| snort |
ET TROJAN Georbot checkin |
rev 2 |
2012-11-01 |
| snort |
ET TROJAN Georbot initial checkin |
rev 1 |
2012-11-01 |
| snort |
ET INFO Imposter USPS Domain |
rev 1 |
2012-10-27 |
| snort |
ET INFO LLNMR query response to wpad |
rev 2 |
2012-10-25 |
| snort |
ET WEB_CLIENT Microsoft OLE Compound File Magic Bytes Flowbit Set |
rev 7 |
2012-10-22 |
| snort |
ET TROJAN Win32/Fujacks Activity |
rev 11 |
2012-10-18 |
| snort |
ET WEB_SERVER FaTaLisTiCz_Fx Webshell Detected |
rev 1 |
2012-10-18 |
| snort |
ET TROJAN Backdoor.Win32.Pushdo.s Checkin |
rev 2 |
2012-10-17 |
| snort |
ET TROJAN Taidoor Checkin |
rev 1 |
2012-10-17 |
| snort |
ET WEB_SPECIFIC_APPS PhpTax Possible Remote Code Exec |
rev 2 |
2012-10-12 |
| snort |
ET CURRENT_EVENTS BegOpEK - TDS - icon.php |
rev 1 |
2012-10-10 |
| snort |
ET CURRENT_EVENTS BegOpEK - Landing Page |
rev 1 |
2012-10-10 |
| snort |
ET WEB_CLIENT Microsoft Rich Text File download - SET |
rev 1 |
2012-10-10 |
| snort |
GPL EXPLOIT Microsoft cmd.exe banner |
rev 7 |
2012-10-09 |
| snort |
ET CURRENT_EVENTS Unknown Java Exploit Kit 32-32 byte hex initial landing |
rev 1 |
2012-10-05 |
| snort |
ET SCAN Nessus Netbios Scanning |
rev 2 |
2012-10-01 |
| snort |
ET POLICY Kindle Fire Browser User-Agent Outbound |
rev 2 |
2012-09-28 |
| snort |
ET TROJAN Shylock Module Data POST |
rev 3 |
2012-09-28 |
| snort |
ET WEB_SPECIFIC_APPS Plone and Zope cmd Parameter Remote Command Execution Attempt |
rev 4 |
2012-09-28 |
| snort |
ET WEB_SPECIFIC_APPS AWStats Totals sort parameter Remote Code Execution Attempt |
rev 2 |
2012-09-28 |
| snort |
ET WEB_SPECIFIC_APPS WebC.be Fichier_a_telecharger Parameter Local File Disclosure Attempt |
rev 2 |
2012-09-28 |
| snort |
ET WEB_SPECIFIC_APPS Possible JBoss/JMX InvokerServlet Auth Bypass Attempt |
rev 2 |
2012-09-28 |
| snort |
ET WEB_SPECIFIC_APPS Wordpress Plugin Is-human type Parameter Remote Code Execution Attempt |
rev 2 |
2012-09-28 |
| snort |
ET TROJAN Murlo Trojan Checkin |
rev 9 |
2012-09-27 |
| snort |
ET TROJAN Win32.Hupigon.dkwt Related Checkin |
rev 8 |
2012-09-27 |
| snort |
ET WEB_SPECIFIC_APPS Cyphor show.php SQL injection attempt |
rev 7 |
2012-09-27 |
| snort |
ET WEB_SPECIFIC_APPS Coppermine Photo Gallery output Parameter Remote Command Execution Attempt |
rev 3 |
2012-09-27 |
| snort |
ET TROJAN Gamania Trojan Check-in |
rev 9 |
2012-09-27 |
| snort |
ET WEB_SPECIFIC_APPS Coppermine Photo Gallery retva Parameter Remote Command Execution Attempt |
rev 3 |
2012-09-27 |
| snort |
ET WEB_SPECIFIC_APPS Slooze Web Photo Album file Parameter Command Execution Attempt |
rev 2 |
2012-09-27 |
| snort |
ET TROJAN Backdoor.Win32.Fynloski.A/DarkRat Checkin Outbound |
rev 8 |
2012-09-27 |
| snort |
ET TROJAN Oficla Downloader Activity Observed |
rev 8 |
2012-09-27 |
| snort |
ET TROJAN Densmail.com Related Trojan Checkin |
rev 4 |
2012-09-27 |
| snort |
ET WEB_SPECIFIC_APPS Simploo CMS x parameter Remote PHP Code Execution Attempt |
rev 3 |
2012-09-27 |
| snort |
ET TROJAN VirTool.Win32/VBInject.gen!DM Checkin |
rev 8 |
2012-09-26 |
| snort |
ET POLICY GNU/Linux APT User-Agent Outbound likely related to package management |
rev 3 |
2012-09-26 |
| snort |
ET TROJAN Win32.Runner/Bublik Checkin |
rev 6 |
2012-09-26 |
| snort |
ET WEB_CLIENT Obfuscated Javascript // ptth |
rev 3 |
2012-09-26 |
| snort |
ET CURRENT_EVENTS Sakura exploit kit exploit download request /nano.php |
rev 1 |
2012-09-25 |
| snort |
ET WEB_SERVER Wordpress Login Bruteforcing Detected |
rev 3 |
2012-09-20 |