| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 14,511 | 2015/01/20 | 2017406 | ET CURRENT_EVENTS Rawin EK Java /victoria.jar; |
| 14,510 | 2015/01/20 | 2017405 | ET CURRENT_EVENTS Sweet Orange Landing with Applet Aug 30 2013; |
| 14,509 | 2015/01/20 | 2017404 | ET WORM W32/Njw0rm CnC Beacon; [1] |
| 14,508 | 2015/01/20 | 2017403 | ET WEB_SERVER WebShell Generic eval of convert_uudecode; |
| 14,507 | 2015/01/20 | 2017402 | ET WEB_SERVER WebShell Generic eval of gzuncompress; |
| 14,506 | 2015/01/20 | 2017401 | ET WEB_SERVER WebShell Generic eval of str_rot13; |
| 14,505 | 2015/01/20 | 2017400 | ET WEB_SERVER WebShell Generic eval of gzinflate; |
| 14,504 | 2015/01/20 | 2017399 | ET WEB_SERVER WebShell Generic eval of base64_decode; |
| 14,503 | 2015/01/20 | 2017398 | ET POLICY Internal Host Retrieving External IP via icanhazip.com - Possible Infection; |
| 14,502 | 2015/01/20 | 2017397 | ET DOS Apple CoreText Exploit Specific string; [1] |
| 14,501 | 2015/01/20 | 2017396 | ET CURRENT_EVENTS CoolEK Landing Aug 29 2013; |
| 14,500 | 2015/01/20 | 2017395 | ET TROJAN Likely Bot Nick in IRC ([country|so version|CPU]); |
| 14,499 | 2015/01/20 | 2017394 | ET WEB_SERVER WebShell - ASPyder - File Upload - Response; |
| 14,498 | 2015/01/20 | 2017393 | ET WEB_SERVER WebShell - ASPyder -File Upload - POST Structure; |
| 14,497 | 2015/01/20 | 2017392 | ET WEB_SERVER WebShell - ASPyder - File Browser - POST Structure; |
| 14,496 | 2015/01/20 | 2017391 | ET WEB_SERVER WebShell - ASPyder - Auth Prompt; |
| 14,495 | 2015/01/20 | 2017390 | ET WEB_SERVER WebShell - ASPyder - File Browser - Interface; |
| 14,494 | 2015/01/20 | 2017389 | ET WEB_SERVER WebShell - ASPyder - Auth Creds; |
| 14,493 | 2015/01/20 | 2017388 | ET CURRENT_EVENTS Possible Sweet Orange Payload Download Aug 28 2013; |
| 14,492 | 2015/01/20 | 2017387 | ET CURRENT_EVENTS Unknown EK Landing Aug 27 2013; |
| 14,491 | 2015/01/20 | 2017386 | ET CURRENT_EVENTS Possible APT-12 Related C2; [1] |
| 14,490 | 2015/01/20 | 2017385 | ET TROJAN Trojan.Dirtjump Checkin; [1] |
| 14,489 | 2015/01/20 | 2017384 | ET TROJAN Drive DDoS Tool byte command received key=okokokjjk; [1] |
| 14,488 | 2015/01/20 | 2017383 | ET TROJAN Drive DDoS Tool byte command received key=okokokjjk; [1] |
| 14,487 | 2015/01/20 | 2017382 | ET TROJAN Drive DDoS Tool post2 command received key=okokokjjk; [1] |
| 14,486 | 2015/01/20 | 2017381 | ET TROJAN Drive DDoS Tool post1 command received key=okokokjjk; [1] |
| 14,485 | 2015/01/20 | 2017380 | ET TROJAN Drive DDoS Tool smart command received key=okokokjjk; [1] |
| 14,484 | 2015/01/20 | 2017379 | ET TROJAN Drive DDoS Tool long command received key=okokokjjk; [1] |
| 14,483 | 2015/01/20 | 2017378 | ET TROJAN Drive DDoS Tool get command received key=okokokjjk; [1] |
| 14,482 | 2015/01/20 | 2017377 | ET TROJAN Win64/Vabushky.A Malicious driver download; [1] |
| 14,481 | 2015/01/20 | 2017376 | ET CURRENT_EVENTS Possible BHEK Landing URI Format; |
| 14,480 | 2015/01/20 | 2017375 | ET CURRENT_EVENTS CookieBomb Generic HTML Format; |
| 14,479 | 2015/01/20 | 2017374 | ET CURRENT_EVENTS CookieBomb Generic PHP Format; |
| 14,478 | 2015/01/20 | 2017373 | ET CURRENT_EVENTS Possible CookieBomb Generic JavaScript Format; |
| 14,477 | 2015/01/20 | 2017372 | ET CURRENT_EVENTS Sweet Orange Landing with Applet Aug 26 2013; |
| 14,476 | 2015/01/20 | 2017371 | ET TROJAN Win32/Neurevt.A checkin; |
| 14,475 | 2015/01/20 | 2017370 | ET CURRENT_EVENTS AutoIT C&C Check-In 2013-08-23 URL; [1] |
| 14,474 | 2015/01/20 | 2017369 | ET TROJAN Bitcoin variant Checkin; [1] |
| 14,473 | 2015/01/20 | 2017368 | ET TROJAN Possible Avatar RootKit Yahoo Group Search; [1] |
| 14,472 | 2015/01/20 | 2017367 | ET TROJAN Possible Win32/Napolar.A URL Response; |
| 14,471 | 2015/01/20 | 2017366 | ET WEB_SERVER Coldfusion 9 Auth Bypass CVE-2013-0632; [1] |
| 14,470 | 2015/01/20 | 2017365 | ET TROJAN SUSPICIOUS UA (iexplore); |
| 14,469 | 2015/01/20 | 2017364 | ET CURRENT_EVENTS Blackhole obfuscated base64 key string; |
| 14,468 | 2015/01/20 | 2017363 | ET INFO InetSim Response from External Source Possible SinkHole; |
| 14,467 | 2015/01/20 | 2017362 | ET TROJAN Win32/Napolar.A Getting URL; |
| 14,466 | 2015/01/20 | 2017361 | ET TROJAN PoisonIvy.fishplay Keepalive to CnC; [1] |
| 14,465 | 2015/01/20 | 2017360 | ET TROJAN PoisonIvy.XGstone Keepalive to CnC; [1] |
| 14,464 | 2015/01/20 | 2017359 | ET TROJAN PoisonIvy.smallfish Keepalive to CnC; [1] |
| 14,463 | 2015/01/20 | 2017358 | ET TROJAN PoisonIvy.xiaoxiaohuli Keepalive to CnC; [1] |
| 14,462 | 2015/01/20 | 2017357 | ET TROJAN PoisonIvy.wwwst@Admin Keepalive to CnC; [1] |
| < 251 252 253 254 255 256 257 258 259 260 > |