alert tcp $EXTERNAL_NET 1024:65535 -> $HOME_NET 1024:65535 (msg:"BLEEDING-EDGE CURRENT_EVENTS Unknown Bot C&C Channel -- Please report to
bleeding@bleedingthreats.net"; flowbits:isset,BS.unknown.2; flow:established,from_server; dsize:64; classtype:trojan-activity; tag:session; sid:2006360; rev:1;)
Added 2007-06-22 01:15:54 UTC