🐾 - 🚨 Suspicious flow to 1.1.1.1 on port 80 - Possible Zerobot 🤖 🐧 connection test - Suricata Rule 3300724 (pawpatrules)

🐾 - 🚨 Suspicious flow to 1.1.1.1 on port 80 - Possible Zerobot 🤖 🐧 connection test

SID: 3300724Rev: 11 views

Sourcepawpatrules

CreatedDecember 7, 2022

UpdatedDecember 7, 2022

Classificationtrojan-activity

alert tcp $HOME_NET any -> 1.1.1.1 80 (msg:"🐾 - 🚨 Suspicious flow to 1.1.1.1 on port 80 - Possible Zerobot 🤖 🐧 connection test"; flow:to_server, stateless; reference:url,https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities; metadata:created_at 2022_12_07, updated_at 2022_12_07; sid:3300724; rev:1; classtype:trojan-activity;)

References

url	https://www.fortinet.com/blog/threat-research/zerobot-new-go-based-botnet-campaign-targets-multiple-vulnerabilities

🐾 - 🚨 Suspicious flow to 1.1.1.1 on port 80 - Possible Zerobot 🤖 🐧 connection test

References

Metadata

Comments (0)