| snort |
ET TROJAN eCh0raix/QNAPCrypt CnC Activity - Started |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Possible Zbot Activity Common Download Struct |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN Powershell with Decimal Encoded RUNPE Downloaded |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN DownloaderExchanger/Cbeplay Variant Checkin |
rev 13 |
2022-05-03 |
| snort |
ET INFO EXE - OSX Executable Download - PowerPC Arch |
rev 3 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Possible Compromised Wordpress - Generic Phishing Landing 2018-01-22 |
rev 3 |
2022-05-03 |
| snort |
ET WEB_CLIENT Malicious SCF File Inbound |
rev 2 |
2022-05-03 |
| snort |
ET TROJAN Win32/Nemty Ransomware Style Geo IP Check M1 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN PunkeyPOS HTTP CnC Beacon 2 |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Known Sinkhole Response Header INetSim |
rev 2 |
2022-05-03 |
| snort |
ET TROJAN Metasploit Meterpreter stdapi_* Command Request |
rev 4 |
2022-05-03 |
| snort |
ET POLICY Netviewer.com Remote Control Proxy Test |
rev 5 |
2022-05-03 |
| snort |
ET ACTIVEX Dell Webcam CrazyTalk ActiveX Control BackImage Access Potential Buffer Overflow Attempt 2 |
rev 6 |
2022-05-03 |
| snort |
ET INFO EXE - OSX Executable Download - Intel Arch |
rev 3 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS Successful Bank of America Phish 2015-10-29 |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN Possible DANDERSPRITZ HTTP Beacon |
rev 2 |
2022-05-03 |
| snort |
ET USER_AGENTS AnyDesk Remote Desktop Software User-Agent |
rev 4 |
2022-05-03 |
| snort |
ET FTP Suspicious Quotation Mark Usage in FTP Username |
rev 3 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS s0m3 Phishing Landing 2018-04-09 |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS ThWboard SQL Injection Attempt -- index.php board DELETE |
rev 8 |
2022-05-03 |
| snort |
ET INFO Suspicious rundll32.exe in URI |
rev 12 |
2022-05-03 |
| snort |
ET TROJAN Windows netstat Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2022-05-03 |
| snort |
ET TROJAN [PTsecurity] Kuriyama Loader Checkin |
rev 4 |
2022-05-03 |
| snort |
GPL WEB_SERVER 403 Forbidden |
rev 12 |
2022-05-03 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS DTLS 1.0 Fragmented Client Hello Possible CVE-2014-0195 |
rev 3 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS 20/20 Auto Gallery SQL Injection Attempt -- vehiclelistings.asp manufacturer UNION SELECT |
rev 7 |
2022-05-03 |
| snort |
ET WEB_SERVER SHOW VARIABLES SQL Injection Attempt in URI |
rev 5 |
2022-05-03 |
| snort |
ET TROJAN Ponmocup Redirection from infected Website to Trojan-Downloader |
rev 12 |
2022-05-03 |
| snort |
ET TROJAN Arkei Stealer Config Download Request |
rev 4 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS AJ Auction SQL Injection Attempt -- subcat.php cate_id UNION SELECT |
rev 8 |
2022-05-03 |
| snort |
ET WEB_SERVER MSSQL Server OLEDB asp error |
rev 13 |
2022-05-03 |
| snort |
ET CHAT IRC PONG response |
rev 19 |
2022-05-03 |
| snort |
ET TROJAN W32/SPARS/ARS Stealer Checkin |
rev 3 |
2022-05-03 |
| snort |
ET EXPLOIT CVE-2016-0189 Common Construct M1 |
rev 2 |
2022-05-03 |
| snort |
ET WEB_SPECIFIC_APPS Joomla com_videogallery controller parameter Local File Inclusion Attempt |
rev 4 |
2022-05-03 |
| snort |
ET SCAN w3af User Agent |
rev 13 |
2022-05-03 |
| snort |
ET TROJAN Metasploit Meterpreter core_channel_* Command Response |
rev 5 |
2022-05-03 |
| snort |
ET TROJAN PE EXE or DLL Windows file download disguised as ASCII |
rev 4 |
2022-05-03 |
| snort |
ET TROJAN Windows route Microsoft Windows DOS prompt command exit OUTBOUND |
rev 3 |
2022-05-03 |