| snort |
ET TROJAN Generic Downloader - HTTP POST |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Fasec/FakeAV Alert/Keylogger/Dropper/DNSChanger Possible Rootkit - HTTP GET |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Conficker/KernelBot/MS08-067 related Trojan Checkin |
rev 10 |
2012-03-16 |
| snort |
ET TROJAN Urlzone/Bebloh Trojan Check-in |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Dosenjo/Kvadr Proxy Trojan Activity |
rev 4 |
2012-03-16 |
| snort |
ET TROJAN Common Trojan HTTP GET Logging |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN Banker/Banbra Related HTTP Post-infection Checkin |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN Atya Dropper Possible Rootkit - HTTP GET |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN BlackEnergy v2.x Plugin Download Request |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN Banker PWS/Infostealer HTTP GET Checkin |
rev 8 |
2012-03-16 |
| snort |
ET TROJAN Donkeyp2p Update Detected |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN Generic Win32.Autorun HTTP Post |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Downloader General Bot Checking In - Possible Win32.Small.htz related |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Bravix Checkin |
rev 5 |
2012-03-16 |
| snort |
ET TROJAN TSPY_BANKER.IDV/Infostealer.Bancos Module Download |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Asprox Form Submission to C&C |
rev 6 |
2012-03-16 |
| snort |
ET TROJAN Likely Fake Antivirus Download InternetAntivirusPro.exe |
rev 7 |
2012-03-15 |
| snort |
ET WEB_CLIENT Likely Malicious PDF Containing StrReverse |
rev 10 |
2012-03-14 |
| snort |
GPL WEB_SERVER Tomcat server snoop access |
rev 12 |
2012-03-13 |
| snort |
ET WEB_SERVER /bin/csh In URI Possible Shell Command Execution Attempt |
rev 6 |
2012-03-13 |
| snort |
ET WEB_SERVER /bin/ksh In URI Possible Shell Command Execution Attempt |
rev 7 |
2012-03-13 |
| snort |
ET TROJAN Backdoor.Graybird Checkin |
rev 2 |
2012-03-13 |
| snort |
ET ATTACK_RESPONSE Backdoor reDuh http tunnel |
rev 6 |
2012-03-13 |
| snort |
ET TROJAN W32/Lici Initial Checkin |
rev 3 |
2012-03-13 |
| snort |
GPL WEB_SERVER .htaccess access |
rev 7 |
2012-03-13 |
| snort |
ET WEB_SERVER /bin/tsh In URI Possible Shell Command Execution Attempt |
rev 8 |
2012-03-13 |
| snort |
ET TROJAN Kelihos/Hlux GET jucheck.exe from CnC |
rev 2 |
2012-03-13 |
| snort |
ET ATTACK_RESPONSE Backdoor reDuh http initiate |
rev 6 |
2012-03-13 |
| snort |
GPL WEB_SERVER /~root access |
rev 9 |
2012-03-13 |
| snort |
ET FTP Suspicious Percentage Symbol Usage in FTP Username |
rev 2 |
2012-03-12 |
| snort |
ET POLICY MS Remote Desktop Administrator Login Request |
rev 5 |
2012-03-10 |
| snort |
ET CURRENT_EVENTS Likely Scalaxy Exploit Kit URL template download |
rev 2 |
2012-03-10 |
| snort |
ET TROJAN SMTP Subject Line Contains C Path and EXE Possible Trojan Reporting Execution Path/Binary Name |
rev 2 |
2012-03-09 |
| snort |
ET TROJAN W32/Coced.PasswordStealer User-Agent 5.0 |
rev 1 |
2012-03-09 |
| snort |
ET SCAN Port Unreachable Response to Xprobe2 OS Fingerprint Scan |
rev 6 |
2012-03-08 |
| snort |
ET TROJAN Trojan.Win32.Genome.aetqe Checkin |
rev 2 |
2012-03-07 |
| snort |
ET POLICY Coral Web Proxy/Content Distribution Net Use |
rev 2 |
2012-03-07 |
| snort |
ET ACTIVEX ASUS Net4Switch ipswcom.dll ActiveX Stack Buffer Overflow |
rev 3 |
2012-03-06 |
| snort |
ET ACTIVEX ASUS Net4Switch ActiveX CxDbgPrint Format String Function Call Attempt |
rev 2 |
2012-03-06 |
| snort |
ET WEB_SPECIFIC_APPS Fork-CMS js.php module parameter Local File Inclusion Attempt |
rev 2 |
2012-03-06 |