""ET INFO SUSPCIOUS Non-standard base64 charset used for encoding""
SID: 2017364
Revision: 6
Class Type: bad-unknown
Metadata: created_at 2013_08_21, updated_at 2013_08_21
Reference:
Protocol: tcp
Source Network: $EXTERNAL_NET
Source Port: $HTTP_PORTS
Destination Network: $HOME_NET
Destination Port: any
Flow: established,from_server
Contents:
-
Value: " & 15) << 4)"
-
Value: "(|22|"
-
Value: !"|22|"
-
Value: "|22|"
-
Value: !"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ"
-
Value: !"0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz"
-
Value: !"abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ"
-
Value: !"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"
-
Value: !"ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789abcdefghijklmnopqrstuvwxyz"
-
Value: !"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
Within: 62
PCRE:
Special Options:
-
file_data
-
fast_pattern