| suricata |
ET INFO Inbound /uploadify.php Access |
rev 4 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT NeoSploit - Version Enumerated - Java |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE DNS Query for Known Malicious Domain Observed Serving Various Phish Campaigns |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE LYCEUM CnC Domain Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Win32/Varenyky Spambot CnC in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT33 CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET WEB_SERVER WebShell - Unknown - .php?x=img&img= |
rev 4 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Suspicious *.orge.pl Domain |
rev 6 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET INFO DNS Query to a Reverse Proxy Service Observed |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .eu.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .us.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Possible ShadowHammer DNS Lookup |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE MirrorThief CnC in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Domen SocEng CnC Observed in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE Chafer CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE ServHelper CnC Domain |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT Geutebruck Attempted Remote Command Injection Outbound |
rev 4 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT DRIVEBY SPL - Java Exploit Requested - /spl_data/ |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Unsupported/Fake Internet Explorer Version MSIE 5. |
rev 15 |
2020-09-17 |
| suricata |
ET MALWARE DonotGroup APT CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET MALWARE ELF/Emptiness CnC Domain in DNS Query |
rev 3 |
2020-09-17 |
| suricata |
ET MALWARE APT28 CnC Domain DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET EXPLOIT_KIT Unknown EK Landing URL |
rev 13 |
2020-09-17 |
| suricata |
ET MALWARE DNSChanger CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |
| suricata |
ET PHISHING Possible Protonmail Phishing Domain in DNS Query |
rev 4 |
2020-09-17 |
| suricata |
ET PHISHING Successful Phish Gmail Recovery Information 2015-10-01 |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Urlzone/Bebloh/Bublik Checkin /was/uid.php |
rev 4 |
2020-09-17 |
| suricata |
ET INFO Query for Suspicious .ca.tf Domain |
rev 5 |
2020-09-17 |
| suricata |
ET MALWARE Gift Cardshark CnC Domain in DNS Lookup |
rev 3 |
2020-09-17 |