| suricata |
ET MALWARE W32/HelloBridge.Backdoor Register CnC Beacon |
rev 4 |
2020-09-24 |
| suricata |
ET WEB_SPECIFIC_APPS TimThumb Remote Command Execution |
rev 4 |
2020-09-24 |
| suricata |
ET WEB_SERVER ATTACKER WebShell - Zehir4.asp |
rev 6 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Adultdns.net |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Redirectme.net |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain Zapto.org |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain serveblog.net |
rev 4 |
2020-09-23 |
| suricata |
ET SCAN Hikvision DVR attempted Synology Recon Scan |
rev 4 |
2020-09-23 |
| suricata |
ET INFO HTTP Connection To DDNS Domain myftp.com |
rev 4 |
2020-09-23 |
| snort |
ET TROJAN RampantKitten APT TelB Python Variant - CnC Checkin M1 |
rev 2 |
2020-09-22 |
| snort |
ET TROJAN RampantKitten APT TelB Python Variant - CnC Checkin M2 |
rev 2 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS lgfxsrvc.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS wimhost.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET EXPLOIT_KIT CritXPack Jar Request |
rev 14 |
2020-09-22 |
| suricata |
ET WEB_SERVER Apache Tomcat Boundary Overflow DOS/File Upload Attempt |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS alg.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS mssrs.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET WEB_SERVER WEBSHELL pwn.jsp shell |
rev 6 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS waulct.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET WEB_SERVER IIS ISN BackDoor Command GetLog |
rev 7 |
2020-09-22 |
| suricata |
ET HUNTING Suspicious Possible Process Dump in POST body |
rev 6 |
2020-09-22 |
| suricata |
ET INFO myip.ru IP lookup |
rev 6 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS winhosts.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| suricata |
ET MALWARE RampantKitten APT TelB Python Variant - CnC Checkin M2 |
rev 1 |
2020-09-22 |
| suricata |
ET MALWARE Alman Dropper Checkin |
rev 7 |
2020-09-22 |
| suricata |
ET HUNTING SUSPICIOUS winlog.exe in URI Probable Process Dump/Trojan Download |
rev 4 |
2020-09-22 |
| snort |
ET CURRENT_EVENTS Successful Generic Phish 2020-09-21 |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| snort |
ET INFO Suspicious HTTP POST to Free Web Host Atwebpages |
rev 2 |
2020-09-21 |
| snort |
ET TROJAN RedDelta Poison Ivy Domain in DNS Lookup |
rev 2 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP POST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP REQUEST SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP GET SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP COOKIE SuperGlobal in POST |
rev 4 |
2020-09-21 |
| suricata |
ET HUNTING Suspicious HTTP POST to Free Web Host Atwebpages |
rev 2 |
2020-09-21 |
| suricata |
ET EXPLOIT_KIT DotkaChef EK initial landing from Oct 02 2013 mass-site compromise EK campaign |
rev 4 |
2020-09-21 |
| suricata |
ET MALWARE W32/Caphaw Requesting Additional Modules From CnC |
rev 7 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP SERVER SuperGlobal in URI |
rev 4 |
2020-09-21 |
| suricata |
ET WEB_SERVER PHP COOKIE SuperGlobal in URI |
rev 4 |
2020-09-21 |