01/21-00:55:09.780732 [**] [1:22466:7] E2[rb] NETBIOS SMB-DS IPC$ unicode share access [**] [Classification: Generic Protocol Command Decode] [Priority: 3] {TCP} 222.223.194.28:63383 -> 192.168.1.240:445 01/21-00:55:10.678680 [**] [1:299913:1] E2[rb] SHELLCODE x86 0x90 unicode NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 222.223.194.28:63383 -> 192.168.1.240:445 01/21-00:55:11.323490 [**] [1:3000003:99] E3[rb] BotHunter HTTP-based .exe Upload on backdoor port [**] [Classification: Misc activity] [Priority: 3] {TCP} 192.168.1.240:1029 -> 83.68.16.6:80 01/21-00:55:11.726049 [**] [1:299913:1] E2[rb] SHELLCODE x86 0x90 unicode NOOP [**] [Classification: Executable code was detected] [Priority: 1] {TCP} 222.223.194.28:63383 -> 192.168.1.240:445