| 번호 | 날짜 | ID | 시그니처 (Total Ruleset: 27,111개) |
| 25,261 | 2017/10/12 | 2024833 | ET POLICY Observed IP Lookup Domain (l2 .io in TLS SNI); |
| 25,260 | 2017/10/12 | 2024836 | ET CURRENT_EVENTS SUSPICIOUS DOC Download from commonly abused file share site; |
| 25,259 | 2017/10/12 | 2024829 | ET INFO Download of Embedded OpenType (EOT) File flowbit set; [1] |
| 25,258 | 2017/10/10 | 2024822 | ET TROJAN CCleaner Backdoor DGA Jul 2018; [1] |
| 25,257 | 2017/10/10 | 2024824 | ET TROJAN CCleaner Backdoor DGA Sep 2018; [1] |
| 25,256 | 2017/10/10 | 2024820 | ET TROJAN CCleaner Backdoor DGA May 2018; [1] |
| 25,255 | 2017/10/10 | 2024821 | ET TROJAN CCleaner Backdoor DGA Jun 2018; [1] |
| 25,254 | 2017/10/10 | 2024826 | ET TROJAN CCleaner Backdoor DGA Nov 2018; [1] |
| 25,253 | 2017/10/10 | 2024825 | ET TROJAN CCleaner Backdoor DGA Oct 2018; [1] |
| 25,252 | 2017/10/10 | 2024819 | ET TROJAN CCleaner Backdoor DGA Apr 2018; [1] |
| 25,251 | 2017/10/10 | 2024823 | ET TROJAN CCleaner Backdoor DGA Aug 2018; [1] |
| 25,250 | 2017/10/10 | 2024828 | ET CURRENT_EVENTS Observed DNS Query to Browser Coinminer (crypto-loot[.]com); |
| 25,249 | 2017/10/10 | 2024827 | ET TROJAN CCleaner Backdoor DGA Dec 2018; [1] |
| 25,248 | 2017/10/10 | 2024818 | ET TROJAN CCleaner Backdoor DGA Mar 2018; [1] |
| 25,247 | 2017/10/10 | 2024817 | ET TROJAN CCleaner Backdoor DGA Feb 2018; [1] |
| 25,246 | 2017/10/10 | 2024816 | ET TROJAN CCleaner Backdoor DGA Jan 2018; [1] |
| 25,245 | 2017/10/07 | 2023043 | ET CURRENT_EVENTS Successful Apple Suspended Account Phish M2 Aug 09 2016; |
| 25,244 | 2017/10/07 | 2024814 | ET EXPLOIT Likely Struts S2-053-CVE-2017-12611 Exploit Attempt M1; |
| 25,243 | 2017/10/07 | 2024815 | ET EXPLOIT Likely Struts S2-053-CVE-2017-12611 Exploit Attempt M2; |
| 25,242 | 2017/10/07 | 2023042 | ET CURRENT_EVENTS Successful Apple Suspended Account Phish M1 Aug 09 2016; |
| 25,241 | 2017/10/06 | 2405130 | ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] |
| 25,240 | 2017/10/06 | 2024808 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,239 | 2017/10/06 | 2024807 | ET CURRENT_EVENTS Possible Facebook Phishing Landing - Title over non SSL; |
| 25,238 | 2017/10/06 | 2024813 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,237 | 2017/10/06 | 2024804 | ET TROJAN Lazarus Decafett DNS Lookup 2; [1] |
| 25,236 | 2017/10/06 | 2024811 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,235 | 2017/10/06 | 2024812 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,234 | 2017/10/06 | 2024805 | ET TROJAN Lazarus Decafett DNS Lookup 3; [1] |
| 25,233 | 2017/10/06 | 2024806 | ET TROJAN Lazarus Decafett DNS Lookup 4; [1] |
| 25,232 | 2017/10/06 | 2024809 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,231 | 2017/10/06 | 2024810 | ET WEB_SPECIFIC_APPS Apache Tomcat Possible CVE-2017-12617 JSP Upload Bypass Attempt; |
| 25,230 | 2017/10/06 | 2024803 | ET TROJAN Lazarus Decafett DNS Lookup 1; [1] |
| 25,229 | 2017/10/05 | 2405129 | ET CNC Shadowserver Reported CnC Server Port 65267 Group 1; [1,2] |
| 25,228 | 2017/10/05 | 2405126 | ET CNC Shadowserver Reported CnC Server Port 47221 Group 1; [1,2] |
| 25,227 | 2017/10/05 | 2405128 | ET CNC Shadowserver Reported CnC Server Port 54321 Group 1; [1,2] |
| 25,226 | 2017/10/05 | 2405127 | ET CNC Shadowserver Reported CnC Server Port 51987 Group 1; [1,2] |
| 25,225 | 2017/10/05 | 2024798 | ET CURRENT_EVENTS Possible BMO Bank of Montreal Phishing Landing - Title over non SSL; |
| 25,224 | 2017/10/05 | 2024795 | ET CURRENT_EVENTS Possible Scotiabank Phishing Landing - Title over non SSL; |
| 25,223 | 2017/10/05 | 2024802 | ET CURRENT_EVENTS Successful Santander Phish M2 Oct 04 2017; |
| 25,222 | 2017/10/05 | 2024801 | ET CURRENT_EVENTS Successful Santander Phish M3 Oct 04 2017; |
| 25,221 | 2017/10/05 | 2024797 | ET CURRENT_EVENTS Possible CIBC Phishing Landing - Title over non SSL; |
| 25,220 | 2017/10/05 | 2024796 | ET CURRENT_EVENTS Possible Desjardins Phishing Landing - Title over non SSL; |
| 25,219 | 2017/10/05 | 2024799 | ET CURRENT_EVENTS Phishing Landing Oct 04 2017; |
| 25,218 | 2017/10/05 | 2024794 | ET MALWARE Java.Deathbot Requesting Proxies; |
| 25,217 | 2017/10/05 | 2024800 | ET CURRENT_EVENTS Successful Santander Phish M1 Oct 04 2017; |
| 25,216 | 2017/10/05 | 2024793 | ET MALWARE [PTsecurity] DeathBot.Java (Minecraft Spambot); |
| 25,215 | 2017/10/04 | 2405121 | ET CNC Shadowserver Reported CnC Server Port 40669 Group 1; [1,2] |
| 25,214 | 2017/10/04 | 2405119 | ET CNC Shadowserver Reported CnC Server Port 32768 Group 1; [1,2] |
| 25,213 | 2017/10/04 | 2405123 | ET CNC Shadowserver Reported CnC Server Port 51987 Group 1; [1,2] |
| 25,212 | 2017/10/04 | 2405124 | ET CNC Shadowserver Reported CnC Server Port 54321 Group 1; [1,2] |
| < 31 32 33 34 35 36 37 38 39 40 > |