| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 12,711 | 2015/01/20 | 2015531 | ET TROJAN DNS Query to RunForestRun DGA Domain 16-alpha.waw.pl; [1,2] |
| 12,710 | 2015/01/20 | 2015530 | ET TROJAN HTTP Request to RunForestRun DGA Domain 16-alpha.waw.pl; [1,2] |
| 12,709 | 2015/01/20 | 2015529 | ET INFO Googlebot User-Agent Outbound (likely malicious); |
| 12,708 | 2015/01/20 | 2015528 | ET TROJAN Win32.Agent2.fher Related User-Agent (Microsoft Internet Updater); |
| 12,707 | 2015/01/20 | 2015527 | ET WEB_SERVER Fake Googlebot UA 2 Inbound; [1,2] |
| 12,706 | 2015/01/20 | 2015526 | ET WEB_SERVER Fake Googlebot UA 1 Inbound; [1,2] |
| 12,705 | 2015/01/20 | 2015525 | ET DELETED Blackhole try eval prototype string splitting evasion Jul 24 2012; |
| 12,704 | 2015/01/20 | 2015524 | ET CURRENT_EVENTS c3284d Malware Network Compromised Redirect (comments 3); [1] |
| 12,703 | 2015/01/20 | 2015523 | ET TROJAN Pakes2 - Checkin - /test.php; |
| 12,702 | 2015/01/20 | 2015522 | ET TROJAN Pakes2 - Client Alive; |
| 12,701 | 2015/01/20 | 2015521 | ET TROJAN Pakes2 - Server Hello; |
| 12,700 | 2015/01/20 | 2015520 | ET DELETED Blackhole Landing Page Applet Structure; |
| 12,699 | 2015/01/20 | 2015519 | ET DELETED Blackhole Landing Page Split String Obfuscated Math Floor - July 19th 2012; |
| 12,698 | 2015/01/20 | 2015518 | ET CURRENT_EVENTS .PHP being served from WP 1-flash-gallery Upload DIR (likely malicious); |
| 12,697 | 2015/01/20 | 2015517 | ET CURRENT_EVENTS .HTM being served from WP 1-flash-gallery Upload DIR (likely malicious); |
| 12,696 | 2015/01/20 | 2015516 | ET CURRENT_EVENTS RedKit PluginDetect Rename Saigon; |
| 12,695 | 2015/01/20 | 2015515 | ET EXPLOIT Potential RoaringBeast ProFTPd Exploit Specific (CHMOD 777); [1,2] |
| 12,694 | 2015/01/20 | 2015514 | ET EXPLOIT Potential RoaringBeast ProFTPd Exploit nsswitch.conf Upload; [1,2] |
| 12,693 | 2015/01/20 | 2015513 | ET EXPLOIT Potential RoaringBeast ProFTPd Exploit Specific config files upload; [1,2] |
| 12,692 | 2015/01/20 | 2015512 | ET TROJAN Urlzone/Bebloh/Bublik Checkin /was/vas.php; [1,2,3,4] |
| 12,691 | 2015/01/20 | 2015511 | ET TROJAN ProxyBox - ProxyBotCommand - FORCE_AUTHENTICATION*; [1] |
| 12,690 | 2015/01/20 | 2015510 | ET TROJAN ProxyBox - ProxyBotCommand - I_AM; [1] |
| 12,689 | 2015/01/20 | 2015509 | ET DELETED ProxyBox - HTTP CnC - proxy_info.php; [1] |
| 12,688 | 2015/01/20 | 2015508 | ET TROJAN ProxyBox - HTTP CnC - botinfo.php; [1] |
| 12,687 | 2015/01/20 | 2015506 | ET TROJAN ProxyBox - HTTP CnC - get_servers.php; [1] |
| 12,686 | 2015/01/20 | 2015505 | ET TROJAN ProxyBox - HTTP CnC - getiplist.php; [1] |
| 12,685 | 2015/01/20 | 2015504 | ET TROJAN ProxyBox - HTTP CnC - POST 1-letter.php; [1] |
| 12,684 | 2015/01/20 | 2015503 | ET TROJAN ProxyBox - HTTP CnC - .com.tw/check_version.php; [1] |
| 12,683 | 2015/01/20 | 2015502 | ET TROJAN ProxyBox -ProxyBotCommand - CHECK_ME; [1] |
| 12,682 | 2015/01/20 | 2015501 | ET TROJAN ProxyBox - HTTP CnC - Checkin Response; [1] |
| 12,681 | 2015/01/20 | 2015500 | ET POLICY Geo Location IP info online service (geoiptool.com); |
| 12,680 | 2015/01/20 | 2015499 | ET WEB_SPECIFIC_APPS Wordpress Plugin Newsletter data parameter Local File Inclusion vulnerability; [1] |
| 12,679 | 2015/01/20 | 2015498 | ET WEB_SPECIFIC_APPS Joomla com_hello controller parameter Local File Inclusion vulnerability; [1] |
| 12,678 | 2015/01/20 | 2015497 | ET WEB_SPECIFIC_APPS WordPress Download Manager cid parameter Cross-Site Scripting Attempt; [1] |
| 12,677 | 2015/01/20 | 2015496 | ET WEB_SPECIFIC_APPS WordPress church_admin Plugin id parameter Cross-Site Scripting Attempt; [1] |
| 12,676 | 2015/01/20 | 2015495 | ET WEB_SPECIFIC_APPS Web Edition mod parameter Local File Inclusion vulnerability; [1] |
| 12,675 | 2015/01/20 | 2015494 | ET WEB_SPECIFIC_APPS Wordpress Plugin PICA Photo Gallery imgname parameter Local File Inclusion Attempt; [1] |
| 12,674 | 2015/01/20 | 2015493 | ET ACTIVEX Possible CommuniCrypt Mail SMTP ActiveX AddAttachments Method Access Stack Buffer Overflow; [1] |
| 12,673 | 2015/01/20 | 2015492 | ET ACTIVEX Possible CA BrightStor ARCserve Backup ActiveX AddColumn Method Access Buffer Overflow 2; [1] |
| 12,672 | 2015/01/20 | 2015491 | ET ACTIVEX Possible CA BrightStor ARCserve Backup ActiveX AddColumn Method Access Buffer Overflow; [1] |
| 12,671 | 2015/01/20 | 2015490 | ET ACTIVEX Possible beSTORM ActiveX (WinGraphviz.dll) Remote Heap Overflow; [1] |
| 12,670 | 2015/01/20 | 2015489 | ET TROJAN W32/OnlineGame.DaGame Variant CnC Checkin; |
| 12,669 | 2015/01/20 | 2015488 | ET CURRENT_EVENTS Blackhole Java Exploit Recent Jar (3); |
| 12,668 | 2015/01/20 | 2015487 | ET CURRENT_EVENTS Blackhole Java Exploit Recent Jar (2); |
| 12,667 | 2015/01/20 | 2015486 | ET CURRENT_EVENTS Blackhole Java Exploit Recent Jar (1); |
| 12,666 | 2015/01/20 | 2015485 | ET POLICY TuneIn Internet Radio Usage Detected; [1] |
| 12,665 | 2015/01/20 | 2015484 | ET SCAN w3af User-Agent 2; |
| 12,664 | 2015/01/20 | 2015483 | ET INFO Java .jar request to dotted-quad domain; |
| 12,663 | 2015/01/20 | 2015482 | ET TROJAN ZeroAccess Outbound udp traffic detected; |
| 12,662 | 2015/01/20 | 2015481 | ET CURRENT_EVENTS Compromised Wordpress Install Serving Malicious JS; [1] |
| < 281 282 283 284 285 286 287 288 289 290 > |