVENTS CirtXPack - No Java URI - /a.Test |
rev 1 |
2012-11-14 |
| snort |
ET CURRENT_EVENTS KaiXin Exploit Kit Landing Page NOP String |
rev 2 |
2012-11-14 |
| snort |
ET POLICY Maxmind geoip check to /app/geoip.js |
rev 1 |
2012-11-13 |
| snort |
ET WEB_CLIENT Microsoft Excel file download - SET 1 |
rev 3 |
2012-11-13 |
| snort |
ET TROJAN indux.php check-in |
rev 3 |
2012-11-07 |
| snort |
ET CURRENT_EVENTS Probable Sakura Java applet with obfuscated URL Sep 21 2012 |
rev 2 |
2012-11-07 |
| snort |
ET TROJAN Potentially Unwanted Program RebateInformerSetup.exe Download Reporting |
rev 2 |
2012-11-02 |
| snort |
ET TROJAN Georbot checkin |
rev 2 |
2012-11-01 |