| snort |
GPL NETBIOS DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL NETBIOS DCERPC LSASS direct bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL NETBIOS SMB DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL MISC HP Web JetAdmin setinfo access |
rev 2 |
2012-01-31 |
| snort |
ET TROJAN Win32.MSUpdater C&C traffic GET |
rev 1 |
2012-01-31 |
| snort |
GPL NETBIOS SMB-DS DCERPC LSASS direct bind attempt |
rev 7 |
2012-01-31 |
| snort |
GPL MISC HP Web JetAdmin remote file upload attempt |
rev 3 |
2012-01-31 |
| snort |
GPL NETBIOS SMB-DS DCERPC LSASS bind attempt |
rev 8 |
2012-01-31 |
| snort |
GPL NETBIOS SMB DCERPC LSASS direct bind attempt |
rev 7 |
2012-01-31 |
| snort |
ET TROJAN Backdoor.Win32.Poison.AU checkin |
rev 4 |
2012-01-30 |
| snort |
ET TROJAN Suspicious User-Agent MyAgrent |
rev 1 |
2012-01-28 |
| snort |
ET MOBILE_MALWARE Android/SndApps.SM Sending Information to CnC |
rev 1 |
2012-01-28 |
| snort |
ET TROJAN W32/Mentory CnC Server Providing Update Details |
rev 1 |
2012-01-28 |
| snort |
ET TROJAN W32/DelfInject.A CnC Checkin 2 |
rev 1 |
2012-01-28 |
| snort |
ET CURRENT_EVENTS Sakura Exploit Kit Binary Load Request |
rev 1 |
2012-01-24 |
| snort |
ET CURRENT_EVENTS Sakura Exploit Kit Landing Page Request |
rev 1 |
2012-01-24 |
| snort |
ET WEB_SERVER /etc/shadow Detected in URI |
rev 7 |
2012-01-20 |
| snort |
ET USER_AGENTS Atomic_Email_Hunter User-Agent Inbound |
rev 3 |
2012-01-18 |
| snort |
ET SCAN Netsparker Default User-Agent |
rev 7 |
2012-01-18 |
| snort |
ET USER_AGENTS Atomic_Email_Hunter User-Agent Outbound |
rev 2 |
2012-01-18 |
| snort |
GPL RPC mountd TCP mount path overflow attempt |
rev 8 |
2012-01-16 |
| snort |
GPL NETBIOS SMB startup folder unicode access |
rev 5 |
2012-01-16 |
| snort |
GPL FTP CWD Root directory transversal attempt |
rev 10 |
2012-01-16 |
| snort |
GPL NETBIOS DCERPC Messenger Service buffer overflow attempt |
rev 10 |
2012-01-16 |
| snort |
GPL WEB_SERVER mod_gzip_status access |
rev 3 |
2012-01-16 |
| snort |
ET POLICY Possible Web Crawl - libwww-perl User Agent |
rev 9 |
2012-01-16 |
| snort |
GPL SHELLCODE x86 0x71FB7BAB NOOP unicode |
rev 4 |
2012-01-16 |
| snort |
GPL RPC portmap network-status-monitor request UDP |
rev 7 |
2012-01-16 |
| snort |
GPL NETBIOS SMB-DS DCERPC Workstation Service unicode bind attempt |
rev 9 |
2012-01-16 |
| snort |
GPL NETBIOS SMB DCERPC invalid bind attempt |
rev 4 |
2012-01-16 |
| snort |
GPL IMAP auth overflow attempt |
rev 3 |
2012-01-16 |
| snort |
GPL NETBIOS SMB-DS DCERPC ISystemActivator bind attempt |
rev 12 |
2012-01-16 |
| snort |
GPL NETBIOS DCERPC invalid bind attempt |
rev 5 |
2012-01-16 |
| snort |
GPL RPC sadmind query with root credentials attempt TCP |
rev 5 |
2012-01-16 |
| snort |
GPL RPC rexec username too long response |
rev 6 |
2012-01-16 |
| snort |
GPL RPC sadmind query with root credentials attempt UDP |
rev 5 |
2012-01-16 |
| snort |
GPL RPC portmap network-status-monitor request TCP |
rev 7 |
2012-01-16 |
| snort |
GPL NETBIOS DCERPC Workstation Service direct service bind attempt |
rev 7 |
2012-01-16 |
| snort |
GPL RPC portmap proxy integer overflow attempt TCP |
rev 6 |
2012-01-16 |
| snort |
GPL NETBIOS SMB DCERPC Workstation Service unicode bind attempt |
rev 7 |
2012-01-16 |