| snort |
ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id UPDATE |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id INSERT |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS W1L3D4 WEBmarket SQL Injection Attempt -- urunbak.asp id SELECT |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft UNION SELECT |
rev 6 |
2010-10-01 |
| snort |
ET TROJAN Common Downloader Access Count Tracking URL |
rev 3 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_forum UPDATE |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS w-Agora SQL Injection Attempt -- search.php search_user DELETE |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- mailer.w2b draft SELECT |
rev 6 |
2010-10-01 |
| snort |
ET WEB_SPECIFIC_APPS W2B Online Banking SQL Injection Attempt -- DocPay.w2b listDocPay UNION SELECT |
rev 6 |
2010-10-01 |
| snort |
ET TROJAN dlink router access attempt |
rev 4 |
2010-09-30 |
| snort |
ET TROJAN Daemonize.ft HTTP Checkin |
rev 3 |
2010-09-30 |
| snort |
ET TROJAN Banker.Delf Infection variant 4 - Sending Initial Email to Owner |
rev 4 |
2010-09-30 |
| snort |
ET TROJAN Cashout Proxy Bot reg_DST |
rev 3 |
2010-09-30 |
| snort |
ET WEB_CLIENT Apple Quicktime RTSP Content-Type overflow attempt |
rev 6 |
2010-09-30 |
| snort |
ET TROJAN Banload Downloader Infection - Sending initial email to owner |
rev 4 |
2010-09-30 |
| snort |
ET TROJAN Dialer-715 Install Checkin |
rev 4 |
2010-09-30 |
| snort |
ET TROJAN Dialer.Trojan Activity |
rev 3 |
2010-09-30 |
| snort |
ET TROJAN Win32/Chekafe.A or Related Infection Checkin |
rev 3 |
2010-09-30 |
| snort |
ET TROJAN Banker.Delf Infection - Sending Initial Email to Owner |
rev 8 |
2010-09-30 |
| snort |
ET TROJAN FakeYak or Related Infection Checkin 1 |
rev 2 |
2010-09-29 |
| snort |
ET SCAN Nikto Scan Remote File Include Retrieval |
rev 2 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter SELECT FROM SQL Injection Attempt |
rev 2 |
2010-09-29 |
| snort |
ET TROJAN Shiz or Rohimafo Reporting Listening Socket to CnC Server |
rev 2 |
2010-09-29 |
| snort |
ET SCAN w3af Scan Remote File Include Retrieval |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS Joomla NoticeBoard Component controller Parameter Local File Inclusion Attempt |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter UPDATE SET SQL Injection Attempt |
rev 3 |
2010-09-29 |
| snort |
ET TROJAN Trojan.Win32.Cosmu.xet CnC Beacon |
rev 2 |
2010-09-29 |
| snort |
ET WORM Win32.Socks.s HTTP Post Checkin |
rev 6 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter INSERT INTO SQL Injection Attempt |
rev 3 |
2010-09-29 |
| snort |
ET WEB_SPECIFIC_APPS iScripts MultiCart orderid Parameter UNION SELECT SQL Injection Attempt |
rev 2 |
2010-09-29 |
| snort |
ET TROJAN PWSteal.Bancos Generic Banker Trojan SCR Download |
rev 3 |
2010-09-29 |
| snort |
ET TROJAN Knock.php Shiz or Rohimafo CnC Server Contact URL |
rev 2 |
2010-09-29 |
| snort |
ET WEB_SERVER Local Website Infected By Gootkit |
rev 2 |
2010-09-28 |
| snort |
ET WEB_CLIENT phoenix exploit kit - admin login page detected |
rev 2 |
2010-09-28 |
| snort |
ET WEB_SERVER Gootkit Website Infection Receiving FTP Credentials from Control Server |
rev 2 |
2010-09-28 |
| snort |
ET TROJAN Stuxnet index.php |
rev 2 |
2010-09-28 |
| snort |
ET TROJAN FakeAV Win32/Antivirus2008 CnC Beacon |
rev 5 |
2010-09-26 |
| snort |
ET WEB_CLIENT VLC Media Player .ass File Buffer Overflow Attempt |
rev 4 |
2010-09-25 |
| snort |
ET WEB_CLIENT VLC Media Player smb URI Handling Remote Buffer Overflow Attempt |
rev 4 |
2010-09-25 |
| snort |
ET SCAN crimscanner User-Agent detected |
rev 6 |
2010-09-23 |