11/20-04:05:51.842597 [**] [1:299913:1] E2[rb] SHELLCODE x86 0x90 unicode NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 118.219.19.190:49537 -> 192.168.1.151:135 11/20-04:05:52.080025 [**] [1:52123:3] E5[rb] REGISTERED FREE ATTACK-RESPONSES Microsoft cmd.exe banner [**] [Classification: Successful Administrator Privilege Gain] [Priority: 1] {TCP} 192.168.1.151:1027 -> 118.219.19.190:707 11/20-04:05:53.743024 [**] [1:3001441:1] E3[rb] TFTP GET .exe from external source [**] [Classification: Successful Administrator Privilege Gain] [Priority: 1] {UDP} 192.168.1.151:1028 -> 118.219.19.190:69 11/20-04:05:53.743024 [**] [1:2008120:1] E3[rb] ET POLICY Outbound TFTP Read Request [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 192.168.1.151:1028 -> 118.219.19.190:69 11/20-04:05:53.743024 [**] [1:1444:3] E3[rb] TFTP GET from external source [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 192.168.1.151:1028 -> 118.219.19.190:69 11/20-04:06:03.093762 [**] [1:3001441:1] E3[rb] TFTP GET .exe from external source [**] [Classification: Successful Administrator Privilege Gain] [Priority: 1] {UDP} 192.168.1.151:1029 -> 118.219.19.190:69 11/20-04:06:03.093762 [**] [1:2008120:1] E3[rb] ET POLICY Outbound TFTP Read Request [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 192.168.1.151:1029 -> 118.219.19.190:69 11/20-04:06:03.093762 [**] [1:1444:3] E3[rb] TFTP GET from external source [**] [Classification: Potentially Bad Traffic] [Priority: 2] {UDP} 192.168.1.151:1029 -> 118.219.19.190:69 11/20-04:07:04.373458 [**] [1:2003603:2] E4[rb] ET TROJAN W32.Virut.A joining an IRC Channel [**] [Classification: A Network Trojan was detected] [Priority: 1] {TCP} 192.168.1.151:1033 -> 218.93.205.30:65520 11/20-04:07:06.840972 [**] [1:3000003:99] E3[rb] BotHunter HTTP-based .exe Upload on backdoor port [**] [Classification: Misc activity] [Priority: 3] {TCP} 192.168.1.151:1035 -> 218.93.205.19:80 11/20-04:07:19.302889 [**] [1:2002750:10] ET POLICY Reserved IP Space Traffic - Bogon Nets 2 [**] [Classification: Potentially Bad Traffic] [Priority: 2] {TCP} 173.45.105.218:8392 -> 192.168.1.151:1041