| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 14,961 | 2015/01/20 | 2017864 | ET CURRENT_EVENTS CrimePack HCP Exploit; |
| 14,960 | 2015/01/20 | 2017863 | ET CURRENT_EVENTS CrimePack Java Exploit; |
| 14,959 | 2015/01/20 | 2017862 | ET CURRENT_EVENTS CrimePack PDF Exploit; |
| 14,958 | 2015/01/20 | 2017861 | ET CURRENT_EVENTS Grandsoft/SofosFO EK Java Payload URI Struct; |
| 14,957 | 2015/01/20 | 2017860 | ET TROJAN W32/Ke3chang.MyWeb.APT Eourdegh Campaign CnC Beacon; [1,2] |
| 14,956 | 2015/01/20 | 2017859 | ET TROJAN W32/Ke3chang.Dream.APT Campaign CnC Beacon 2; [1,2] |
| 14,955 | 2015/01/20 | 2017858 | ET TROJAN W32/Ke3chang.BMW.APT Campaign CnC Beacon; [1,2] |
| 14,954 | 2015/01/20 | 2017857 | ET TROJAN W32/Ke3chang.MyWeb.APT Campaign CnC Beacon; [1,2] |
| 14,953 | 2015/01/20 | 2017856 | ET TROJAN W32/Ke3chang.Snake.APT Campaign CnC Beacon; [1,2] |
| 14,952 | 2015/01/20 | 2017855 | ET TROJAN W32/Ke3chang.MovieStar.APT Campaign CnC Beacon; [1,2] |
| 14,951 | 2015/01/20 | 2017854 | ET CURRENT_EVENTS PHP script in OptimizePress Upload Directory Possible WebShell Access; [1] |
| 14,950 | 2015/01/20 | 2017853 | ET WEB_SPECIFIC_APPS Wordpress OptimizePress Arbitratry File Upload; [1] |
| 14,949 | 2015/01/20 | 2017852 | ET CURRENT_EVENTS HiMan EK Secondary Landing; |
| 14,948 | 2015/01/20 | 2017851 | ET CURRENT_EVENTS HiMan EK Exploit URI Struct; |
| 14,947 | 2015/01/20 | 2017850 | ET CURRENT_EVENTS SPL2 PluginDetect Data Hash; |
| 14,946 | 2015/01/20 | 2017849 | ET CURRENT_EVENTS Possible CVE-2013-2551 As seen in SPL2 EK; |
| 14,945 | 2015/01/20 | 2017848 | ET CURRENT_EVENTS SPL2 EK SilverLight; |
| 14,944 | 2015/01/20 | 2017847 | ET CURRENT_EVENTS Browlock Landing Page URI Struct; |
| 14,943 | 2015/01/20 | 2017846 | ET CURRENT_EVENTS DRIVEBY FakeUpdate - URI - Payload Requested; |
| 14,942 | 2015/01/20 | 2017845 | ET CURRENT_EVENTS DRIVEBY FakeUpdate - URI - /styles/javaupdate.css; |
| 14,941 | 2015/01/20 | 2017844 | ET CURRENT_EVENTS Styx Exploit Kit - EOT Exploit; |
| 14,940 | 2015/01/20 | 2017843 | ET CURRENT_EVENTS SUSPICIOUS pony.exe in URI; |
| 14,939 | 2015/01/20 | 2017842 | ET CURRENT_EVENTS SUSPICIOUS winhost(32|64).exe in URI; |
| 14,938 | 2015/01/20 | 2017841 | ET CURRENT_EVENTS Styx Exploit Kit - HTML; |
| 14,937 | 2015/01/20 | 2017840 | ET CURRENT_EVENTS Styx Exploit Kit - JAR Exploit; |
| 14,936 | 2015/01/20 | 2017839 | ET TROJAN Vawtrak/NeverQuest Checkin; |
| 14,935 | 2015/01/20 | 2017838 | ET TROJAN HTTP Connection To Known Sinkhole Domain sinkdns.org; |
| 14,934 | 2015/01/20 | 2017837 | ET DELETED Possible Zbot Activity Common Download Struct; |
| 14,933 | 2015/01/20 | 2017836 | ET TROJAN Possible Zbot Activity Common Download Struct; |
| 14,932 | 2015/01/20 | 2017835 | ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Exploited Message; |
| 14,931 | 2015/01/20 | 2017834 | ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Mambo Scanning Message; |
| 14,930 | 2015/01/20 | 2017833 | ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS PerlBot Version Message; |
| 14,929 | 2015/01/20 | 2017832 | ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attack Done Message; |
| 14,928 | 2015/01/20 | 2017831 | ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attacking Message; |
| 14,927 | 2015/01/20 | 2017830 | ET WEB_SERVER Perl/Mambo.WebShell Spreader IRC No Open Ports Message; |
| 14,926 | 2015/01/20 | 2017829 | ET WEB_SERVER Perl/Mambo.WebShell Spreader IRC Open Ports Message; |
| 14,925 | 2015/01/20 | 2017828 | ET WEB_SERVER Perl/Mambo.WebShell Spreader IRC Scanning Message; |
| 14,924 | 2015/01/20 | 2017827 | ET CURRENT_EVENTS SPL2 EK Dec 09 2013 Java Request; |
| 14,923 | 2015/01/20 | 2017826 | ET CURRENT_EVENTS SPL2 EK Landing Dec 09 2013; |
| 14,922 | 2015/01/20 | 2017825 | ET EXPLOIT Zollard PHP Exploit UA Outbound; [1] |
| 14,921 | 2015/01/20 | 2017824 | ET CURRENT_EVENTS Neutrino Landing Page Dec 09 2013; |
| 14,920 | 2015/01/20 | 2017823 | ET CURRENT_EVENTS heapSpray in jjencode; [1] |
| 14,919 | 2015/01/20 | 2017822 | ET WEB_SERVER IIS ISN BackDoor Command Get Logpath; [1] |
| 14,918 | 2015/01/20 | 2017821 | ET WEB_SERVER IIS ISN BackDoor Command Delete Log; [1] |
| 14,917 | 2015/01/20 | 2017820 | ET WEB_SERVER IIS ISN BackDoor Command GetLog; [1] |
| 14,916 | 2015/01/20 | 2017819 | ET CURRENT_EVENTS Styx EK iexp.html; |
| 14,915 | 2015/01/20 | 2017818 | ET TROJAN Common Zbot EXE filename Dec 09 2013; |
| 14,914 | 2015/01/20 | 2017817 | ET CURRENT_EVENTS Sweet Orange Landing Page Dec 09 2013; |
| 14,913 | 2015/01/20 | 2017816 | ET TROJAN Possible Upatre Downloader SSL certificate; [1] |
| 14,912 | 2015/01/20 | 2017815 | ET CURRENT_EVENTS Possible Safe/CritX/FlashPack Edwards Packed PluginDetect; |
| < 241 242 243 244 245 246 247 248 249 250 > |