| snort |
ET POLICY TuneIn Internet Radio Usage Detected |
rev 1 |
2012-07-18 |
| snort |
ET SCAN w3af User-Agent 2 |
rev 1 |
2012-07-18 |
| snort |
ET INFO Java .jar request to dotted-quad domain |
rev 2 |
2012-07-18 |
| snort |
ET WEB_SERVER Compromised Wordpress Install Serving Malicious JS |
rev 2 |
2012-07-17 |
| snort |
ET TROJAN Pony Downloader check-in response STATUS-IMPORT-OK |
rev 5 |
2012-07-15 |
| snort |
ET TROJAN ZeroAccess udp traffic detected |
rev 2 |
2012-07-14 |
| snort |
ET WEB_SPECIFIC_APPS joomla com_jstore controller parameter Local File Inclusion vulnerability |
rev 1 |
2012-07-13 |
| snort |
ET WEB_SPECIFIC_APPS joomla com_edir controller parameter Local File Inclusion vulnerability |
rev 1 |
2012-07-13 |
| snort |
ET TROJAN Playtech Downloader Online Gaming Checkin |
rev 8 |
2012-07-13 |
| snort |
ET CURRENT_EVENTS Document.write Long Backslash UTF-16 Encoded Content - Exploit Kit Behavior Flowbit Set |
rev 6 |
2012-07-13 |
| snort |
ET ACTIVEX Possible AdminStudio Activex Control LaunchProcess Method Access Arbitrary Code Execution |
rev 2 |
2012-07-13 |
| snort |
ET TROJAN Win32/Pift Checkin 2 |
rev 1 |
2012-07-13 |
| snort |
ET WEB_SPECIFIC_APPS Help Center Live file parameter Local File Inclusion vulnerability |
rev 1 |
2012-07-13 |
| snort |
ET TROJAN Win32/Pift Checkin 1 |
rev 1 |
2012-07-13 |
| snort |
ET POLICY SUSPICIOUS *.pdf.exe in HTTP HEADER |
rev 5 |
2012-07-13 |
| snort |
GPL RPC portmap ttdbserv request TCP |
rev 19 |
2012-07-13 |
| snort |
ET WEB_SPECIFIC_APPS joomla com_connect controller parameter Local File Inclusion vulnerability |
rev 1 |
2012-07-13 |
| snort |
ET TROJAN EXE Using Suspicious IAT ZwUnmapViewOfSection Possible Malware Process Hollowing |
rev 4 |
2012-07-13 |
| snort |
ET TROJAN Generic - 8Char.JAR Naming Algorithm |
rev 3 |
2012-07-12 |
| snort |
ET WEB_CLIENT c3284d malware network iframe |
rev 2 |
2012-07-12 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_rssreader controller parameter Local File Inclusion Attempt |
rev 1 |
2012-07-07 |
| snort |
ET ACTIVEX Possible Crystal Reports Viewer Activex Control ServerResourceVersion Insecure Method Access |
rev 1 |
2012-07-07 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_wisroyq controller parameter Local File Inclusion Attempt |
rev 1 |
2012-07-07 |
| snort |
ET ACTIVEX Possible Crystal Reports Viewer Activex Control ServerResourceVersion Insecure Method Access 2 |
rev 1 |
2012-07-07 |
| snort |
ET ACTIVEX Possible IBM Rational ClearQuest Activex Control RegisterSchemaRepoFromFileByDbSet Insecure Method Access |
rev 1 |
2012-07-07 |
| snort |
ET TROJAN W32/Numnet.Downloader CnC Checkin 2 |
rev 1 |
2012-07-04 |
| snort |
ET CURRENT_EVENTS g01pack exploit pack /mix/ payload |
rev 1 |
2012-07-04 |
| snort |
ET POLICY Download Request to Hotfile.com |
rev 1 |
2012-07-04 |
| snort |
ET TROJAN W32/Numnet.Downloader CnC Checkin 1 |
rev 1 |
2012-07-04 |
| snort |
ET TROJAN Zbot CnC POST /common/timestamps.php |
rev 1 |
2012-07-03 |
| snort |
ET INFO Compressed Executable SZDD Compress.exe Format Over HTTP |
rev 2 |
2012-07-03 |
| snort |
ET CURRENT_EVENTS NuclearPack - Landing Page Received - applet archive=32CharHex |
rev 4 |
2012-07-02 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_profile controller parameter Local File Inclusion Vulnerability |
rev 2 |
2012-06-29 |
| snort |
ET POLICY IncrediMail Install Callback |
rev 2 |
2012-06-29 |
| snort |
ET WEB_SPECIFIC_APPS WordPress jRSS Widget url parameter Local File Inclusion Vulnerability |
rev 2 |
2012-06-29 |
| snort |
ET TROJAN Zbot CnC GET /lost.dat |
rev 2 |
2012-06-28 |
| snort |
ET TROJAN Zbot CnC POST /common/versions.php |
rev 1 |
2012-06-28 |
| snort |
ET TROJAN Win32.Fareit.A/Pony Downloader Checkin |
rev 5 |
2012-06-27 |
| snort |
ET TROJAN W32/Armageddon CnC Checkin |
rev 1 |
2012-06-26 |
| snort |
ET CURRENT_EVENTS - Landing Page Requested - 15Alpha1Digit.php |
rev 2 |
2012-06-26 |