Rule History

SID: 900509159 • Source: abuse.ch/feodotracker

Versions (11)

Version DetailsCurrent

Rev: 1 • Mar 7, 2026, 5:30 PM

Message:

Feodo Tracker: potential Emotet CnC Traffic detected

Rule:

alert tcp $HOME_NET any -> [162.243.103.246] 8080 (msg:"Feodo Tracker: potential Emotet CnC Traffic detected"; threshold:type limit, track by_src, seconds 60, count 1; classtype:trojan-activity; reference:url, feodotracker.abuse.ch/browse/host/162.243.103.246/; sid:900509159; rev:1;)

Created:

Mar 7, 2026, 5:30 PM

Updated:

Mar 7, 2026, 5:30 PM

DB Created:

Mar 7, 2026, 5:34 PM

DB Updated:

Mar 7, 2026, 5:34 PM

Filename:

feodotracker.rules