| snort |
ET POLICY JavaClass Returned Via Anonymous Outbound LDAPv3 Bind Request |
rev 2 |
2021-12-20 |
| snort |
ET ATTACK_RESPONSE Possible CVE-2021-44228 Payload via LDAPv3 Response M2 |
rev 2 |
2021-12-20 |
| suricata |
ET INFO Successful Anonymous LDAPv3 Bind Request Outbound |
rev 2 |
2021-12-20 |
| suricata |
ET INFO JavaClass Returned Via Anonymous Outbound LDAPv3 Bind Request |
rev 2 |
2021-12-20 |
| suricata |
ET INFO JavaClass Returned Via Non-Anonymous Outbound LDAPv3 Bind Request |
rev 2 |
2021-12-20 |
| suricata |
ET ATTACK_RESPONSE Possible CVE-2021-44228 Payload via LDAPv3 Response M2 |
rev 2 |
2021-12-20 |
| suricata |
ET INFO Successful Non-Anonymous LDAPv3 Bind Request Outbound |
rev 2 |
2021-12-20 |
| snort |
ET POLICY Serialized Java Payload via RMI Response |
rev 2 |
2021-12-17 |
| snort |
ET POLICY Unserialized Java Payload via RMI Response |
rev 2 |
2021-12-17 |
| snort |
ET TROJAN Octopus Backdoor Related Domain in DNS Lookup |
rev 1 |
2021-12-16 |
| snort |
ET POLICY Successful GIOP/IIOP Request Outbound |
rev 2 |
2021-12-15 |
| snort |
ET TROJAN ELF/Mirai Botnet CnC Activity |
rev 1 |
2021-12-15 |
| snort |
ET TROJAN lu0bot Loader HTTP Request M3 |
rev 2 |
2021-12-15 |
| snort |
ET TROJAN ELF/Muhstik Botnet CnC Activity |
rev 1 |
2021-12-15 |
| snort |
ET POLICY GIOP/IIOP Request Outbound |
rev 2 |
2021-12-15 |
| suricata |
ET INFO Successful LDAPSv3 LDAPS_START_TLS Request Outbound |
rev 2 |
2021-12-15 |
| suricata |
ET INFO GIOP/IIOP Request Outbound |
rev 1 |
2021-12-15 |
| suricata |
ET INFO Successful LDAPSv3 LDAPS_START_TLS Request Outbound |
rev 2 |
2021-12-15 |
| suricata |
ET MALWARE ELF/Mirai Botnet CnC Activity |
rev 1 |
2021-12-15 |
| suricata |
ET INFO Successful GIOP/IIOP Request Outbound |
rev 1 |
2021-12-15 |
| suricata |
ET MALWARE ELF/Muhstik Botnet CnC Activity |
rev 1 |
2021-12-15 |
| snort |
ET ATTACK_RESPONSE Possible CVE-2021-44228 Payload via LDAPv3 Response |
rev 1 |
2021-12-14 |
| snort |
ET TROJAN Cobalt Strike Related Domain in DNS Lookup |
rev 2 |
2021-12-14 |
| snort |
ET TROJAN MSIL/Khonsri Ransomware CnC Activity |
rev 1 |
2021-12-14 |
| snort |
ET POLICY Java Client HTTP Request |
rev 2 |
2021-12-14 |
| suricata |
ET INFO Java Client HTTP Request |
rev 5 |
2021-12-14 |
| suricata |
ET ATTACK_RESPONSE Possible CVE-2021-44228 Payload via LDAPv3 Response |
rev 1 |
2021-12-14 |
| snort |
ET TROJAN Kimsuky Related CnC Activity |
rev 1 |
2021-12-13 |
| snort |
ET TROJAN Kimsuky Related CnC Activity |
rev 1 |
2021-12-13 |
| snort |
ET TROJAN Win32/Gasti.tm Checkin Activity |
rev 2 |
2021-12-13 |
| snort |
ET TROJAN Kimsuky Related Domain in DNS Lookup |
rev 1 |
2021-12-13 |
| snort |
ET TROJAN Kimsuky Related Domain in DNS Lookup |
rev 1 |
2021-12-13 |
| snort |
ET TROJAN Kimsuky Related CnC Activity |
rev 1 |
2021-12-13 |
| suricata |
ET MALWARE Kimsuky Related CnC Activity |
rev 1 |
2021-12-13 |
| suricata |
ET MALWARE Win32/Gasti.tm Checkin Activity |
rev 1 |
2021-12-13 |
| snort |
ET POLICY dnslog .cn Observed in DNS Query |
rev 2 |
2021-12-11 |
| suricata |
ET INFO dnslog .cn Observed in DNS Query |
rev 1 |
2021-12-11 |
| snort |
ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M3 |
rev 2 |
2021-12-09 |
| snort |
ET TROJAN ELF/MooBot Mirai DDoS Variant Server Keep Alive |
rev 2 |
2021-12-09 |
| snort |
ET TROJAN ELF/MooBot Mirai DDoS Variant Server Response M2 |
rev 2 |
2021-12-09 |