DNS Malware
- Ashish Khabde
Analytics
DNS malware is software used to disrupt your DNS service, gather sensitive information, or gain access to your appliance. It can include downloaders, backdoors, trojan horses, and other malicious software.
The following table lists the auto rules that are used to mitigate DNS malware when forwarding DNS requests to a resolver such as a Microsoft DNS server.
| Rule ID | Rule Type | Rule Name | Description | Enable Condition | Parameters | Comments |
|---|---|---|---|---|---|---|
| 110100300 | Auto | EARLY DROP UDP MALWARE backdoor | This rule drops UDP packets that contain the backdoor malware BKDR_QUEJOB.EVL, which poses as an installer of FaceBook messenger. This malware may be spread as a malicious attachment in email messages. | Always enabled | Events per second (default = 1) | |
| 130300300 | Auto | DROP MALWARE trojan downloader | This rule drops UDP packets that contain the trojan downloader malware, which downloads and installs new versions of malicious programs, including Trojans and AdWare. | Always enabled | Events per second (default = 1) | |
| 130300400 | Auto | DROP MALWARE possible Hiloti | This rule drops UDP packets that contain trojan Hiloti malicious programs that may download potentially malicious files from a remote server and report system information back to the server. | Always enabled | Events per second (default = 1) | |
| 125000000 | System | DROP TROJAN Rovnix UDP DNS lookup (cherniypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using UDP (cherniypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000001 | System | DROP TROJAN Rovnix TCP DNS lookup (cherniypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using TCP (cherniypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000002 | System | DROP TROJAN Rovnix UDP DNS lookup (chernoypoyas.su) | This rule drops Rovnix Trojan DNS lookup using UDP (chernoypoyas.su). | Enabled by default | Events per second (default = 1) | |
| 125000003 | System | DROP TROJAN Rovnix TCP DNS lookup (chernoypoyas.su) | This rule drops Rovnix Trojan DNS lookup using TCP (cherniypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000004 | System | DROP TROJAN Rovnix UDP DNS lookup (beliypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using UDP (beliypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000005 | System | DROP TROJAN Rovnix TCP DNS lookup (beliypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using TCP (beliypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000006 | System | DROP TROJAN Rovnix UDP DNS lookup (beliypoyas.su) | This rule drops Rovnix Trojan DNS lookup using UDP (beliypoyas.su). | Enabled by default | Events per second (default = 1) | |
| 125000007 | System | DROP TROJAN Rovnix TCP DNS lookup (beliypoyas.su) | This rule drops Rovnix Trojan DNS lookup using TCP (beliypoyas.su). | Enabled by default | Events per second (default = 1) | |
| 125000008 | System | DROP TROJAN Rovnix UDP DNS lookup (zeleniypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using UDP (zeleniypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000009 | System | DROP TROJAN Rovnix TCP DNS lookup (zeleniypoyas.ru) | This rule drops Rovnix Trojan DNS lookup using TCP (zeleniypoyas.ru). | Enabled by default | Events per second (default = 1) | |
| 125000010 | System | DROP TROJAN Rovnix UDP DNS lookup (zeleniypoyas.su) | This rule drops Rovnix Trojan DNS lookup using UDP (zeleniypoyas.su). | Enabled by default | Events per second (default = 1) | |
| 125000011 | System | DROP TROJAN Rovnix TCP DNS lookup (zeleniypoyas.su) | This rule drops Rovnix Trojan DNS lookup using TCP (zeleniypoyas.su). | Enabled by default | Events per second (default = 1) | |
| 125000012 | System | DROP TROJAN Iron Tiger DNSTunnel UDP DNS lookup (xssok.blogspot.com) | This rule drops Trojan Iron Tiger DNSTunnel DNS lookup using UDP (xssok.blogspot.com). | Enabled by default | Events per second (default = 1) | |
| 125000013 | System | DROP TROJAN Iron Tiger DNSTunnel TCP DNS lookup (xssok.blogspot.com) | This rule drops Trojan Iron Tiger DNSTunnel DNS lookup using TCP (xssok.blogspot.com). | Enabled by default | Events per second (default = 1) | |
| 125000014 | System | DROP TROJAN Iron Tiger Gh0ST/PlugX/Various Backdoors UDP DNS lookup (gameofthrones.ddns.net) | This rule drops Trojan Iron Tiger Gh0ST/PlugX/Various Backdoors DNS Lookup using UDP (gameofthrones.ddns.net). | Enabled by default | Events per second (default = 1) | |
| 125000015 | System | DROP TROJAN Iron Tiger Gh0ST/PlugX/Various Backdoors TCP DNS lookup (gameofthrones.ddns.net) | This rule drops Trojan Iron Tiger Gh0ST/PlugX/Various Backdoors DNS Lookup using TCP (gameofthrones.ddns.net). | Enabled by default | Events per second (default = 1) | |
| 125000016 | System | DROP TROJAN Iron Tiger Likely PlugX UDP DNS lookup (chrome.servehttp.com) | This rule drops Trojan Iron Tiger Likely PlugX DNS Lookup using UDP (chrome.servehttp.com). | Enabled by default | Events per second (default = 1) | |
| 125000017 | System | DROP TROJAN Iron Tiger Likely PlugX TCP DNS lookup (chrome.servehttp.com) | This rule drops Trojan Iron Tiger Likely PlugX DNS Lookup using TCP (chrome.servehttp.com). | Enabled by default | Events per second (default = 1) | |
| 125000018 | System | DROP TROJAN Iron Tiger Backdoor.GTalkTrojan DNS UDP lookup (update.gtalklite.com) | This rule drops Trojan Iron Tiger Backdoor.GTalkTrojan DNS lookup using UDP (update.gtalklite.com). | Enabled by default | Events per second (default = 1) | |
| 125000019 | System | DROP TROJAN Iron Tiger Backdoor.GTalkTrojan DNS TCP lookup (update.gtalklite.com) | This rule drops Trojan Iron Tiger Backdoor.GTalkTrojan DNS lookup using TCP (update.gtalklite.com). | Enabled by default | Events per second (default = 1) | |
| 125000020 | System | DROP TROJAN Iron Tiger HTTPBrowser DNS UDP lookup (trendmicro-update.org) | This rule drops Trojan Iron Tiger HTTPBrowser DNS lookup using UDP (trendmicro-update.org) | Enabled by default | Events per second (default = 1) | |
| 125000021 | System | DROP TROJAN Iron Tiger HTTPBrowser DNS TCP lookup (trendmicro-update.org) | This rule drops Trojan Iron Tiger HTTPBrowser DNS lookup using TCP (trendmicro-update.org). | Enabled by default | Events per second (default = 1) | |
| 125000022 | System | DROP TROJAN XCodeGhost DNS UDP lookup (init.icloud-analysis.com) | This rule drops TrojanXCodeGhost DNS lookup using UDP (init.icloud-analysis.com) | Enabled by default | Events per second (default = 1) | |
| 125000023 | System | DROP TROJAN XCodeGhost DNS TCP lookup (init.icloud-analysis.com) | This rule drops Trojan XCodeGhost DNS lookup using TCP (init.icloud-analysis.com) | Enabled by default | Events per second (default = 1) | |
| 125000024 | System | DROP TROJAN XCodeGhost DNS UDP lookup (init.icloud-diagnostics.com) | This rule drops Trojan XCodeGhost DNS lookup using UDP (init.icloud-diagnostics.com) | Enabled by default | Events per second (default = 1) | |
| 125000025 | System | DROP TROJAN XCodeGhost DNS TCP lookup (init.icloud-diagnostics.com) | This rule drops Trojan XCodeGhost DNS lookup using TCP (init.icloud-diagnostics.com) | Enabled by default | Events per second (default = 1) | |
| 125000026 | System | DROP TROJAN XCodeGhost DNS UDP lookup (init.crash-analytics.com) | This rule drops Trojan XCodeGhost DNS lookup using UDP (init.crash-analytics.com) | Enabled by default | Events per second (default = 1) | |
| 125000027 | System | DROP TROJAN XCodeGhost DNS TCP lookup (init.crash-analytics.com) | This rule drops Trojan XCodeGhost DNS lookup using TCP (init.crash-analytics.com) | Enabled by default | Events per second (default = 1) | |
| 125000028 | System | DROP UDP MOBILE_MALWARE Android/Keymoge DNS UDP Lookup (aps.kemoge.net) | This rule drops MOBILE_MALWARE Android/Keymoge DNS Lookup using UDP (aps.kemoge.net). | Enabled by default | Events per second (default = 1) | |
| 125000029 | System | DROP TCP MOBILE_MALWARE Android/Keymoge DNS TCP Lookup (aps.kemoge.net) | This rule drops MOBILE_MALWARE Android/Keymoge DNS Lookup using TCP (aps.kemoge.net). | Enabled by default | Events per second (default = 1) | |
| 125000030 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (googlemanage.com) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (googlemanage.com). | Enabled by default | Events per second (default = 1) | |
| 125000031 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (googlemanage.com) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (googlemanage.com). | Enabled by default | Events per second (default = 1) | |
| 125000032 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (operaa.net) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (operaa.net). | Enabled by default | Events per second (default = 1) | |
| 125000033 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (operaa.net) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (operaa.net). | Enabled by default | Events per second (default = 1) | |
| 125000034 | System | DROP UDP TROJAN PlugX or EvilGrab DNS UDP Lookup (websecexp.com) | This rule drops TROJAN PlugX or EvilGrab DNS Lookup using UDP (websecexp.com). | Enabled by default | Events per second (default = 1) | |
| 125000035 | System | DROP TCP TROJAN PlugX or EvilGrab DNS TCP Lookup (websecexp.com) | This rule drops TROJAN PlugX or EvilGrab DNS Lookup using TCP (websecexp.com). | Enabled by default | Events per second (default = 1) | |
| 125000036 | System | DROP UDP TROJAN PlugX or EvilGrab DNS UDP Lookup (appeur.gnway.cc) | This rule drops TROJAN PlugX or EvilGrab DNS Lookup using UDP (appeur.gnway.cc). | Enabled by default | Events per second (default = 1) | |
| 125000037 | System | DROP TCP TROJAN PlugX or EvilGrab DNS TCP Lookup (appeur.gnway.cc) | This rule drops TROJAN PlugX or EvilGrab DNS Lookup using TCP (appeur.gnway.cc). | Enabled by default | Events per second (default = 1) | |
| 125000038 | System | DROP UDP TROJAN PlugX DNS UDP Lookup (mailsecurityservice.com) | This rule drops TROJAN PlugX DNS Lookup using UDP (mailsecurityservice.com). | Enabled by default | Events per second (default = 1) | |
| 125000039 | System | DROP TCP TROJAN PlugX DNS TCP Lookup (mailsecurityservice.com) | This rule drops TROJAN PlugX DNS Lookup using TCP (mailsecurityservice.com). | Enabled by default | Events per second (default = 1) | |
| 125000040 | System | DROP UDP TROJAN Sednit DNS UDP Lookup (swsupporttools.com) | This rule drops TROJAN Sednit DNS Lookup using UDP (swsupporttools.com). | Enabled by default | Events per second (default = 1) | |
| 125000041 | System | DROP TCP TROJAN Sednit DNS TCP Lookup (swsupporttools.com) | This rule drops TROJAN Sednit DNS Lookup using TCP (swsupporttools.com). | Enabled by default | Events per second (default = 1) | |
| 125000042 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (calllgt.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (calllgt.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000043 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (calllgt.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using TCP (calllgt.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000044 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (offmkos.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (offmkos.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000045 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (offmkos.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using TCP (offmkos.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000046 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (poonahost.endofinter net.net) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (poonahost.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000047 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (poonahost.endofinter net.net) | This rule drops TROJAN JS/RecJS DNS Lookup using TCP (poonahost.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000048 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (askleonri.isteingeek.de) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (askleonri.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000049 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (askleonri.isteingeek.de) | This rule drops TROJAN JS/RecJS DNS Lookup using TCP (askleonri.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000050 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (edrimake.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (edrimake.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000051 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (edrimake.endofinternet.net) | This rule drops TROJANJS/RecJS DNS Lookup using TCP (edrimake.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000052 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (qkmakein.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (qkmakein.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000053 | System | DROP TCP TROJANJS/RecJS DNS TCP Lookup (qkmakein.endofinternet.net) | This rule drops TROJAN JS/RecJS DNS Lookup using TCP (qkmakein.endofinternet.net). | Enabled by default | Events per second (default = 1) | |
| 125000054 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (cuninn.servebbs.com) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (cuninn.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000055 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (cuninn.servebbs.com) | This rule drops TROJANJS/RecJS DNS Lookup using TCP (cuninn.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000056 | System | DROP UDP TROJAN JS/RecJS DNS UDP Lookup (grihostad.servebbs.com) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (grihostad.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000057 | System | DROP TCP TROJANJS/RecJS DNS TCP Lookup (grihostad.servebbs.com) | This rule drops TROJANJS/RecJS DNS Lookup using TCP(grihostad.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000058 | System | DROP UDP TROJANJS/RecJS DNS UDP Lookup(askpotubeda.isteingeek.de) | This rule drops TROJANS/RecJS DNS Lookup using UDP(askpotubeda.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000059 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup(askpotubeda.isteingeek.de) | This rule drops TROJANJS/RecJS DNS Lookup using TCP(askpotubeda.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000060 | System | DROP UDP TROJANJS/RecJS DNS UDP Lookup (isqgt.isteingeek.de) | This rule drops TROJAN JS/RecJS DNS Lookup using UDP (isqgt.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000061 | System | DROP TCP TROJANJS/RecJS DNS TCP Lookup (isqgt.isteingeek.de) | This rule drops TROJANJS/RecJS DNS Lookup using TCP (isqgt.isteingeek.de). | Enabled by default | Events per second (default = 1) | |
| 125000062 | System | DROP UDP TROJANJS/RecJS DNS UDP Lookup (griahost.servebbs.com) | This rule drops TROJANJS/RecJS DNS Lookup using UDP (griahost.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000063 | System | DROP TCP TROJAN JS/RecJS DNS TCP Lookup (griahost.servebbs.com) | This rule drops TROJAJS/RecJS DNS Lookup using TCP (griahost.servebbs.com). | Enabled by default | Events per second (default = 1) | |
| 125000064 | System | DROP UDP TROJANWin32/Wedex TXT DNS UDP Lookup 1(cooky.nothn.5000) | This rule drops TROJANWin32/Wedex TXT DNSLookup 1 using UDP(cooky.nothn.5000). | Enabled by default | Events per second (default = 1) | |
| 125000065 | System | DROP TCP TROJANWin32/Wedex TXT DNSTCP Lookup 1(cooky.nothn.5000) | This rule drops TROJANWin32/Wedex TXT DNSLookup 1 using TCP (cooky.nothn.5000). | Enabled by default | Events per second (default = 1) | |
| 125000066 | System | DROP UDP TROJAN Win32/Wedex TXT DNSUDP Lookup 2 (cooky.error.500) | This rule drops TROJANWin32/Wedex TXT DNSLookup 2 using UDP (cooky.error.500). | Enabled by default | Events per second (default = 1) | |
| 125000067 | System | DROP TCP TROJANWin32/Wedex TXT DNS TCP Lookup 2 (cooky.error.500) | This rule drops TROJANWin32/Wedex TXT DNSLookup 2 using TCP (cooky.error.500). | Enabled by default | Events per second (default = 1) | |
| 125000068 | System | DROP UDP TROJAN Win32/Wedex TXT DNS UDP Lookup 3 (cooky.pcall.500) | This rule drops TROJAN Win32/Wedex TXT DNS Lookup 3 using UDP (cooky.pcall.500). | Enabled by default | Events per second (default = 1) | |
| 125000069 | System | DROP TCP TROJAN Win32/Wedex TXT DNS TCP Lookup 3 (cooky.pcall.500) | This rule drops TROJANWin32/Wedex TXT DNSLookup 3 using TCP (cooky.pcall.500). | Enabled by default | Events per second (default = 1) | |
| 125000070 | System | DROP UDP TROJAN Aldi Bot .onion Proxy Domain (evgg4iqc23vvoxhx) | This rule drops TROJAN AldiBot .onion Proxy Domain using UDP (evgg4iqc23vvoxhx). | Enabled by default | Events per second (default = 1) | |
| 125000071 | System | DROP TCP TROJAN Aldi Bot .onion Proxy Domain (evgg4iqc23vvoxhx) | This rule drops TROJAN Aldi Bot .onion Proxy Domain using TCP (evgg4iqc23vvoxhx). | Enabled by default | Events per second (default = 1) | |
| 125000072 | System | DROP UDP TROJAN ritroni .onion Proxy Domain (ggvvwt7u6b3qaicm) | This rule drops TROJAN Critroni onion Proxy Domain using UDP (ggvvwt7u6b3qaicm). | Enabled by default | Events per second (default = 1) | |
| 125000073 | System | DROP TCP TROJAN Critroni .onion Proxy Domain (ggvvwt7u6b3qaicm) | This rule drops TROJAN Critroni .onion Proxy Domain using TCP (ggvvwt7u6b3qaicm). | Enabled by default | Events per second (default = 1) | |
| 125000074 | System | DROP UDP TROJAN InfiniteLocker .onion Proxy Domain (qbstdn6k7iivyki2) | This rule drops TROJAN InfiniteLocker .onion Proxy Domain using UDP (qbstdn6k7iivyki2). | Enabled by default | Events per second (default = 1) | |
| 125000075 | System | DROP TCP TROJAN InfiniteLocker .onion Proxy Domain (qbstdn6k7iivyki2) | This rule drops TROJAN InfiniteLocker .onion Proxy Domain using TCP (qbstdn6k7iivyki2). | Enabled by default | Events per second (default = 1) | |
| 125000076 | System | DROP UDP TROJAN Zbot.onion Proxy Domain (7sv5jprihn6qdl36) | This rule drops TROJAN Zbot onion Proxy Domain using UDP (7sv5jprihn6qdl36). | Enabled by default | Events per second (default = 1) | |
| 125000077 | System | DROP TCP TROJAN Zbot.onion Proxy Domain (7sv5jprihn6qdl36) | This rule drops TROJAN Zbot.onion Proxy Domain using TCP (7sv5jprihn6qdl36). | Enabled by default | Events per second (default = 1) | |
| 125000078 | System | DROP UDP TROJAN Java/CoinWalletStealer.onion Proxy Domain (btcgenyj6ho35io2) | This rule drops TROJAN Java/CoinWalletStealer .onion Proxy Domain using UDP (btcgenyj6ho35io2). | Enabled by default | Events per second (default = 1) | |
| 125000079 | System | DROP TCP TROJAN Java/CoinWalletStealer .onion Proxy Domain (btcgenyj6ho35io2) | This rule drops TROJAN Java/CoinWalletStealer .onion Proxy Domain using TCP (btcgenyj6ho35io2). | Enabled by default | Events per second (default = 1) | |
| 125000080 | System | DROP UDP TROJAN AlphaCrypt .onion Proxy Domain (3st7uyjfocyourll) | This rule drops TROJAN AlphaCrypt .onion Proxy Domain using UDP (3st7uyjfocyourll). | Enabled by default | Events per second (default = 1) | |
| 125000081 | System | DROP TCP TROJAN AlphaCrypt .onion Proxy Domain (3st7uyjfocyourll) | This rule drops TROJAN AlphaCrypt .onion Proxy Domain using TCP (3st7uyjfocyourll). | Enabled by default | Events per second (default = 1) | |
| 125000082 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (paypartnerstodo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (paypartnerstodo.com). | Enabled by default | Events per second (default = 1) | |
| 125000083 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (paypartnerstodo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (paypartnerstodo.com). | Enabled by default | Events per second (default = 1) | |
| 125000084 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (allepohelpto.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (allepohelpto.com). | Enabled by default | Events per second (default = 1) | |
| 125000085 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (allepohelpto.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (allepohelpto.com). | Enabled by default | Events per second (default = 1) | |
| 125000086 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (marketcryptopartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (marketcryptopartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000087 | System | DROP TCP POLICY DNS Query to.onion proxy Domai (marketcryptopartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (marketcryptopartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000088 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (partnersinvestpayto.com) | This rule drops POLICY DNSQuery to.onion proxy Domain using UDP (partnersinvestpayto.com). | Enabled by default | Events per second (default = 1) | |
| 125000089 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (partnersinvestpayto.com) | This rule drops POLICY DNSQuery to.onion proxy Domain using TCP (partnersinvestpayto.com). | Enabled by default | Events per second (default = 1) | |
| 125000090 | System | DROP UDP POLICY DNS Query to.onion proxy Domain(forkinvestpay.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (forkinvestpay.com). | Enabled by default | Events per second (default = 1) | |
| 125000091 | System | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (forkinvestpay.com). | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (forkinvestpay.com). | Enabled by default | Events per second (default = 1) | |
| 125000092 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (effectwaytopay.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (effectwaytopay.com). | Enabled by default | Events per second (default = 1) | |
| 125000093 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (effectwaytopay.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (effectwaytopay.com). | Enabled by default | Events per second (default = 1) | |
| 125000094 | System | DROP UDP TROJAN Cryptowall.onion Proxy Domain (3wzn5p2yiumh7akj) | This rule drops TROJAN Cryptowall .onion Proxy Domain using UDP (3wzn5p2yiumh7akj). | Enabled by default | Events per second (default = 1) | |
| 125000095 | System | DROP TCP TROJAN Cryptowall.onion Proxy Domain (3wzn5p2yiumh7akj) | This rule drops TROJAN Cryptowall .onion Proxy Domain using TCP (3wzn5p2yiumh7akj). | Enabled by default | Events per second (default = 1) | |
| 125000096 | System | DROP UDP TROJAN Android/Spy.Agent.LP .onion Proxy Domain (44l6tamp6og2p755) | This rule drops TROJAN Android/Spy.Agent.LP. onion Proxy Domain using UDP (44l6tamp6og2p755). | Enabled by default | Events per second (default = 1) | |
| 125000097 | System | DROP TCP TROJAN Android/Spy.Agent.LP.onion Proxy Domain (44l6tamp6og2p755) | This rule drops TROJAN Android/Spy.Agent.LP .onion Proxy Domain using TCP (44l6tamp6og2p755). | Enabled by default | Events per second (default = 1) | |
| 125000098 | System | DROP UDP TROJAN Sofacy DNS UDP Lookup (softupdates.info.) | This rule drops TROJAN Sofacy DNS Lookup using UDP (softupdates.info.) | Enabled by default | Events per second (default = 1) | |
| 125000099 | System | DROP TCP TROJAN Sofacy DNS TCP Lookup (softupdates.info.) | This rule drops TROJAN Sofacy DNS Lookup using TCP (softupdates.info.) | Enabled by default | Events per second (default = 1) | |
| 125000100 | System | DROP UDP TROJAN Sofacy DNS UDP Lookup (drivres-update.info.) | This rule drops TROJAN Sofacy DNS Lookup using UDP (drivres-update.info.) | Enabled by default | Events per second (default = 1) | |
| 125000101 | System | DROP TCP TROJAN Sofacy DNS TCP Lookup (drivres-update.info.) | This rule drops TROJAN Sofacy DNS Lookup using TCP (drivres-update.info.) | Enabled by default | Events per second (default = 1) | |
| 125000102 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (starswarsspecs.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (starswarsspecs.com). | Enabled by default | Events per second (default = 1) | |
| 125000103 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (starswarsspecs.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (starswarsspecs.com). | Enabled by default | Events per second (default = 1) | |
| 125000104 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (maverickpaypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (maverickpaypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000105 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (maverickpaypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (maverickpaypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000106 | System | DROP UDP TROJANRedyms CnC DNS UDP Lookup (iqcgqyaeqimiiycs.org) | This rule drops TROJAN Redyms CnC DNS Lookup using UDP (iqcgqyaeqimiiycs.org). | Enabled by default | Events per second (default = 1) | |
| 125000107 | System | DROP TCP TROJAN Redyms CnC DNS TCP Lookup (iqcgqyaeqimiiycs.org) | This rule drops TROJAN Redyms CnC DNS Lookup using TCP (iqcgqyaeqimiiycs.org). | Enabled by default | Events per second (default = 1) | |
| 125000108 | System | DROP UDP TROJAN Redyms CnC DNS UDP Lookup (skgkyaqykaeegquu.org) | This rule drops TROJAN Redyms CnC DNS Lookup using UDP (skgkyaqykaeegquu.org). | Enabled by default | Events per second (default = 1) | |
| 125000109 | System | DROP TCP TROJAN Redyms CnC DNS TCP Lookup (skgkyaqykaeegquu.org) | This rule drops TROJANRedyms CnC DNS Lookup using TCP (skgkyaqykaeegquu.org). | Enabled by default | Events per second (default = 1) | |
| 125000110 | System | DROP UDP TROJAN Redyms CnC DNS UDP Lookup (uokkwqswimaamcwe.org) | This rule drops TROJAN Redyms CnC DNS Lookup using UDP (uokkwqswimaamcwe.org). | Enabled by default | Events per second (default = 1) | |
| 125000111 | System | DROP TCP TROJAN Redyms CnC DNS TCP Lookup (uokkwqswimaamcwe.org) | This rule drops TROJAN Redyms CnC DNS Lookup using TCP (uokkwqswimaamcwe.org). | Enabled by default | Events per second (default = 1) | |
| 125000112 | System | DROP UDP TROJAN Redyms CnC DNS UDP Lookup (wscswugeiuayswqg.org) | This rule drops TROJAN Redyms CnC DNS Lookup using UDP (wscswugeiuayswqg.org). | Enabled by default | Events per second (default = 1) | |
| 125000113 | System | DROP TCP TROJAN Redyms CnC DNS TCP Lookup (wscswugeiuayswqg.org) | This rule drops TROJANRedyms CnC DNS Lookup using TCP (wscswugeiuayswqg.org). | Enabled by default | Events per second (default = 1) | |
| 125000114 | System | DROP UDP TROJAN Redyms CnC DNS UDP Lookup (ywyayoskasuciwuo.org) | This rule drops TROJAN Redyms CnC DNS Lookup using UDP (ywyayoskasuciwuo.org). | Enabled by default | Events per second (default = 1) | |
| 125000115 | System | DROP TCP TROJAN Redyms CnC DNS TCP Lookup(ywyayoskasuciwuo.org) | This rule drops TROJAN Redyms CnC DNS Lookup using TCP (ywyayoskasuciwuo.org). | Enabled by default | Events per second (default = 1) | |
| 125000116 | System | DROP UDP TROJAN Ransomware/Poshcoder Onion Domain UDP Lookup (vswefkqsipoeuq5o) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using UDP (vswefkqsipoeuq5o). | Enabled by default | Events per second (default = 1) | |
| 125000117 | System | DROP TCP TROJAN Ransomware/Poshcoder Onion Domain TCP Lookup (vswefkqsipoeuq5o) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using TCP (vswefkqsipoeuq5o). | Enabled by default | Events per second (default = 1) | |
| 125000118 | System | DROP UDP TROJAN Critroni .onion Proxy Domain (tmclybfqzgkaeilm) | This rule drops TROJAN Critroni. onion Proxy Domain using UDP (tmclybfqzgkaeilm). | Enabled by default | Events per second (default = 1) | |
| 125000119 | System | DROP TCP TROJAN Critroni .onion Proxy Domain (tmclybfqzgkaeilm) | This rule drops TROJAN Critroni. onion Proxy Domain using TCP (tmclybfqzgkaeilm). | Enabled by default | Events per second (default = 1) | |
| 125000120 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (alhadath.mobi) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (alhadath.mobi). | Enabled by default | Events per second (default = 1) | |
| 125000121 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (alhadath.mobi) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (alhadath.mobi). | Enabled by default | Events per second (default = 1) | |
| 125000122 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (big-windowss.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (big-windowss.com). | Enabled by default | Events per second (default = 1) | |
| 125000123 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (big-windowss.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (big-windowss.com). | Enabled by default | Events per second (default = 1) | |
| 125000124 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (cacheupdate14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (cacheupdate14.com). | Enabled by default | Events per second (default = 1) | |
| 125000125 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (cacheupdate14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (cacheupdate14.com). | Enabled by default | Events per second (default = 1) | |
| 125000126 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (fbstatica.space) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (fbstatic-a.space). | Enabled by default | Events per second (default = 1) | |
| 125000127 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (fbstatica.space) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (fbstatic-a.space). | Enabled by default | Events per second (default = 1) | |
| 125000128 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (fbstatica.xyz) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (fbstatic-a.xyz). | Enabled by default | Events per second (default = 1) | |
| 125000129 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (fbstatica.xyz) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (fbstatic-a.xyz). | Enabled by default | Events per second (default = 1) | |
| 125000130 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (fbstatic-akamaihd.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (fbstatic-akamaihd.com). | Enabled by default | Events per second (default = 1) | |
| 125000131 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (fbstatic-akamaihd.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (fbstatic-akamaihd.com). | Enabled by default | Events per second (default = 1) | |
| 125000132 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (gmailtagmanager.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (gmailtagmanager.com). | Enabled by default | Events per second (default = 1) | |
| 125000133 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (gmailtagmanager.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (gmailtagmanager.com). | Enabled by default | Events per second (default = 1) | |
| 125000134 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (haaretz.link) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (haaretz.link). | Enabled by default | Events per second (default = 1) | |
| 125000135 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (haaretz.link) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (haaretz.link). | Enabled by default | Events per second (default = 1) | |
| 125000136 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (haaretz-news.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (haaretz-news.com). | Enabled by default | Events per second (default = 1) | |
| 125000137 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (haaretz-news.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (haaretz-news.com). | Enabled by default | Events per second (default = 1) | |
| 125000138 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (heartax.info) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (heartax.info). | Enabled by default | Events per second (default = 1) | |
| 125000139 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (heartax.info) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (heartax.info). | Enabled by default | Events per second (default = 1) | |
| 125000140 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (img.gmailtagmanager.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (img.gmailtagmanager.com). | Enabled by default | Events per second (default = 1) | |
| 125000141 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (img.gmailtagmanager.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (img.gmailtagmanager.com). | Enabled by default | Events per second (default = 1) | |
| 125000142 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (kernel4windows.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (kernel4windows.in). | Enabled by default | Events per second (default = 1) | |
| 125000143 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (kernel4windows.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (kernel4windows.in). | Enabled by default | Events per second (default = 1) | |
| 125000144 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (main.windowskernel14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP(main.windowskernel14.com) | Enabled by default | Events per second (default = 1) | |
| 125000145 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (main.windowskernel14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (main.windowskernel14.com) | Enabled by default | Events per second (default = 1) | |
| 125000146 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (micro-windows.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (micro-windows.in). | Enabled by default | Events per second (default = 1) | |
| 125000147 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (micro-windows.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (micro-windows.in). | Enabled by default | Events per second (default = 1) | |
| 125000148 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup(mswordupdate15.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (mswordupdate15.com). | Enabled by default | Events per second (default = 1) | |
| 125000149 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (mswordupdate15.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (mswordupdate15.com). | Enabled by default | Events per second (default = 1) | |
| 125000150 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (mswordupdate16.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (mswordupdate16.com). | Enabled by default | Events per second (default = 1) | |
| 125000151 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup(mswordupdate16.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (mswordupdate16.com). | Enabled by default | Events per second (default = 1) | |
| 125000152 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (mswordupdate17.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (mswordupdate17.com). | Enabled by default | Events per second (default = 1) | |
| 125000153 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (mswordupdate17.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (mswordupdate17.com). | Enabled by default | Events per second (default = 1) | |
| 125000154 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (mywindows24.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (mywindows24.in). | Enabled by default | Events per second (default = 1) | |
| 125000155 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (mywindows24.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (mywindows24.in). | Enabled by default | Events per second (default = 1) | |
| 125000156 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (patch7-windows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (patch7-windows.com). | Enabled by default | Events per second (default = 1) | |
| 125000157 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (patch7-windows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (patch7-windows.com). | Enabled by default | Events per second (default = 1) | |
| 125000158 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (patch8-windows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (patch8-windows.com). | Enabled by default | Events per second (default = 1) | |
| 125000159 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (patch8-windows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (patch8-windows.com). | Enabled by default | Events per second (default = 1) | |
| 125000160 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (patchthiswindows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (patchthiswindows.com). | Enabled by default | Events per second (default = 1) | |
| 125000161 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (patchthiswindows.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (patchthiswindows.com). | Enabled by default | Events per second (default = 1) | |
| 125000162 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (u.mywindows24.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (u.mywindows24.in). | Enabled by default | Events per second (default = 1) | |
| 125000163 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (u.mywindows24.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (u.mywindows24.in). | Enabled by default | Events per second (default = 1) | |
| 125000164 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (walla.link) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (walla.link). | Enabled by default | Events per second (default = 1) | |
| 125000165 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (walla.link) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (walla.link). | Enabled by default | Events per second (default = 1) | |
| 125000166 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (wethearservice.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (wethearservice.com). | Enabled by default | Events per second (default = 1) | |
| 125000167 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (wethearservice.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (wethearservice.com). | Enabled by default | Events per second (default = 1) | |
| 125000168 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (wheatherserviceapi.info) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (wheatherserviceapi.info). | Enabled by default | Events per second (default = 1) | |
| 125000169 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (wheatherserviceapi.info) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (wheatherserviceapi.info). | Enabled by default | Events per second (default = 1) | |
| 125000170 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowkernel.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowkernel.com). | Enabled by default | Events per second (default = 1) | |
| 125000171 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowkernel.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowkernel.com). | Enabled by default | Events per second (default = 1) | |
| 125000172 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows-10patch.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows-10patch.in). | Enabled by default | Events per second (default = 1) | |
| 125000173 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows-10patch.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows-10patch.in). | Enabled by default | Events per second (default = 1) | |
| 125000174 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows24-kernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows24-kernel.in). | Enabled by default | Events per second (default = 1) | |
| 125000175 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows24-kernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows24-kernel.in). | Enabled by default | Events per second (default = 1) | |
125000176 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows-drive20.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows-drive20.com). | Enabled by default | Events per second (default = 1) | |
| 125000177 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows-drive20.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows-drive20.com). | Enabled by default | Events per second (default = 1) | |
| 125000178 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows-india.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows-india.in). | Enabled by default | Events per second (default = 1) | |
| 125000179 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows-india.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows-india.in). | Enabled by default | Events per second (default = 1) | |
| 125000180 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowskernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowskernel.in). | Enabled by default | Events per second (default = 1) | |
| 125000181 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowskernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowskernel.in). | Enabled by default | Events per second (default = 1) | |
| 125000182 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows-kernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows-kernel.in). | Enabled by default | Events per second (default = 1) | |
| 125000183 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows-kernel.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows-kernel.in). | Enabled by default | Events per second (default = 1) | |
| 125000184 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowskernel14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowskernel14.com). | Enabled by default | Events per second (default = 1) | |
| 125000185 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowskernel14.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowskernel14.com). | Enabled by default | Events per second (default = 1) | |
| 125000186 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowslayer.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowslayer.in). | Enabled by default | Events per second (default = 1) | |
| 125000187 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowslayer.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowslayer.in). | Enabled by default | Events per second (default = 1) | |
| 125000188 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windows-my50.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windows-my50.com). | Enabled by default | Events per second (default = 1) | |
| 125000189 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windows-my50.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windows-my50.com). | Enabled by default | Events per second (default = 1) | |
| 125000190 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowssup.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowssup.in). | Enabled by default | Events per second (default = 1) | |
| 125000191 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowssup.in) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowssup.in). | Enabled by default | Events per second (default = 1) | |
| 125000192 | System | DROP UDP TROJAN Possible CopyKittens DNS UDP Lookup (windowsupup.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using UDP (windowsupup.com). | Enabled by default | Events per second (default = 1) | |
| 125000193 | System | DROP TCP TROJAN Possible CopyKittens DNS TCP Lookup (windowsupup.com) | This rule drops TROJAN Possible CopyKittens DNS Lookup using TCP (windowsupup.com). | Enabled by default | Events per second (default = 1) | |
| 125000194 | System | DROP UDP TROJAN Win32/Teslacrypt. onion Proxy Domain (tw7kaqthui5ojcez) | This rule drops TROJAN Win32/Teslacrypt .onion Proxy Domain using UDP (tw7kaqthui5ojcez). | Enabled by default | Events per second (default = 1) | |
| 125000195 | System | DROP TCP TROJAN Win32/Teslacrypt. onion Proxy Domain (tw7kaqthui5ojcez) | This rule drops TROJAN Win32/Teslacrypt .onion Proxy Domain using TCP (tw7kaqthui5ojcez). | Enabled by default | Events per second (default = 1) | |
| 125000196 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (paybtc798.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (paybtc798.com). | Enabled by default | Events per second (default = 1) | |
| 125000197 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (paybtc798.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (paybtc798.com). | Enabled by default | Events per second (default = 1) | |
| 125000198 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (softpay4562.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (softpay4562.com). | Enabled by default | Events per second (default = 1) | |
| 125000199 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (softpay4562.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (softpay4562.com). | Enabled by default | Events per second (default = 1) | |
| 125000200 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (bark1paypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (bark1paypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000201 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (bark1paypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (bark1paypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000202 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (btcpay435.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (btcpay435.com). | Enabled by default | Events per second (default = 1) | |
| 125000203 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (btcpay435.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (btcpay435.com). | Enabled by default | Events per second (default = 1) | |
| 125000204 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (nersinvestpayto.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (nersinvestpayto.com). | Enabled by default | Events per second (default = 1) | |
| 125000205 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (nersinvestpayto.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (nersinvestpayto.com). | Enabled by default | Events per second (default = 1) | |
| 125000206 | System | DROP UDP TROJAN Unknown Downloader. onion Proxy Domain (qmu7bm3cjfbux5xg) | This rule drops TROJAN Unknown Downloader. onion Proxy Domain using UDP (qmu7bm3cjfbux5xg). | Enabled by default | Events per second (default = 1) | |
| 125000207 | System | DROP TCP TROJAN Unknown Downloader. onion Proxy Domain (qmu7bm3cjfbux5xg) | This rule drops TROJAN Unknown Downloader .onion Proxy Domain using TCP (qmu7bm3cjfbux5xg). | Enabled by default | Events per second (default = 1) | |
| 125000208 | System | DROP UDP TROJAN Zbot. onion Proxy Domain (2kf7l7vpvvttzxuv) | This rule drops TROJAN Zbot. onion Proxy Domain using UDP (2kf7l7vpvvttzxuv). | Enabled by default | Events per second (default = 1) | |
| 125000209 | System | DROP TCP TROJAN Zbot. onion Proxy Domain (2kf7l7vpvvttzxuv) | This rule drops TROJAN Zbot. onion Proxy Domain using TCP (2kf7l7vpvvttzxuv). | Enabled by default | Events per second (default = 1) | |
| 125000210 | System | DROP UDP TROJAN Derusbi/Winnti DNS UDP Lookup (ns5.cisco-inc.net.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using UDP (ns5.cisco-inc.net.) | Enabled by default | Events per second (default = 1) | |
| 125000211 | System | DROP TCP TROJAN Derusbi/Winnti DNS TCP Lookup (ns5.cisco-inc.net.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using TCP (ns5.cisco-inc.net.) | Enabled by default | Events per second (default = 1) | |
| 125000212 | System | DROP UDP TROJAN Derusbi/Winnti DNS UDP Lookup (ware.mremote.biz.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using UDP (ware.mremote.biz.) | Enabled by default | Events per second (default = 1) | |
| 125000213 | System | DROP TCP TROJAN Derusbi/Winnti DNS TCP Lookup (ware.mremote.biz.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using TCP (ware.mremote.biz.) | Enabled by default | Events per second (default = 1) | |
| 125000214 | System | DROP UDP TROJAN Derusbi/Winnti DNS UDP Lookup (free.msftncsl.com.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using UDP (free.msftncsl.com.) | Enabled by default | Events per second (default = 1) | |
| 125000215 | System | DROP TCP TROJAN Derusbi/Winnti DNS TCP Lookup (free.msftncsl.com.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using TCP (free.msftncsl.com.) | Enabled by default | Events per second (default = 1) | |
| 125000216 | System | DROP UDP TROJAN Possible Winnti or other APT Implant DNS UDP Lookup (micriosoft.net.) | This rule drops TROJAN Possible Winnti or other APT Implant DNS Lookup using UDP (micriosoft.net.). | Enabled by default | Events per second (default = 1) | |
| 125000217 | System | DROP TCP TROJAN Possible Winnti or other APT Implant DNS TCP Lookup (micriosoft.net.) | This rule drops TROJAN Possible Winnti or other APT Implant DNS Lookup using TCP (micriosoft.net.) | Enabled by default | Events per second (default = 1) | |
| 125000218 | System | DROP UDP TROJAN Derusbi/Winnti DNS UDP Lookup (rd.kasparsky.net.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using UDP (rd.kasparsky.net.) | Enabled by default | Events per second (default = 1) | |
| 125000219 | System | DROP TCP TROJAN Derusbi/Winnti DNS TCP Lookup (rd.kasparsky.net.) | This rule drops TROJAN Derusbi/Winnti DNS Lookup using TCP (rd.kasparsky.net.) | Enabled by default | Events per second (default = 1) | |
| 125000220 | System | DROP UDP TROJAN TeslaCrypt/AlphaCrypt Payment DNS UDP Lookup (t7r67vsrpjcm5dfc) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Payment DNS Lookup using UDP (t7r67vsrpjcm5dfc). | Enabled by default | Events per second (default = 1) | |
| 125000221 | System | DROP TCP TROJAN TeslaCrypt/AlphaCrypt Payment DNS TCP Lookup (t7r67vsrpjcm5dfc) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Payment DNS Lookup using TCP (t7r67vsrpjcm5dfc). | Enabled by default | Events per second (default = 1) | |
| 125000222 | System | DROP UDP TROJAN Sakula DNS UDP Lookup (mail.cbppnews.com) | This rule drops TROJAN Sakula DNS Lookup using UDP (mail.cbppnews.com). | Enabled by default | Events per second (default = 1) | |
| 125000223 | System | DROP TCP TROJAN Sakula DNS TCP Lookup (mail.cbppnews.com) | This rule drops TROJAN Sakula DNS Lookup using TCP (mail.cbppnews.com). | Enabled by default | Events per second (default = 1) | |
| 125000224 | System | DROP UDP TROJAN Sakula DNS UDP Lookup (inocnation.com) | This rule drops TROJAN Sakula DNS Lookup using UDP (inocnation.com). | Enabled by default | Events per second (default = 1) | |
| 125000225 | System | DROP TCP TROJAN Sakula DNS TCP Lookup (inocnation.com) | This rule drops TROJAN Sakula DNS Lookup using TCP (inocnation.com). | Enabled by default | Events per second (default = 1) | |
| 125000226 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (waytopaytosystem.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (waytopaytosystem.com). | Enabled by default | Events per second (default = 1) | |
| 125000227 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (waytopaytosystem.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (waytopaytosystem.com). | Enabled by default | Events per second (default = 1) | |
| 125000228 | System | DROP UDP TROJAN Zbot. onion Proxy Domain (o2y3ee3fj6usmvn6) | This rule drops TROJAN Zbot. onion Proxy Domain using UDP (o2y3ee3fj6usmvn6). | Enabled by default | Events per second (default = 1) | |
| 125000229 | System | DROP TCP TROJAN Zbot. onion Proxy Domain (o2y3ee3fj6usmvn6) | This rule drops TROJAN Zbot. onion Proxy Domain using TCP (o2y3ee3fj6usmvn6). | Enabled by default | Events per second (default = 1) | |
| 125000230 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (deepwebgateway.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (deepwebgateway.com). | Enabled by default | Events per second (default = 1) | |
| 125000231 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (deepwebgateway.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (deepwebgateway.com). | Enabled by default | Events per second (default = 1) | |
| 125000232 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (malkintop100.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (malkintop100.com). | Enabled by default | Events per second (default = 1) | |
| 125000233 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (malkintop100.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (malkintop100.com). | Enabled by default | Events per second (default = 1) | |
| 125000234 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.link) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.link). | Enabled by default | Events per second (default = 1) | |
| 125000235 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.link) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.link). | Enabled by default | Events per second (default = 1) | |
| 125000236 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (encpayment23.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (encpayment23.com). | Enabled by default | Events per second (default = 1) | |
| 125000237 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (encpayment23.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (encpayment23.com). | Enabled by default | Events per second (default = 1) | |
| 125000238 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (expay34.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (expay34.com). | Enabled by default | Events per second (default = 1) | |
| 125000239 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (expay34.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (expay34.com). | Enabled by default | Events per second (default = 1) | |
| 125000240 | System | DROP UDP TROJAN Sacto DNS UDP Lookup (ispcache.eicp.net.) | This rule drops TROJAN Sacto DNS Lookup using UDP (ispcache.eicp.net.) | Enabled by default | Events per second (default = 1) | |
| 125000241 | System | DROP TCP TROJAN Sacto DNS TCP Lookup (ispcache.eicp.net.) | This rule drops TROJAN Sacto DNS Lookup using TCP (ispcache.eicp.net.) | Enabled by default | Events per second (default = 1) | |
| 125000242 | System | DROP UDP TROJAN Sacto DNS UDP Lookup (test-user123.vicp.cc.) | This rule drops TROJAN Sacto DNS Lookup using UDP (test-user123.vicp.cc.) | Enabled by default | Events per second (default = 1) | |
| 125000243 | System | DROP TCP TROJAN Sacto DNS TCP Lookup (test-user123.vicp.cc.) | This rule drops TROJAN Sacto DNS Lookup using TCP (test-user123.vicp.cc.) | Enabled by default | Events per second (default = 1) | |
| 125000244 | System | DROP UDP TROJAN Trojan.Win32.Generic.onion Proxy Domain (q5xofefox3mejgok) | This rule drops TROJAN Trojan.Win32.Generic.onion Proxy Domain using UDP (q5xofefox3mejgok). | Enabled by default | Events per second (default = 1) | |
| 125000245 | System | DROP TCP TROJAN Trojan.Win32.Generic.onion Proxy Domain (q5xofefox3mejgok) | This rule drops TROJAN Trojan.Win32.Generic.onion Proxy Domain using TCP (q5xofefox3mejgok). | Enabled by default | Events per second (default = 1) | |
| 125000246 | System | DROP UDP TROJAN Zbot. onion Proxy Domain (szlvj5va4ey3vnfd) | This rule drops TROJAN Zbot. onion Proxy Domain using UDP (szlvj5va4ey3vnfd). | Enabled by default | Events per second (default = 1) | |
| 125000247 | System | DROP TCP TROJAN Zbot. onion Proxy Domain (szlvj5va4ey3vnfd) | This rule drops TROJAN Zbot. onion Proxy Domain using TCP (szlvj5va4ey3vnfd). | Enabled by default | Events per second (default = 1) | |
| 125000248 | System | DROP UDP TROJAN Unknown Ransomware.onion Proxy Domain (kqd2eml2kjib53oe) | This rule drops TROJAN Unknown Ransomware.onion Proxy Domain using UDP (kqd2eml2kjib53oe). | Enabled by default | Events per second (default = 1) | |
| 125000249 | System | DROP TCP TROJAN Unknown Ransomware.onion Proxy Domain (kqd2eml2kjib53oe) | This rule drops TROJAN Unknown Ransomware.onion Proxy Domain using TCP (kqd2eml2kjib53oe). | Enabled by default | Events per second (default = 1) | |
| 125000250 | System | DROP UDP TROJAN Plugx DNS UDP Lookup (googletranslatione.com.) | This rule drops TROJAN Plugx DNS Lookup using UDP (googletranslatione.com.). | Enabled by default | Events per second (default = 1) | |
| 125000251 | System | DROP TCP TROJAN Plugx DNS TCP Lookup (googletranslatione.com.) | This rule drops TROJAN Plugx DNS Lookup using TCP (googletranslatione.com.). | Enabled by default | Events per second (default = 1) | |
| 125000252 | System | DROP UDP TROJAN Sacto DNS UDP Lookup (mdytourism.com.) | This rule drops TROJAN Sacto DNS Lookup using UDP (mdytourism.com.). | Enabled by default | Events per second (default = 1) | |
| 125000253 | System | DROP TCP TROJAN Sacto DNS TCP Lookup (mdytourism.com.) | This rule drops TROJAN Sacto DNS Lookup using TCP (mdytourism.com.). | Enabled by default | Events per second (default = 1) | |
| 125000254 | System | DROP UDP TROJAN Sacto DNS UDP Lookup (sidonaygn.net.) | This rule drops TROJAN Sacto DNS Lookup using UDP (sidonaygn.net.). | Enabled by default | Events per second (default = 1) | |
| 125000255 | System | DROP TCP TROJAN Sacto DNS TCP Lookup (sidonaygn.net.) | This rule drops TROJAN Sacto DNS Lookup using TCP (sidonaygn.net.). | Enabled by default | Events per second (default = 1) | |
| 125000256 | System | DROP UDP TROJAN Sacto DNS UDP Lookup (cmcscan.com.) | This rule drops TROJAN Sacto DNS Lookup using UDP (cmcscan.com.). | Enabled by default | Events per second (default = 1) | |
| 125000257 | System | DROP TCP TROJAN Sacto DNS TCP Lookup (cmcscan.com.) | This rule drops TROJAN Sacto DNS Lookup using TCP (cmcscan.com.). | Enabled by default | Events per second (default = 1) | |
| 125000258 | System | DROP UDP TROJAN Possible APT.SSLSneak DNS UDP Lookup (oil3689hso.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using UDP (oil3689hso.com.). | Enabled by default | Events per second (default = 1) | |
| 125000259 | System | DROP TCP TROJAN Possible APT.SSLSneak DNS TCP Lookup (oil3689hso.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using TCP (oil3689hso.com.). | Enabled by default | Events per second (default = 1) | |
| 125000260 | System | DROP UDP TROJAN Possible APT.SSLSneak DNS UDP Lookup (bedaliosp.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using UDP (bedaliosp.com.). | Enabled by default | Events per second (default = 1) | |
| 125000261 | System | DROP TCP TROJAN Possible APT.SSLSneak DNS TCP Lookup (bedaliosp.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using TCP (bedaliosp.com.). | Enabled by default | Events per second (default = 1) | |
| 125000262 | System | DROP UDP TROJAN Possible APT.SSLSneak DNS UDP Lookup (serv-1.net.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using UDP (serv-1.net.). | Enabled by default | Events per second (default = 1) | |
| 125000263 | System | DROP TCP TROJAN Possible APT.SSLSneak DNS TCP Lookup (serv-1.net.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using TCP (serv-1.net.). | Enabled by default | Events per second (default = 1) | |
| 125000264 | System | DROP UDP TROJAN Possible APT.SSLSneak DNS UDP Lookup (netglasswear.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using UDP (netglasswear.com.). | Enabled by default | Events per second (default = 1) | |
| 125000265 | System | DROP TCP TROJAN Possible APT.SSLSneak DNS TCP Lookup (netglasswear.com.) | This rule drops TROJAN Possible APT.SSLSneak DNS Lookup using TCP (netglasswear.com.). | Enabled by default | Events per second (default = 1) | |
| 125000266 | System | DROP UDP TROJAN Win32/Bulta DNS UDP Lookup (kugo.f3322.net) | This rule drops TROJAN Win32/Bulta DNS Lookup using UDP (kugo.f3322.net). | Enabled by default | Events per second (default = 1) | |
| 125000267 | System | DROP TCP TROJAN Win32/Bulta DNS TCP Lookup (kugo.f3322.net) | This rule drops TROJAN Win32/Bulta DNS Lookup using TCP (kugo.f3322.net). | Enabled by default | Events per second (default = 1) | |
| 125000268 | System | DROP UDP TROJAN Win32/Bulta DNS UDP Lookup (yk.ftwxw.com) | This rule drops TROJAN Win32/Bulta DNS Lookup using UDP (yk.ftwxw.com). | Enabled by default | Events per second (default = 1) | |
| 125000269 | System | DROP TCP TROJAN Win32/Bulta DNS TCP Lookup (yk.ftwxw.com) | This rule drops TROJAN Win32/Bulta DNS Lookup using TCP (yk.ftwxw.com). | Enabled by default | Events per second (default = 1) | |
| 125000270 | System | DROP UDP TROJAN Zbot. onion Proxy Domain (fhqt44i7du2oyd35) | This rule drops TROJAN Zbot. onion Proxy Domain using UDP (fhqt44i7du2oyd35). | Enabled by default | Events per second (default = 1) | |
| 125000271 | System | DROP TCP TROJAN Zbot. onion Proxy Domain (fhqt44i7du2oyd35) | This rule drops TROJAN Zbot. onion Proxy Domain using TCP (fhqt44i7du2oyd35). | Enabled by default | Events per second (default = 1) | |
| 125000272 | System | DROP UDP TROJAN EvilGrab or APT.9002 DNS UDP Lookup (secvies.com) | This rule drops TROJAN EvilGrab or APT.9002 DNS Lookup using UDP (secvies.com). | Enabled by default | Events per second (default = 1) | |
| 125000273 | System | DROP TCP TROJAN EvilGrab or APT.9002 DNS TCP Lookup (secvies.com) | This rule drops TROJAN EvilGrab or APT.9002 DNS Lookup using TCP (secvies.com). | Enabled by default | Events per second (default = 1) | |
| 125000274 | System | DROP UDP TROJAN TrochilusRAT DNS UDP Lookup (security-centers.com) | This rule drops TROJAN TrochilusRAT DNS Lookup using UDP (security-centers.com). | Enabled by default | Events per second (default = 1) | |
| 125000275 | System | DROP TCP TROJAN TrochilusRAT DNS TCP Lookup (security-centers.com) | This rule drops TROJAN TrochilusRAT DNS Lookup using TCP (security-centers.com). | Enabled by default | Events per second (default = 1) | |
| 125000276 | System | DROP UDP Possible EK SSL Redir DNS UDP Lookup (promotion.mediaqites.com.) | This rule drops Possible EK SSL Redir DNS Lookup using UDP (promotion.mediaqites.com.). | Enabled by default | Events per second (default = 1) | |
| 125000277 | System | DROP TCP Possible EK SSL Redir DNS TCP Lookup (promotion.mediaqites.com.) | This rule drops Possible EK SSL Redir DNS Lookup using TCP (promotion.mediaqites.com.). | Enabled by default | Events per second (default = 1) | |
| 125000278 | System | DROP UDP Possible EKSSL Redir DNS UDP Lookup (adition.untouchable-media.com.) | This rule drops Possible EKSSL Redir DNS Lookup using UDP (adition.untouchable-media.com.). | Enabled by default | Events per second (default = 1) | |
| 125000279 | System | DROP TCP Possible EKSSL Redir DNS TCP Lookup (adition.untouchable-media.com.) | This rule drops Possible EKSSL Redir DNS Lookup using TCP (adition.untouchable-media.com.). | Enabled by default | Events per second (default = 1) | |
| 125000280 | System | DROP UDP Possible EK SSL Redir DNS UDP Lookup (admarkets.mediadfusion.com.) | This rule drops Possible EK SSL Redir DNS Lookup using UDP (admarkets.mediadfusion.com.). | Enabled by default | Events per second (default = 1) | |
| 125000281 | System | DROP TCP Possible EK SSL Redir DNS TCP Lookup (admarkets.mediadfusion.com.) | This rule drops Possible EK SSL Redir DNS Lookup using TCP (admarkets.mediadfusion.com.). | Enabled by default | Events per second (default = 1) | |
| 125000282 | System | DROP UDP Possible EK SSL Redir DNS UDP Lookup (promotion.maternitymedia.com.) | This rule drops Possible EK SSL Redir DNS Lookup using UDP (promotion.maternitymedia.com.). | Enabled by default | Events per second (default = 1) | |
| 125000283 | System | DROP TCP Possible EK SSL Redir DNS TCP Lookup (promotion.maternitymedia.com.) | This rule drops Possible EK SSL Redir DNS Lookup using TCP (promotion.maternitymedia.com.). | Enabled by default | Events per second (default = 1) | |
| 125000284 | System | DROP UDP Observed Malvertising Domain DNS Request (markets.mediasoftmac.com) | This rule drops Observed Malvertising Domain DNS Request using UDP (markets.mediasoftmac.com). | Enabled by default | Events per second (default = 1) | |
| 125000285 | System | DROP TCP Observed Malvertising Domain DNS Request (markets.mediasoftmac.com) | This rule drops Observed Malvertising Domain DNS Request using TCP (markets.mediasoftmac.com). | Enabled by default | Events per second (default = 1) | |
| 125000286 | System | DROP UDP Observed Malvertising Domain DNS Request (advertising.northsidemarket.com) | This rule drops Observed Malvertising Domain DNS Request using UDP (advertising.northsidemarket.com). | Enabled by default | Events per second (default = 1) | |
| 125000287 | System | DROP TCP Observed Malvertising Domain DNS Request (advertising.northsidemarket.com) | This rule drops Observed Malvertising Domain DNS Request using TCP (advertising.northsidemarket.com). | Enabled by default | Events per second (default = 1) | |
| 125000288 | System | DROP UDP TROJAN Superman APT DNS UDP Lookup (ie.update-windows-microsoft.com.) | This rule drops TROJAN Superman APT DNS Lookup using UDP (ie.update-windows-microsoft.com.). | Enabled by default | Events per second (default = 1) | |
| 125000289 | System | DROP TCP TROJAN Superman APT DNS TCP Lookup (ie.update-windows-microsoft.com.) | This rule drops TROJAN Superman APT DNS Lookup using TCP (ie.update-windows-microsoft.com.). | Enabled by default | Events per second (default = 1) | |
| 125000290 | System | DROP UDP Chrome Extension Phishing DNS Request (chrome-extension) | This rule drops Chrome Extension Phishing DNS Request using UDP (chrome-extension). | Enabled by default | Events per second (default = 1) | |
| 125000291 | System | DROP TCP Chrome Extension Phishing DNS Request (chrome-extension) | This rule drops Chrome Extension Phishing DNS Request using TCP (chrome-extension). | Enabled by default | Events per second (default = 1) | |
| 125000292 | System | DROP UDP TROJAN Kivars DNS UDP Lookup (microsoftmse.com.) | This rule drops TROJAN Kivars DNS Lookup using UDP (microsoftmse.com.). | Enabled by default | Events per second (default = 1) | |
| 125000293 | System | DROP TCP TROJAN Kivars DNS TCP Lookup (microsoftmse.com.) | This rule drops TROJAN Kivars DNS Lookup using TCP (microsoftmse.com.). | Enabled by default | Events per second (default = 1) | |
| 125000294 | System | DROP UDP TROJAN Keylogger.Bedrun DNS UDP Lookup (news.dumb1.com.) | This rule drops TROJAN Keylogger.Bedrun DNS Lookup using UDP (news.dumb1.com.). | Enabled by default | Events per second (default = 1) | |
| 125000295 | System | DROP TCP TROJAN Keylogger.Bedrun DNS TCP Lookup (news.dumb1.com.) | This rule drops TROJAN Keylogger.Bedrun DNS Lookup using TCP (news.dumb1.com.). | Enabled by default | Events per second (default = 1) | |
| 125000296 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (belladonnamonna.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (belladonnamonna.com). | Enabled by default | Events per second (default = 1) | |
| 125000297 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (belladonnamonna.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (belladonnamonna.com). | Enabled by default | Events per second (default = 1) | |
| 125000298 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (praypartnerstodo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (praypartnerstodo.com). | Enabled by default | Events per second (default = 1) | |
| 125000299 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (praypartnerstodo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (praypartnerstodo.com). | Enabled by default | Events per second (default = 1) | |
| 125000300 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (hiltonpaytoo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (hiltonpaytoo.com). | Enabled by default | Events per second (default = 1) | |
| 125000301 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (hiltonpaytoo.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (hiltonpaytoo.com). | Enabled by default | Events per second (default = 1) | |
| 125000302 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (barklpaypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (barklpaypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000303 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (barklpaypartners.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (barklpaypartners.com). | Enabled by default | Events per second (default = 1) | |
| 125000304 | System | DROP UDP TROJAN Ransomware/Poshcoder Onion Domain UDP Lookup (3afd57c4dchzp3pe) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using UDP (3afd57c4dchzp3pe). | Enabled by default | Events per second (default = 1) | |
| 125000305 | System | DROP TCP TROJAN Ransomware/Poshcoder Onion Domain TCP Lookup (3afd57c4dchzp3pe) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using TCP (3afd57c4dchzp3pe). | Enabled by default | Events per second (default = 1) | |
| 125000306 | System | DROP UDP TROJAN APT Related DNS UDP Lookup PlugX, Gh0st, Bergard (mailnews.eicp.net.) | This rule drops TROJAN APT Related DNS Lookup PlugX, Gh0st, Bergard using UDP (mail-news.eicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000307 | System | DROP TCP TROJAN APT Related DNS TCP Lookup PlugX, Gh0st, Bergard (mail-news.eicp.net.) | This rule drops TROJAN APT Related DNS Lookup PlugX, Gh0st, Bergard using TCP (mail-news.eicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000308 | System | DROP UDP TROJAN CustomRAT DNS lookup (www729448908.f3322.org.) | This rule drops TROJAN CustomRAT DNS lookup using UDP (www729448908.f3322.org.). | Enabled by default | Events per second (default = 1) | |
| 125000309 | System | DROP TCP TROJAN CustomRAT DNS lookup (www729448908.f3322.org.) | This rule drops TROJAN CustomRAT DNS lookup using TCP (www729448908.f3322.org.). | Enabled by default | Events per second (default = 1) | |
| 125000310 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (9i7ffdgvffibow7.vrnserver.ru.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (9i7ffdgvffibow7.vrnserver.ru.). | Enabled by default | Events per second (default = 1) | |
| 125000311 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (9i7ffdgvffibow7.vrnserver.ru.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (9i7ffdgvffibow7.vrnserver.ru.). | Enabled by default | Events per second (default = 1) | |
| 125000312 | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (aaa123.spdns.de.) | This rule drops TROJAN ScarletMimic DNS Lookup using UDP (aaa123.spdns.de.). | Enabled by default | Events per second (default = 1) | ||
| 125000313 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (aaa123.spdns.de.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (aaa123.spdns.de.). | Enabled by default | Events per second (default = 1) | |
| 125000314 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (accounts.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (accounts.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000315 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (accounts.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (accounts.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000316 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (account.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (account.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000317 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (account.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (account.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000318 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (addi.apple.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (addi.apple.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000319 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (addi.apple.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (addi.apple.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000320 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (admin.spdns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (admin.spdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000321 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (admin.spdns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (admin.spdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000322 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (apple.lenovositegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (apple.lenovositegroup.com.). | Enabled by default | Events per second (default = 1) | |
| 125000323 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (apple.lenovositegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (apple.lenovositegroup.com.). | Enabled by default | Events per second (default = 1) | |
| 125000324 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (bailee.alanna.cloudns.biz.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (bailee.alanna.cloudns.biz.). | Enabled by default | Events per second (default = 1) | |
| 125000325 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (bailee.alanna.cloudns.biz.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (bailee.alanna.cloudns.biz.). | Enabled by default | Events per second (default = 1) | |
| 125000326 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (bee.aoto.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (bee.aoto.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000327 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (bee.aoto.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (bee.aoto.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000328 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (bits.githubs.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (bits.githubs.net.). | Enabled by default | Events per second (default = 1) | |
| 125000329 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (bits.githubs.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (bits.githubs.net.). | Enabled by default | Events per second (default = 1) | |
| 125000330 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (book.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (book.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000331 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (book.websurprisemail. com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (book.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000332 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (clean.popqueen.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (clean.popqueen.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000333 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (clean.popqueen.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (clean.popqueen.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000334 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (desk.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (desk.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000335 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (desk.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (desk.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000336 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (detail43.myfirewall.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (detail43.myfirewall.org.). | Enabled by default | Events per second (default = 1) | |
| 125000337 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (detail43.myfirewall.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (detail43.myfirewall.org.). | Enabled by default | Events per second (default = 1) | |
| 125000338 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (dolat.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (dolat.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000339 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (dolat.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (dolat.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000340 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (dolet.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (dolet.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000341 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (dolet.websurprisemail.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (dolet.websurprisemail.com.). | Enabled by default | Events per second (default = 1) | |
| 125000342 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (economy.spdns.de.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (economy.spdns.de.). | Enabled by default | Events per second (default = 1) | |
| 125000343 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (economy.spdns.de.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (economy.spdns.de.). | Enabled by default | Events per second (default = 1) | |
| 125000344 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (economy.spdns.eu.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (economy.spdns.eu.). | Enabled by default | Events per second (default = 1) | |
| 125000345 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (economy.spdns.eu.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (economy.spdns.eu.). | Enabled by default | Events per second (default = 1) | |
125000346 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (eemete.freetcp.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (eemete.freetcp.com.). | Enabled by default | Events per second (default = 1) | |
125000347 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (eemete.freetcp.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (eemete.freetcp.com.). | Enabled by default | Events per second (default = 1) | |
125000348 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (firefox.spdns.de.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (firefox.spdns.de.). | Enabled by default | Events per second (default = 1) | |
125000349 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (firefox.spdns.de.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (firefox.spdns.de.). | Enabled by default | Events per second (default = 1) | |
125000350 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (firewallupdate.firewall-gateway.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (firewallupdate.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
125000351 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (firewallupdate.firewall -gateway.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (firewallupdate.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
125000352 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (fish.seafood.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (fish.seafood.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
125000353 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (fish.seafood.cloudns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (fish.seafood.cloudns.org.). | Enabled by default | Events per second (default = 1) | |
125000354 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (ftp112.lenta.cloudns.pw.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (ftp112.lenta.cloudns.pw.). | Enabled by default | Events per second (default = 1) | |
125000355 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (ftp112.lenta.cloudns.pw.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (ftp112.lenta.cloudns.pw.). | Enabled by default | Events per second (default = 1) | |
125000356 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (github.ignorelist.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (github.ignorelist.com.). | Enabled by default | Events per second (default = 1) | |
125000357 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (github.ignorelist.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (github.ignorelist.com.). | Enabled by default | Events per second (default = 1) | |
125000358 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (islam.youtubesitegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (islam.youtubesitegroup.com.). | Enabled by default | Events per second (default = 1) | |
125000359 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (islam.youtubesitegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (islam.youtubesitegroup.com.). | Enabled by default | Events per second (default = 1) | |
125000360 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (kissecurity.firewall-gat | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (kissecurity.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
125000361 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (kissecurity.firewall-gateway.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (kissecurity.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
125000362 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (liumingzhen.myftp.org.) | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (liumingzhen.myftp.org.) | Enabled by default | Events per second (default = 1) | |
125000363 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (liumingzhen.myftp.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (liumingzhen.myftp.org.). | Enabled by default | Events per second (default = 1) | |
125000364 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (mail.firewall-gateway.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (mail.firewall-gateway.com.). | Enabled by default | Events per second (default = 1) | |
125000365 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (mail.firewall-gateway.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (mail.firewall-gateway.com.). | Enabled by default | Events per second (default = 1) | |
125000366 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (mareva.catherine.cloudns.us.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (mareva.catherine.cloudns.us.). | Enabled by default | Events per second (default = 1) | |
125000367 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (mareva.catherine.cloudns.us.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (mareva.catherine.cloudns.us.). | Enabled by default | Events per second (default = 1) | |
125000368 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (mm.lenovositegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (mm.lenovositegroup.com.). | Enabled by default | Events per second (default = 1) | |
125000369 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (mm.lenovositegroup.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (mm.lenovositegroup.com.). | Enabled by default | Events per second (default = 1) | |
125000370 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (muslim.islamhood.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (muslim.islamhood.net.). | Enabled by default | Events per second (default = 1) | |
125000371 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (muslim.islamhood.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (muslim.islamhood.net.). | Enabled by default | Events per second (default = 1) | |
125000372 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (news.firewallgateway.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (news.firewall-gateway.com.). | Enabled by default | Events per second (default = 1) | |
| 125000373 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (news.firewall-gateway.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (news.firewall-gateway.com.). | Enabled by default | Events per second (default = 1) | |
| 125000374 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (opero.spdns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (opero.spdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000375 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (opero.spdns.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (opero.spdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000376 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (otcgk.border.cloudns.pw.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (otcgk.border.cloudns.pw.). | Enabled by default | Events per second (default = 1) | |
| 125000377 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (otcgk.border.cloudns.pw.) | This rule drops TROJAN ScarletMimic DNS Lookup using TCP (otcgk.border.cloudns.pw.). | Enabled by default | Events per second (default = 1) | |
| 125000378 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (p.klark.cloudns.in.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (p.klark.cloudns.in.). | Enabled by default | Events per second (default = 1) | |
| 125000379 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (p.klark.cloudns.in.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (p.klark.cloudns.in.). | Enabled by default | Events per second (default = 1) | |
| 125000380 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (ppcc.vasilevich.cloudns.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (ppcc.vasilevich.cloudns.info.). | Enabled by default | Events per second (default = 1) | |
| 125000381 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (ppcc.vasilevich.cloudns.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (ppcc.vasilevich.cloudns.info.). | Enabled by default | Events per second (default = 1) | |
| 125000382 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (press.ufoneconference.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (press.ufoneconference.com.) | Enabled by default | Events per second (default = 1) | |
| 125000383 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (press.ufoneconference.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (press.ufoneconference.com.) | Enabled by default | Events per second (default = 1) | |
| 125000384 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (qq.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (qq.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000385 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (qq.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (qq.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000386 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (sys.firewall-gateway.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (sys.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
| 125000387 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (sys.firewall-gateway.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (sys.firewall-gateway.net.). | Enabled by default | Events per second (default = 1) | |
| 125000388 | System | DROP UDP TROJAN Scarlet Mimic DNS UDPLookup (vip.yahoo.cloudns.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (vip.yahoo.cloudns.info.). | Enabled by default | Events per second (default = 1) | |
| 125000389 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (vip.yahoo.cloudns.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (vip.yahoo.cloudns.info.). | Enabled by default | Events per second (default = 1) | |
| 125000390 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (webmail.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (webmail.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000391 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (webmail.yourturbe.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (webmail.yourturbe.org.). | Enabled by default | Events per second (default = 1) | |
| 125000392 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.37513.cn.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (www.37513.cn.). | Enabled by default | Events per second (default = 1) | |
| 125000393 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.37513.cn.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (www.37513.cn.). | Enabled by default | Events per second (default = 1) | |
| 125000394 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.angleegg.xxxy.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (www.angleegg.xxxy.info.). | Enabled by default | Events per second (default = 1) | |
| 125000395 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.angleegg.xxxy.info.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (www.angleegg.xxxy.info.). | Enabled by default | Events per second (default = 1) | |
| 125000396 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.googmail.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (www.googmail.org.). | Enabled by default | Events per second (default = 1) | |
| 125000397 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.googmail.org.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (www.googmail.org.). | Enabled by default | Events per second (default = 1) | |
| 125000398 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.gorlan.cloudns.pro.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (www.gorlan.cloudns.pro.). | Enabled by default | Events per second (default = 1) | |
| 125000399 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.gorlan.cloudns.pro.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (www.gorlan.cloudns.pro.). | Enabled by default | Events per second (default = 1) | |
| 125000400 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.uyghur.25u.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (www.uyghur.25u.com.). | Enabled by default | Events per second (default = 1) | |
| 125000401 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.uyghur.25u.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (www.uyghur.25u.com.). | Enabled by default | Events per second (default = 1) | |
| 125000402 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (www.uyghuri.mrface.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP www.uyghuri.mrface.com.). | Enabled by default | Events per second (default = 1) | |
| 125000403 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (www.uyghuri.mrface.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP www.uyghuri.mrface.com.). | Enabled by default | Events per second (default = 1) | |
| 125000404 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (youturbe.co.cc.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (youturbe.co.cc.). | Enabled by default | Events per second (default = 1) | |
| 125000405 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (youturbe.co.cc.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (youturbe.co.cc.). | Enabled by default | Events per second (default = 1) | |
| 125000406 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (yycc.mrbonus.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (yycc.mrbonus.com.). | Enabled by default | Events per second (default = 1) | |
| 125000407 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (yycc.mrbonus.com.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (yycc.mrbonus.com.). | Enabled by default | Events per second (default = 1) | |
| 125000408 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (zjhao.dtdns.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (zjhao.dtdns.net.). | Enabled by default | Events per second (default = 1) | |
| 125000409 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (zjhao.dtdns.net.) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (zjhao.dtdns.net.). | Enabled by default | Events per second (default = 1) | |
| 125000410 | System | DROP UDP TROJAN MSIL/Spy.Banker.DJ.onion Proxy Domain (b3pepirxq7l2aybj) | This rule drops TROJAN MSIL/Spy.Banker.DJ .onion Proxy Domain Lookup using UDP (b3pepirxq7l2aybj). | Enabled by default | Events per second (default = 1) | |
| 125000411 | System | DROP TCP TROJAN MSIL/Spy.Banker.DJ.onion Proxy Domain (b3pepirxq7l2aybj) | This rule drops TROJAN MSIL/Spy.Banker.DJ .onion Proxy Domain Lookup using TCP (b3pepirxq7l2aybj). | Enabled by default | Events per second (default = 1) | |
| 125000412 | System | DROP UDP TROJAN Fakben .onion Proxy Domain (24fkxhnr3cdtvwmy) | This rule drops TROJAN Fakben. onion Proxy Domain Lookup using UDP (24fkxhnr3cdtvwmy). | Enabled by default | Events per second (default = 1) | |
| 125000413 | System | DROP TCP TROJAN Fakben .onion Proxy Domain (24fkxhnr3cdtvwmy) | This rule drops TROJAN Fakben. onion Proxy Domain Lookup using TCP (24fkxhnr3cdtvwmy). | Enabled by default | Events per second (default = 1) | |
| 125000414 | System | DROP UDP TROJAN Ransomware Raas/Sarento.onion Proxy Domain (ghscjen32hejrbjy) | This rule drops TROJAN Ransomware Raas/Sarento. onion Proxy Domain Lookup using UDP (ghscjen32hejrbjy). | Enabled by default | Events per second (default = 1) | |
| 125000415 | System | DROP TCP TROJAN Ransomware Raas/Sarento.onion Proxy Domain (ghscjen32hejrbjy) | This rule drops TROJAN Ransomware Raas/Sarento .onion Proxy Domain Lookup using TCP (ghscjen32hejrbjy). | Enabled by default | Events per second (default = 1) | |
| 125000416 | System | DROP UDP TROJAN TeslaCrypt/AlphaCrypt Variant .onion Payment Domain (yez2o5lwqkmlv5lc) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Variant.onion Payment Domain Lookup using UDP (yez2o5lwqkmlv5lc). | Enabled by default | Events per second (default = 1) | |
| 125000417 | System | DROP TCP TROJAN TeslaCrypt/AlphaCrypt Variant .onion Payment Domain (yez2o5lwqkmlv5lc) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Variant.onion Payment Domain Lookup using TCP (yez2o5lwqkmlv5lc). | Enabled by default | Events per second (default = 1) | |
| 125000418 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (billingdetros.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (billingdetros.com). | Enabled by default | Events per second (default = 1) | |
| 125000419 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (billingdetros.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (billingdetros.com). | Enabled by default | Events per second (default = 1) | |
| 125000420 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (fileinvestpaytor.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (fileinvestpaytor.com). | Enabled by default | Events per second (default = 1) | |
| 125000421 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (fileinvestpaytor.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (fileinvestpaytor.com). | Enabled by default | Events per second (default = 1) | |
| 125000422 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (worldoptionstopaytor.com) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (worldoptionstopaytor.com). | Enabled by default | Events per second (default = 1) | |
| 125000423 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (worldoptionstopaytor.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (worldoptionstopaytor.com). | Enabled by default | Events per second (default = 1) | |
| 125000424 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (temp.injection.me.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (temp.injection.me.). | Enabled by default | Events per second (default = 1) | |
| 125000425 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (temp.injection.me.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (temp.injection.me.). | Enabled by default | Events per second (default = 1) | |
| 125000426 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (7dkj.injection.me.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (7dkj.injection.me.). | Enabled by default | Events per second (default = 1) | |
| 125000427 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (7dkj.injection.me.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (7dkj.injection.me.). | Enabled by default | Events per second (default = 1) | |
| 125000428 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (toragent.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (toragent.ch). | Enabled by default | Events per second (default = 1) | |
| 125000429 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (toragent.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (toragent.ch). | Enabled by default | Events per second (default = 1) | |
| 125000430 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torgateway.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torgateway.ch). | Enabled by default | Events per second (default = 1) | |
| 125000431 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torgateway.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torgateway.ch). | Enabled by default | Events per second (default = 1) | |
| 125000432 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (privacytoday.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (privacytoday.ch). | Enabled by default | Events per second (default = 1) | |
| 125000433 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (privacytoday.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (privacytoday.ch). | Enabled by default | Events per second (default = 1) | |
| 125000434 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torconnection.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torconnection.ch). | Enabled by default | Events per second (default = 1) | |
| 125000435 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torconnection.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torconnection.ch). | Enabled by default | Events per second (default = 1) | |
| 125000436 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torwebsites.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torwebsites.ch). | Enabled by default | Events per second (default = 1) | |
| 125000437 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torwebsites.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torwebsites.ch). | Enabled by default | Events per second (default = 1) | |
| 125000438 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (tordevice.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (tordevice.ch). | Enabled by default | Events per second (default = 1) | |
| 125000439 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (tordevice.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (tordevice.ch). | Enabled by default | Events per second (default = 1) | |
| 125000440 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (ip2tor.be) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ip2tor.be). | Enabled by default | Events per second (default = 1) | |
| 125000441 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (ip2tor.be) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ip2tor.be). | Enabled by default | Events per second (default = 1) | |
| 125000442 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torfilter.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torfilter.ch). | Enabled by default | Events per second (default = 1) | |
| 125000443 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torfilter.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torfilter.ch). | Enabled by default | Events per second (default = 1) | |
| 125000444 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torway.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torway.ch). | Enabled by default | Events per second (default = 1) | |
| 125000445 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torway.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torway.ch). | Enabled by default | Events per second (default = 1) | |
| 125000446 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torapplication.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torapplication.ch). | Enabled by default | Events per second (default = 1) | |
| 125000447 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torapplication.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torapplication.ch). | Enabled by default | Events per second (default = 1) | |
| 125000448 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (cochine.homeip.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (cochine.homeip.net.). | Enabled by default | Events per second (default = 1) | |
| 125000449 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (cochine.homeip.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (cochine.homeip.net.). | Enabled by default | Events per second (default = 1) | |
| 125000450 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (cochine.blogdns.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (cochine.blogdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000451 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (cochine.blogdns.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (cochine.blogdns.org.). | Enabled by default | Events per second (default = 1) | |
| 125000452 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (greegate.3322.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (greegate.3322.org.). | Enabled by default | Events per second (default = 1) | |
| 125000453 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (greegate.3322.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (greegate.3322.org.). | Enabled by default | Events per second (default = 1) | |
| 125000454 | System | DROP UDP TROJAN TeslaCrypt/AlphaCrypt Payment DNS UDP Lookup (javajvlsworf3574) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Payment DNS Lookup using UDP (javajvlsworf3574). | Enabled by default | Events per second (default = 1) | |
| 125000455 | System | DROP TCP TROJAN TeslaCrypt/AlphaCrypt Payment DNS TCP Lookup (javajvlsworf3574) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Payment DNS Lookup using TCP (javajvlsworf3574). | Enabled by default | Events per second (default = 1) | |
| 125000456 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (ashex.eicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (ashex.eicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000457 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (ashex.eicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (ashex.eicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000458 | System | DROP UDP MOBILE_MALWARE Android/Fakeinst.KD. onion Proxy Domain (pc35hiptpcwqezgs) | This rule drops MOBILE_MALWARE Android/Fakeinst.KD .onion Proxy Domain Lookup using UDP (pc35hiptpcwqezgs). | Enabled by default | Events per second (default = 1) | |
| 125000459 | System | DROP TCP MOBILE_MALWARE Android/Fakeinst.KD .onion Proxy Domain (pc35hiptpcwqezgs) | This rule drops MOBILE_MALWARE Android/Fakeinst.KD .onion Proxy Domain Lookup using TCP (pc35hiptpcwqezgs). | Enabled by default | Events per second (default = 1) | |
| 125000460 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torsatellite.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torsatellite.ch). | Enabled by default | Events per second (default = 1) | |
| 125000461 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torsatellite.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torsatellite.ch). | Enabled by default | Events per second (default = 1) | |
| 125000462 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (toradapter.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (toradapter.ch). | Enabled by default | Events per second (default = 1) | |
| 125000463 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (toradapter.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (toradapter.ch). | Enabled by default | Events per second (default = 1) | |
| 125000464 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (vietapps.vietimes.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (vietapps.vietimes.org.). | Enabled by default | Events per second (default = 1) | |
| 125000465 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (vietapps.vietimes.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (vietapps.vietimes.org.). | Enabled by default | Events per second (default = 1) | |
| 125000466 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (lqmt.vnnexpress.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (lqmt.vnnexpress.org.). | Enabled by default | Events per second (default = 1) | |
| 125000467 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (lqmt.vnnexpress.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (lqmt.vnnexpress.org.). | Enabled by default | Events per second (default = 1) | |
| 125000468 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (www.notebookhk.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (www.notebookhk.net.). | Enabled by default | Events per second (default = 1) | |
| 125000469 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (www.notebookhk.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (www.notebookhk.net.). | Enabled by default | Events per second (default = 1) | |
| 125000470 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (micky.dynamicdns.org.uk.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (micky.dynamicdns.org.uk.). | Enabled by default | Events per second (default = 1) | |
| 125000471 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (micky.dynamicdns.org.uk.) | This rule drops TROJANPossible PlugX DNS Lookup using TCP (micky.dynamicdns.org.uk.). | Enabled by default | Events per second (default = 1) | |
| 125000472 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (freepak.linkpc.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (freepak.linkpc.net.). | Enabled by default | Events per second (default = 1) | |
| 125000473 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (freepak.linkpc.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (freepak.linkpc.net.). | Enabled by default | Events per second (default = 1) | |
| 125000474 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (img.microtoo.info.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (img.microtoo.info.). | Enabled by default | Events per second (default = 1) | |
| 125000475 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (img.microtoo.info.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (img.microtoo.info.). | Enabled by default | Events per second (default = 1) | |
| 125000476 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (shine.p0tat0ve.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (shine.p0tat0ve.com.). | Enabled by default | Events per second (default = 1) | |
| 125000477 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (shine.p0tat0ve.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (shine.p0tat0ve.com.). | Enabled by default | Events per second (default = 1) | |
| 125000478 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (capser.zues.info.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (capser.zues.info.). | Enabled by default | Events per second (default = 1) | |
| 125000479 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (capser.zues.info.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (capser.zues.info.). | Enabled by default | Events per second (default = 1) | |
| 125000480 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (bacguarp.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (bacguarp.com.). | Enabled by default | Events per second (default = 1) | |
| 125000481 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (bacguarp.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (bacguarp.com.). | Enabled by default | Events per second (default = 1) | |
| 125000482 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (bitree.fartit.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (bitree.fartit.com.). | Enabled by default | Events per second (default = 1) | |
| 125000483 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (bitree.fartit.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (bitree.fartit.com.). | Enabled by default | Events per second (default = 1) | |
| 125000484 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (www.erophorlc.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (www.erophorlc.com.). | Enabled by default | Events per second (default = 1) | |
| 125000485 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (www.erophorlc.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (www.erophorlc.com.). | Enabled by default | Events per second (default = 1) | |
| 125000486 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (afghanistancownews. myvnc.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (afghanistancownews.myvnc. com.). | Enabled by default | Events per second (default = 1) | |
| 125000487 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (afghanistancownews. myvnc.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (afghanistancownews.myvnc. com.). | Enabled by default | Events per second (default = 1) | |
| 125000488 | System | DROP UDP TROJANPossible PlugX DNS UDP Lookup (krdomain.sytes.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDPn(krdomain.sytes.net.). | Enabled by default | Events per second (default = 1) | |
| 125000489 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (krdomain.sytes.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (krdomain.sytes.net.). | Enabled by default | Events per second (default = 1) | |
| 125000490 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (krrouji.xicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (krrouji.xicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000491 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (krrouji.xicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (krrouji.xicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000492 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (localsite.kernet.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (localsite.kernet.net.). | Enabled by default | Events per second (default = 1) | |
| 125000493 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (localsite.kernet.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (localsite.kernet.net.). | Enabled by default | Events per second (default = 1) | |
| 125000494 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (register.freesharecenter.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (register.freesharecenter.com.). | Enabled by default | Events per second (default = 1) | |
| 125000495 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (register.freesharecenter.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (register.freesharecenter.com.). | Enabled by default | Events per second (default = 1) | |
| 125000496 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (vpn.immnuogen.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (vpn.immnuogen.com.). | Enabled by default | Events per second (default = 1) | |
| 125000497 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (vpn.immnuogen.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (vpn.immnuogen.com.). | Enabled by default | Events per second (default = 1) | |
| 125000498 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (lh.mykorean.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (lh.mykorean.net.). | Enabled by default | Events per second (default = 1) | |
| 125000499 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (lh.mykorean.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (lh.mykorean.net.). | Enabled by default | Events per second (default = 1) | |
| 125000500 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (lh.huanke8.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (lh.huanke8.net.). | Enabled by default | Events per second (default = 1) | |
| 125000501 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (lh.huanke8.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (lh.huanke8.net.). | Enabled by default | Events per second (default = 1) | |
| 125000502 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (lhok.newsbs.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (lhok.newsbs.net.). | Enabled by default | Events per second (default = 1) | |
| 125000503 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (lhok.newsbs.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (lhok.newsbs.net.). | Enabled by default | Events per second (default = 1) | |
| 125000504 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (udp.zfwxm.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (udp.zfwxm.com.). | Enabled by default | Events per second (default = 1) | |
| 125000505 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (udp.zfwxm.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (udp.zfwxm.com.). | Enabled by default | Events per second (default = 1) | |
| 125000506 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (kr.942m.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (kr.942m.com.). | Enabled by default | Events per second (default = 1) | |
| 125000507 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (kr.942m.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (kr.942m.com.). | Enabled by default | Events per second (default = 1) | |
| 125000508 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (krweb.xicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (krweb.xicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000509 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (krweb.xicp.net.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (krweb.xicp.net.). | Enabled by default | Events per second (default = 1) | |
| 125000510 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (imail.gotdns.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (imail.gotdns.com.). | Enabled by default | Events per second (default = 1) | |
| 125000511 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (imail.gotdns.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (imail.gotdns.com.). | Enabled by default | Events per second (default = 1) | |
| 125000512 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (bugatti.from-wa.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (bugatti.from-wa.com.). | Enabled by default | Events per second (default = 1) | |
| 125000513 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (bugatti.from-wa.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (bugatti.from-wa.com.). | Enabled by default | Events per second (default = 1) | |
| 125000514 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (mol-government.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (mol-government.com.). | Enabled by default | Events per second (default = 1) | |
| 125000515 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (mol-government.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (mol-government.com.). | Enabled by default | Events per second (default = 1) | |
| 125000516 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (flower-show.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (flower-show.org.). | Enabled by default | Events per second (default = 1) | |
| 125000517 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (flower-show.org.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (flower-show.org.). | Enabled by default | Events per second (default = 1) | |
| 125000518 | System | DROP UDP TROJAN Possible PlugX DNS UDP Lookup (www.twititier.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using UDP (www.twititier.com.). | Enabled by default | Events per second (default = 1) | |
| 125000519 | System | DROP TCP TROJAN Possible PlugX DNS TCP Lookup (www.twititier.com.) | This rule drops TROJAN Possible PlugX DNS Lookup using TCP (www.twititier.com.). | Enabled by default | Events per second (default = 1) | |
| 125000520 | System | DROP UDP TROJAN Possible Superman APT DNS UDP Lookup (secure2.sophosrv.com.) | This rule drops TROJAN Possible Superman APT DNS Lookup using UDP (secure2.sophosrv.com.). | Enabled by default | Events per second (default = 1) | |
| 125000521 | System | DROP TCP TROJAN Possible Superman APT DNS TCP Lookup (secure2.sophosrv.com .) | This rule drops TROJAN Possible Superman APT DNS Lookup using TCP (secure2.sophosrv.com.). | Enabled by default | Events per second (default = 1) | |
| 125000522 | System | DROP UDP TROJAN Possible APT.HTTPBrowser DNS UDP Lookup (ncominc.com.) | This rule drops TROJAN Possible APT.HTTPBrowser DNS Lookup using UDP (ncominc.com.). | Enabled by default | Events per second (default = 1) | |
| 125000523 | System | DROP TCP TROJAN Possible APT.HTTPBrowser DNS TCP Lookup (ncominc.com.) | This rule drops TROJAN Possible APT.HTTPBrowser DNS Lookup using TCP (ncominc.com.). | Enabled by default | Events per second (default = 1) | |
| 125000524 | System | DROP UDP TROJAN Possible APT.HTTPBrowser DNS UDP Lookup (korea.windowsdata.com.) | This rule drops TROJAN Possible APT.HTTPBrowser DNS Lookup using UDP (korea.windowsdata.com.). | Enabled by default | Events per second (default = 1) | |
| 125000525 | System | DROP TCP TROJAN Possible APT.HTTPBrowser DNS TCP Lookup (korea.windowsdata.com.) | This rule drops TROJAN Possible APT.HTTPBrowser DNS Lookup using TCP (korea.windowsdata.com.). | Enabled by default | Events per second (default = 1) | |
| 125000526 | System | DROP UDP TROJAN Possible Fowap DNS UDP Lookup (pptzhu.info.ddns.us.) | This rule drops TROJAN Possible Fowap DNS Lookup using UDP (pptzhu.info.ddns.us.). | Enabled by default | Events per second (default = 1) | |
| 125000527 | System | DROP TCP TROJAN Possible Fowap DNS TCP Lookup (pptzhu.info.ddns.us.) | This rule drops TROJAN Possible Fowap DNS Lookup using TCP (pptzhu.info.ddns.us.). | Enabled by default | Events per second (default = 1) | |
| 125000528 | System | DROP UDP TROJAN Win32/Agent.XRA (Robo) DNS UDP Lookup (wallex.ho.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using UDP (wallex.ho.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000529 | System | DROP TCP TROJAN Win32/Agent.XRA (Robo) DNS TCP Lookup (wallex.ho.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using TCP (wallex.ho.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000530 | System | DROP UDP TROJAN Win32/Agent.XRA (Robo) DNS UDP Lookup (wallejob.in.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using UDP (wallejob.in.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000531 | System | DROP TCP TROJAN Win32/Agent.XRA (Robo) DNS TCP Lookup (wallejob.in.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using TCP (wallejob.in.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000532 | System | DROP UDP TROJAN Win32/Agent.XRA (Robo) DNS UDP Lookup (gils.ho.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using UDP (gils.ho.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000533 | System | DROP TCP TROJAN Win32/Agent.XRA (Robo) DNS TCP Lookup (gils.ho.ua.) | This rule drops TROJAN Win32/Agent.XRA (Robo) DNS Lookup using TCP (gils.ho.ua.). | Enabled by default | Events per second (default = 1) | |
| 125000534 | System | DROP UDP TROJAN Encryptor Raas Variant.onion Proxy Domain (idxcgov7x3dl552g) | This rule drops TROJAN Encryptor Raas Variant .onion Proxy Domain Lookup using UDP (idxcgov7x3dl552g). | Enabled by default | Events per second (default = 1) | |
| 125000535 | System | DROP TCP TROJAN Encryptor Raas Variant.onion Proxy Domain (idxcgov7x3dl552g) | This rule drops TROJAN Encryptor Raas Variant.onion Proxy Domain Lookup using TCP (idxcgov7x3dl552g). | Enabled by default | Events per second (default = 1) | |
| 125000536 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain (6dtxgqam4crv6rr6) | This rule drops TROJAN Ransomware Locky.onion Payment Domain using UDP (6dtxgqam4crv6rr6). | Enabled by default | Events per second (default = 1) | |
| 125000537 | System | DROP TCP TROJAN Ransomware Locky.onion Payment Domain DROP TCP MOBILE_MALWARE Backdoor.AndroidOS.Torec.a .onion Proxy Domain (yuwurw46taaep6ip) (6dtxgqam4crv6rr6) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using TCP (6dtxgqam4crv6rr6). | Enabled by default | Events per second (default = 1) | |
| 125000538 | System | DROP UDP MOBILE_MALWARE Backdoor.AndroidOS.Torec.a .onion Proxy Domain (yuwurw46taaep6ip) | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Torec.a.onion Proxy Domain Lookup using UDP (yuwurw46taaep6ip). | Enabled by default | Events per second (default = 1) | |
| 125000539 | System | DROP TCP MOBILE_MALWARE Backdoor.AndroidOS.Torec.a .onion Proxy Domain (yuwurw46taaep6ip) | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Torec.a.onion Proxy Domain Lookup using TCP (yuwurw46taaep6ip). | Enabled by default | Events per second (default = 1) | |
| 125000540 | System | DROP UDP MOBILE_MALWARE Backdoor.AndroidOS.Torec.a .onion Proxy Domain 2 (voooxrrw2wxnoyew) | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Torec.a.onion Proxy Domain 2 Lookup using UDP (voooxrrw2wxnoyew). | Enabled by default | Events per second (default = 1) | |
| 125000541 | System | DROP TCP MOBILE_MALWARE Backdoor.AndroidOS.Torec.a .onion Proxy Domain 2 (voooxrrw2wxnoyew) | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Torec.a.onion Proxy Domain 2 Lookup using TCP (voooxrrw2wxnoyew). | Enabled by default | Events per second (default = 1) | |
| 125000542 | System | DROP UDP TROJAN Linux/Tsunami DNS Request (updates.absentvodka.com) | This rule drops TROJAN Linux/Tsunami DNS Request using UDP (updates.absentvodka.com). | Enabled by default | Events per second (default = 1) | |
| 125000543 | System | DROP TCP TROJAN Linux/Tsunami DNS Request (updates.absentvodka.com) | This rule drops TROJAN Linux/Tsunami DNS Request using TCP (updates.absentvodka.com). | Enabled by default | Events per second (default = 1) | |
| 125000544 | System | DROP UDP TROJAN Linux/Tsunami DNS Request (updates.mintylinux.com) | This rule drops TROJAN Linux/Tsunami DNS Request using UDP (updates.mintylinux.com). | Enabled by default | Events per second (default = 1) | |
| 125000545 | System | DROP TCP TROJAN Linux/Tsunami DNS Request (updates.mintylinux.com) | This rule drops TROJAN Linux/Tsunami DNS Request using TCP (updates.mintylinux.com). | Enabled by default | Events per second (default = 1) | |
| 125000546 | System | DROP UDP TROJAN Linux/Tsunami DNS Request (eggstrawdinarry.mylittl erepo.com) | This rule drops TROJAN Linux/Tsunami DNS Request using UDP (eggstrawdinarry.mylittlerepo.com). | Enabled by default | Events per second (default = 1) | |
| 125000547 | System | DROP TCP TROJAN Linux/Tsunami DNS Request (eggstrawdinarry.mylittl erepo.com) | This rule drops TROJAN Linux/Tsunami DNS Request using TCP (eggstrawdinarry.mylittlerepo.com). | Enabled by default | Events per second (default = 1) | |
| 125000548 | System | DROP UDP TROJAN Linux/Tsunami DNS Request (linuxmint.kernel-org.org) | This rule drops TROJAN Linux/Tsunami DNS Request using UDP (linuxmint.kernel-org.org). | Enabled by default | Events per second (default = 1) | |
| 125000549 | System | DROP TCP TROJAN Linux/Tsunami DNS Request (linuxmint.kernel-org.org) | This rule drops TROJAN Linux/Tsunami DNS Request using TCP (linuxmint.kernel-org.org). | Enabled by default | Events per second (default = 1) | |
| 125000550 | System | DROP UDP TROJAN FrameworkPOS Covert DNS CnC Initial Check In (grp) | This rule drops TROJAN FrameworkPOS Covert DNS CnC Initial Check In using UDP (grp). | Enabled by default | Events per second (default = 1) | |
| 125000551 | System | DROP TCP TROJAN FrameworkPOS Covert DNS CnC Initial Check In (grp) | This rule drops TROJAN FrameworkPOS Covert DNS CnC Initial Check In using TCP (grp). | Enabled by default | Events per second (default = 1) | |
| 125000552 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain (twbers4hmi6dx65f) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using UDP (twbers4hmi6dx65f). | Enabled by default | Events per second (default = 1) | |
| 125000553 | System | DROP TCP TROJAN Ransomware Locky.onion Payment Domain (twbers4hmi6dx65f) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using TCP (twbers4hmi6dx65f). | Enabled by default | Events per second (default = 1) | |
| 125000554 | System | DROP UDP TROJAN TeslaCrypt/AlphaCrypt Variant .onion Payment Domain (xlowfznrg4wf7dli) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Variant.onion Payment Domain using UDP (xlowfznrg4wf7dli). | Enabled by default | Events per second (default = 1) | |
| 125000555 | System | DROP TCP TROJAN TeslaCrypt/AlphaCrypt Variant .onion Payment Domain (xlowfznrg4wf7dli) | This rule drops TROJAN TeslaCrypt/AlphaCrypt Variant.onion Payment Domain using TCP (xlowfznrg4wf7dli). | Enabled by default | Events per second (default = 1) | |
| 125000556 | System | DROP UDP TROJAN PadCrypt .onion Payment Domain (gnkltbsaeq35rejl) | This rule drops TROJAN PadCrypt .onion Payment Domain using UDP (gnkltbsaeq35rejl). | Enabled by default | Events per second (default = 1) | |
| 125000557 | System | DROP TCP TROJAN PadCrypt .onion Payment Domain (gnkltbsaeq35rejl) | This rule drops TROJAN PadCrypt .onion Payment Domain using TCP (gnkltbsaeq35rejl). | Enabled by default | Events per second (default = 1) | |
| 125000558 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (newhost2tor.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (newhost2tor.ch). | Enabled by default | Events per second (default = 1) | |
| 125000559 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (newhost2tor.ch) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (newhost2tor.ch). | Enabled by default | Events per second (default = 1) | |
| 125000560 | System | DROP UDP TROJAN Cryptolocker Variant.onion Proxy Domain (u6sep2pltvemcg5r) | This rule drops TROJAN Cryptolocker Variant .onion Proxy Domain Lookup using UDP (u6sep2pltvemcg5r). | Enabled by default | Events per second (default = 1) | |
| 125000561 | System | DROP TCP TROJAN Cryptolocker Variant.onion Proxy Domain (u6sep2pltvemcg5r) | This rule drops TROJAN Cryptolocker Variant .onion Proxy Domain Lookup using TCP (u6sep2pltvemcg5r). | Enabled by default | Events per second (default = 1) | |
| 125000562 | System | DROP UDP TROJAN Qadars 2.0 Onion Domain UDP Lookup (e4vcpcfrnqh6sfz6) | This rule drops TROJAN Qadars 2.0 Onion Domain Lookup using UDP (e4vcpcfrnqh6sfz6). | Enabled by default | Events per second (default = 1) | |
| 125000563 | System | DROP TCP TROJAN Qadars 2.0 Onion Domain TCP Lookup (e4vcpcfrnqh6sfz6) | This rule drops TROJAN Qadars 2.0 Onion Domain Lookup using TCP (e4vcpcfrnqh6sfz6). | Enabled by default | Events per second (default = 1) | |
| 125000564 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (kakaja24.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (kakaja24.com). | Enabled by default | Events per second (default = 1) | |
| 125000565 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (kakaja24.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (kakaja24.com). | Enabled by default | Events per second (default = 1) | |
| 125000566 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (halopov.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (halopov.com). | Enabled by default | Events per second (default = 1) | |
| 125000567 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (halopov.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (halopov.com). | Enabled by default | Events per second (default = 1) | |
| 125000568 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (kisliy.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (kisliy.com). | Enabled by default | Events per second (default = 1) | |
| 125000569 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (kisliy.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (kisliy.com). | Enabled by default | Events per second (default = 1) | |
| 125000570 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (angela127.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (angela127.com). | Enabled by default | Events per second (default = 1) | |
| 125000571 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (angela127.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (angela127.com). | Enabled by default | Events per second (default = 1) | |
| 125000572 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (photo-a5.pw) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (photo-a5.pw). | Enabled by default | Events per second (default = 1) | |
| 125000573 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (photo-a5.pw) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (photo-a5.pw). | Enabled by default | Events per second (default = 1) | |
| 125000574 | System | DROP UDP TROJAN Qadars 2.0 CnC DNS UDP Lookup (koktail24.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using UDP (koktail24.com). | Enabled by default | Events per second (default = 1) | |
| 125000575 | System | DROP TCP TROJAN Qadars 2.0 CnC DNS TCP Lookup (koktail24.com) | This rule drops TROJAN Qadars 2.0 CnC DNS Lookup using TCP (koktail24.com). | Enabled by default | Events per second (default = 1) | |
| 125000576 | System | DROP UDP TROJAN Qadars 2.0 Injects DNS UDP Lookup (ssldigic3rt.com) | This rule drops TROJAN Qadars 2.0 Injects DNS Lookup using UDP (ssldigic3rt.com). | Enabled by default | Events per second (default = 1) | |
| 125000577 | System | DROP TCP TROJAN Qadars 2.0 Injects DNS TCP Lookup (ssldigic3rt.com) | This rule drops TROJAN Qadars 2.0 Injects DNS Lookup using TCP (ssldigic3rt.com). | Enabled by default | Events per second (default = 1) | |
| 125000578 | System | DROP UDP TROJAN Qadars 2.0 Injects DNS UDP Lookup (digidetectsys.com) | This rule drops TROJAN Qadars 2.0 Injects DNS Lookup using UDP (digidetectsys.com). | Enabled by default | Events per second (default = 1) | |
| 125000579 | System | DROP TCP TROJAN Qadars 2.0 Injects DNS TCP Lookup (digidetectsys.com) | This rule drops TROJAN Qadars 2.0 Injects DNS Lookup using TCP (digidetectsys.com). | Enabled by default | Events per second (default = 1) | |
| 125000580 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain (i3ezlvkoi7fwyood) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using UDP | Enabled by default | Events per second (default = 1) | |
| 125000581 | System | DROP TCP TROJAN Ransomware Locky.onion Payment Domain (i3ezlvkoi7fwyood) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using TCP (i3ezlvkoi7fwyood) | Enabled by default | Events per second (default = 1) | |
| 125000582 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain (lpholfnvwbukqwye) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using UDP (lpholfnvwbukqwye) | Enabled by default | Events per second (default = 1) | |
| 125000583 | System | DROP TCP TROJAN Ransomware Locky.onion Payment Domain (lpholfnvwbukqwye) | This rule drops TROJAN Ransomware Locky .onion Payment Domain using TCP (lpholfnvwbukqwye) | Enabled by default | Events per second (default = 1) | |
| 125000584 | System | DROP UDP POLICY DNS Query to a (fagdns.com) | This rule drops POLICY DNS Query to a using UDP (fagdns.com) | Enabled by default | Events per second (default = 1) | |
| 125000585 | System | DROP TCP POLICY DNS Query to a (fagdns.com) | This rule drops POLICY DNS Query to a using TCP (fagdns.com) | Enabled by default | Events per second (default = 1) | |
| 125000586 | System | DROP UDP POLICY Incog-Neato.onion Proxy Domain (incogugncmfkib6s) | This rule drops POLICY Incog-Neato.onion Proxy Domain Lookup using UDP (incogugncmfkib6s) | Enabled by default | Events per second (default = 1) | |
| 125000587 | System | DROP TCP POLICY Incog-Neato.onion Proxy Domain (incogugncmfkib6s) | This rule drops POLICY Incog-Neato.onion Proxy Domain Lookup using TCP (incogugncmfkib6s) | Enabled by default | Events per second (default = 1) | |
| 125000588 | System | DROP UDP TROJAN Ransomware Troyano.onion Domain (333e45lpjqrebknr) | This rule drops TROJAN Ransomware Troyano .onion Domain using UDP (333e45lpjqrebknr) | Enabled by default | Events per second (default = 1) | |
| 125000589 | System | DROP TCP TROJAN Ransomware Troyano.onion Domain (333e45lpjqrebknr) | This rule drops TROJAN Ransomware Troyano.onion Domain using TCP (333e45lpjqrebknr) | Enabled by default | Events per second (default = 1) | |
| 125000590 | System | DROP UDP TROJAN Ransomware/Poshcoder Onion Domain UDP Lookup (v2aahgcan6ed564p) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using UDP (v2aahgcan6ed564p) | Enabled by default | Events per second (default = 1) | |
| 125000591 | System | DROP TCP TROJAN Ransomware/Poshcoder Onion Domain TCP Lookup (v2aahgcan6ed564p) | This rule drops TROJAN Ransomware/Poshcoder Onion Domain Lookup using TCP (v2aahgcan6ed564p) | Enabled by default | Events per second (default = 1) | |
| 125000592 | System | DROP UDP TROJAN OSX/KeRanger Ransomware CnC DNS Request (lclebb6kvohlkcml) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using UDP (lclebb6kvohlkcml) | Enabled by default | Events per second (default = 1) | |
| 125000593 | System | DROP TCP TROJAN OSX/KeRanger Ransomware CnC DNS Request (lclebb6kvohlkcml) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using TCP (lclebb6kvohlkcml) | Enabled by default | Events per second (default = 1) | |
| 125000594 | System | DROP UDP TROJAN OSX/KeRanger Ransomware CnC DNS Request (bmacyzmea723xyaz) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using UDP (bmacyzmea723xyaz) | Enabled by default | Events per second (default = 1) | |
| 125000595 | System | DROP TCP TROJAN OSX/KeRanger Ransomware CnC DNS Request (bmacyzmea723xyaz) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using TCP (bmacyzmea723xyaz) | Enabled by default | Events per second (default = 1) | |
| 125000596 | System | DROP UDP TROJAN OSX/KeRanger Ransomware CnC DNS Request (nejdtkok7oz5kjoc) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using UDP (nejdtkok7oz5kjoc) | Enabled by default | Events per second (default = 1) | |
| 125000597 | System | DROP TCP TROJAN OSX/KeRanger Ransomware CnC DNS Request (nejdtkok7oz5kjoc) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using TCP (nejdtkok7oz5kjoc) | Enabled by default | Events per second (default = 1) | |
| 125000598 | System | DROP UDP TROJAN OSX/KeRanger Ransomware CnC DNS Request (fiwf4kwysm4dpw5l) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using UDP (fiwf4kwysm4dpw5l) | Enabled by default | Events per second (default = 1) | |
| 125000599 | System | DROP TCP TROJAN OSX/KeRanger Ransomware CnC DNS Request (fiwf4kwysm4dpw5l) | This rule drops TROJAN OSX/KeRanger Ransomware CnC DNS Request using TCP (fiwf4kwysm4dpw5l) | Enabled by default | Events per second (default = 1) | |
| 125000600 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (tally.myfirewall.org) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (tally.myfirewall.org) | Enabled by default | Events per second (default = 1) | |
| 125000601 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (tally.myfirewall.org) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (tally.myfirewall.org) | Enabled by default | Events per second (default = 1) | |
| 125000602 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (accountgoogle.firewall -gateway.com) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (accountgoogle.firewall-gateway.com) | Enabled by default | Events per second (default = 1) | |
| 125000603 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (accountgoogle.firewall -gateway.com) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (accountgoogle.firewall-gateway.com) | Enabled by default | Events per second (default = 1) | |
| 125000604 | System | DROP UDP TROJAN Scarlet Mimic DNS UDP Lookup (filegoogle.firewall-gate way.com) | This rule drops TROJAN Scarlet Mimic DNS Lookup using UDP (filegoogle.firewall-gateway.com) | Enabled by default | Events per second (default = 1) | |
| 125000605 | System | DROP TCP TROJAN Scarlet Mimic DNS TCP Lookup (filegoogle.firewall-gate way.com) | This rule drops TROJAN Scarlet Mimic DNS Lookup using TCP (filegoogle.firewall-gateway.com) | Enabled by default | Events per second (default = 1) | |
| 125000606 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (0npzm6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (0npzm6.top) | Enabled by default | Events per second (default = 1) | |
| 125000607 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (0npzm6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (0npzm6.top) | Enabled by default | Events per second (default = 1) | |
| 125000608 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (0vgu64.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (0vgu64.top) | Enabled by default | Events per second (default = 1) | |
| 125000609 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (0vgu64.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (0vgu64.top) | Enabled by default | Events per second (default = 1) | |
| 125000610 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (143h2a.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (143h2a.top) | Enabled by default | Events per second (default = 1) | |
| 125000611 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (143h2a.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (143h2a.top) | Enabled by default | Events per second (default = 1) | |
| 125000612 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (1bipa9.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (1bipa9.top) | Enabled by default | Events per second (default = 1) | |
| 125000613 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (1bipa9.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (1bipa9.top) | Enabled by default | Events per second (default = 1) | |
| 125000614 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (1de02r.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (1de02r.top) | Enabled by default | Events per second (default = 1) | |
| 125000615 | System | DROP TCP POLICY DNSQuery to.onion proxy Domain (1de02r.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (1de02r.top) | Enabled by default | Events per second (default = 1) | |
| 125000616 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (1o49wi.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (1o49wi.top) | Enabled by default | Events per second (default = 1) | |
| 125000617 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (1o49wi.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (1o49wi.top) | Enabled by default | Events per second (default = 1) | |
| 125000618 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (2agglf.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (2agglf.top) | Enabled by default | Events per second (default = 1) | |
| 125000619 | System | DROP TCP POLICY DNSQuery to.onion proxy Domain (2agglf.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (2agglf.top) | Enabled by default | Events per second (default = 1) | |
| 125000620 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (308an1.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (308an1.top) | Enabled by default | Events per second (default = 1) | |
| 125000621 | System | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (308an1.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (308an1.top) | Enabled by default | Events per second (default = 1) | |
| 125000622 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (36xxk1.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (36xxk1.top) | Enabled by default | Events per second (default = 1) | |
| 125000623 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (36xxk1.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (36xxk1.top) | Enabled by default | Events per second (default = 1) | |
| 125000624 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (3di24a.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (3di24a.top) | Enabled by default | Events per second (default = 1) | |
| 125000625 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (3di24a.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (3di24a.top) | Enabled by default | Events per second (default = 1) | |
| 125000626 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (3odvfb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (3odvfb.top) | Enabled by default | Events per second (default = 1) | |
| 125000627 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (3odvfb.top | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (3odvfb.top) | Enabled by default | Events per second (default = 1) | |
| 125000628 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (43wjor.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (43wjor.top) | Enabled by default | Events per second (default = 1) | |
| 125000629 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (43wjor.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (43wjor.top) | Enabled by default | Events per second (default = 1) | |
| 125000630 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (4ynpjd.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (4ynpjd.top) | Enabled by default | Events per second (default = 1) | |
| 125000631 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (4ynpjd.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (4ynpjd.top) | Enabled by default | Events per second (default = 1) | |
| 125000632 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (62er3d.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (62er3d.top) | Enabled by default | Events per second (default = 1) | |
| 125000633 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (62er3d.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (62er3d.top) | Enabled by default | Events per second (default = 1) | |
| 125000634 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (67j6ht.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (67j6ht.top) | Enabled by default | Events per second (default = 1) | |
| 125000635 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (67j6ht.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (67j6ht.top) | Enabled by default | Events per second (default = 1) | |
| 125000636 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (6ntrb6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (6ntrb6.top) | Enabled by default | Events per second (default = 1) | |
| 125000637 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (6ntrb6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (6ntrb6.top) | Enabled by default | Events per second (default = 1) | |
| 125000638 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (7u8b59.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (7u8b59.top) | Enabled by default | Events per second (default = 1) | |
| 125000639 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (7u8b59.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (7u8b59.top) | Enabled by default | Events per second (default = 1) | |
| 125000640 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (a4coac.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (a4coac.top) | Enabled by default | Events per second (default = 1) | |
| 125000641 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (a4coac.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (a4coac.top) | Enabled by default | Events per second (default = 1) | |
| 125000642 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (ageshere.club) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ageshere.club) | Enabled by default | Events per second (default = 1) | |
| 125000643 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (ageshere.club) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ageshere.club) | Enabled by default | Events per second (default = 1) | |
| 125000644 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (anypicked.red) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (anypicked.red) | Enabled by default | Events per second (default = 1) | |
| 125000645 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (anypicked.red) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (anypicked.red) | Enabled by default | Events per second (default = 1) | |
| 125000646 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (apwzbe.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (apwzbe.top) | Enabled by default | Events per second (default = 1) | |
| 125000647 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (apwzbe.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (apwzbe.top) | Enabled by default | Events per second (default = 1) | |
| 125000648 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (ar8msb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ar8msb.top) | Enabled by default | Events per second (default = 1) | |
| 125000649 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (ar8msb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ar8msb.top) | Enabled by default | Events per second (default = 1) | |
| 125000650 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (aredark.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (aredark.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000651 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (aredark.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (aredark.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000652 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (barberryshin.casa) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (barberryshin.casa) | Enabled by default | Events per second (default = 1) | |
| 125000653 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (barberryshin.casa) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (barberryshin.casa) | Enabled by default | Events per second (default = 1) | |
| 125000654 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (biologyup.date) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (biologyup.date) | Enabled by default | Events per second (default = 1) | |
| 125000655 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (biologyup.date) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (biologyup.date) | Enabled by default | Events per second (default = 1) | |
| 125000656 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (bnctf6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (bnctf6.top) | Enabled by default | Events per second (default = 1) | |
| 125000657 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (bnctf6.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (bnctf6.top) | Enabled by default | Events per second (default = 1) | |
| 125000658 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (bookjumps.us) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (bookjumps.us) | Enabled by default | Events per second (default = 1) | |
| 125000659 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (bookjumps.us) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (bookjumps.us) | Enabled by default | Events per second (default = 1) | |
| 125000660 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (boxsame.kim) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (boxsame.kim) | Enabled by default | Events per second (default = 1) | |
| 125000661 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (boxsame.kim) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (boxsame.kim) | Enabled by default | Events per second (default = 1) | |
| 125000662 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (cgf59i.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (cgf59i.top) | Enabled by default | Events per second (default = 1) | |
| 125000663 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (cgf59i.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (cgf59i.top) | Enabled by default | Events per second (default = 1) | |
| 125000664 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (clockhate.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (clockhate.loan) | Enabled by default | Events per second (default = 1) | |
| 125000665 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (clockhate.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (clockhate.loan) | Enabled by default | Events per second (default = 1) | |
| 125000666 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (costlady.pw) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (costlady.pw) | Enabled by default | Events per second (default = 1) | |
| 125000667 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (costlady.pw) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (costlady.pw) | Enabled by default | Events per second (default = 1) | |
| 125000668 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (crispkey.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (crispkey.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000669 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (crispkey.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (crispkey.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000670 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (csj0k5.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (csj0k5.top) | Enabled by default | Events per second (default = 1) | |
| 125000671 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (csj0k5.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (csj0k5.top) | Enabled by default | Events per second (default = 1) | |
| 125000672 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (daigy0.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (daigy0.top) | Enabled by default | Events per second (default = 1) | |
| 125000673 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (daigy0.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (daigy0.top) | Enabled by default | Events per second (default = 1) | |
| 125000674 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (dd4xo3.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (dd4xo3.top) | Enabled by default | Events per second (default = 1) | |
| 125000675 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (dd4xo3.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (dd4xo3.top) | Enabled by default | Events per second (default = 1) | |
| 125000676 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (dkrie7.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (dkrie7.top) | Enabled by default | Events per second (default = 1) | |
| 125000677 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (dkrie7.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (dkrie7.top) | Enabled by default | Events per second (default = 1) | |
| 125000678 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (dkro3u.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (dkro3u.top) | Enabled by default | Events per second (default = 1) | |
| 125000679 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (dkro3u.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (dkro3u.top) | Enabled by default | Events per second (default = 1) | |
| 125000680 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (doggain.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (doggain.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000681 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (doggain.mobi) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (doggain.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000682 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (dozensby.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (dozensby.loan) | Enabled by default | Events per second (default = 1) | |
| 125000683 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (dozensby.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (dozensby.loan) | Enabled by default | Events per second (default = 1) | |
| 125000684 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (eatsdeal.black) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (eatsdeal.black) | Enabled by default | Events per second (default = 1) | |
| 125000685 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (eatsdeal.black) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (eatsdeal.black) | Enabled by default | Events per second (default = 1) | |
| 125000686 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (fewbreaks.club) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (fewbreaks.club) | Enabled by default | Events per second (default = 1) | |
| 125000687 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (fewbreaks.club) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (fewbreaks.club) | Enabled by default | Events per second (default = 1) | |
| 125000688 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (fishtotal.bid) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (fishtotal.bid) | Enabled by default | Events per second (default = 1) | |
| 125000689 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (fishtotal.bid) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (fishtotal.bid) | Enabled by default | Events per second (default = 1) | |
| 125000690 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (flewleast.link) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (flewleast.link) | Enabled by default | Events per second (default = 1) | |
| 125000691 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (flewleast.link) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (flewleast.link) | Enabled by default | Events per second (default = 1) | |
| 125000692 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (flyingsix.red) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (flyingsix.red) | Enabled by default | Events per second (default = 1) | |
| 125000693 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (flyingsix.red) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (flyingsix.red) | Enabled by default | Events per second (default = 1) | |
| 125000694 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (folkturns.date) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (folkturns.date) | Enabled by default | Events per second (default = 1) | |
| 125000695 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (folkturns.date) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (folkturns.date) | Enabled by default | Events per second (default = 1) | |
| 125000696 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (g9tneb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (g9tneb.top) | Enabled by default | Events per second (default = 1) | |
| 125000697 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (g9tneb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (g9tneb.top) | Enabled by default | Events per second (default = 1) | |
| 125000698 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gameswarm.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gameswarm.loan) | Enabled by default | Events per second (default = 1) | |
| 125000699 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gameswarm.loan) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gameswarm.loan) | Enabled by default | Events per second (default = 1) | |
| 125000700 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gc4n2c.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gc4n2c.top) | Enabled by default | Events per second (default = 1) | |
| 125000701 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gc4n2c.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gc4n2c.top) | Enabled by default | Events per second (default = 1) | |
| 125000702 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gnee6i.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gnee6i.top) | Enabled by default | Events per second (default = 1) | |
| 125000703 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gnee6i.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gnee6i.top) | Enabled by default | Events per second (default = 1) | |
| 125000704 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gonesolve.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gonesolve.lol) | Enabled by default | Events per second (default = 1) | |
| 125000705 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gonesolve.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gonesolve.lol) | Enabled by default | Events per second (default = 1) | |
| 125000706 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gpy3tc.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gpy3tc.top) | Enabled by default | Events per second (default = 1) | |
| 125000707 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gpy3tc.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gpy3tc.top) | Enabled by default | Events per second (default = 1) | |
| 125000708 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (groupline.info) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (groupline.info) | Enabled by default | Events per second (default = 1) | |
| 125000709 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (groupline.info) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (groupline.info) | Enabled by default | Events per second (default = 1) | |
| 125000710 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (gtnfgj.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (gtnfgj.top) | Enabled by default | Events per second (default = 1) | |
| 125000711 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (gtnfgj.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (gtnfgj.top) | Enabled by default | Events per second (default = 1) | |
| 125000712 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (hf60kb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (hf60kb.top) | Enabled by default | Events per second (default = 1) | |
| 125000713 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (hf60kb.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (hf60kb.top) | Enabled by default | Events per second (default = 1) | |
| 125000714 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (hw7o9w.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (hw7o9w.top) | Enabled by default | Events per second (default = 1) | |
| 125000715 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (hw7o9w.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (hw7o9w.top) | Enabled by default | Events per second (default = 1) | |
| 125000716 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (iixz3g.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (iixz3g.top) | Enabled by default | Events per second (default = 1) | |
| 125000717 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (iixz3g.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (iixz3g.top) | Enabled by default | Events per second (default = 1) | |
| 125000718 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (innerband.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (innerband.lol) | Enabled by default | Events per second (default = 1) | |
| 125000719 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (innerband.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (innerband.lol) | Enabled by default | Events per second (default = 1) | |
| 125000720 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (jn8ncm.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (jn8ncm.top) | Enabled by default | Events per second (default = 1) | |
| 125000721 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (jn8ncm.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (jn8ncm.top) | Enabled by default | Events per second (default = 1) | |
| 125000722 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (jumplived.in) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (jumplived.in) | Enabled by default | Events per second (default = 1) | |
| 125000723 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (jumplived.in) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (jumplived.in) | Enabled by default | Events per second (default = 1) | |
| 125000724 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (k9z7pm.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (k9z7pm.top) | Enabled by default | Events per second (default = 1) | |
| 125000725 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (k9z7pm.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (k9z7pm.top) | Enabled by default | Events per second (default = 1) | |
| 125000726 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (knowhands.us) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (knowhands.us) | Enabled by default | Events per second (default = 1) | |
| 125000727 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (knowhands.us) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (knowhands.us) | Enabled by default | Events per second (default = 1) | |
| 125000728 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (kswcuk.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (kswcuk.top) | Enabled by default | Events per second (default = 1) | |
| 125000729 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (kswcuk.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (kswcuk.top) | Enabled by default | Events per second (default = 1) | |
| 125000730 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (kzo8mc.top) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (kzo8mc.top) | Enabled by default | Events per second (default = 1) | |
| 125000731 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (kzo8mc.top) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (kzo8mc.top) | Enabled by default | Events per second (default = 1) | |
| 125000732 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (liescale.in) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (liescale.in) | Enabled by default | Events per second (default = 1) | |
| 125000733 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (liescale.in) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (liescale.in) | Enabled by default | Events per second (default = 1) | |
| 125000734 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (lorrydo.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (lorrydo.lol) | Enabled by default | Events per second (default = 1) | |
| 125000735 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (lorrydo.lol) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (lorrydo.lol) | Enabled by default | Events per second (default = 1) | |
| 125000736 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (lowallmoneypool.com) | Enabled by default | Events per second (default = 1) | |
| 125000737 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (lowallmoneypool.com) | Enabled by default | Events per second (default = 1) | |
| 125000738 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (metmet.win) | Enabled by default | Events per second (default = 1) | |
| 125000739 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (metmet.win) | Enabled by default | Events per second (default = 1) | |
| 125000740 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (mileslook.pro) | Enabled by default | Events per second (default = 1) | |
| 125000741 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (mileslook.pro) | Enabled by default | Events per second (default = 1) | |
| 125000742 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (msu96b.top) | Enabled by default | Events per second (default = 1) | |
| 125000743 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (msu96b.top) | Enabled by default | Events per second (default = 1) | |
| 125000744 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (n80yab.top) | Enabled by default | Events per second (default = 1) | |
| 125000745 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (n80yab.top) | Enabled by default | Events per second (default = 1) | |
| 125000746 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (nearlybut.us) | Enabled by default | Events per second (default = 1) | |
| 125000747 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (nearlybut.us) | Enabled by default | Events per second (default = 1) | |
| 125000748 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (needmight.win) | Enabled by default | Events per second (default = 1) | |
| 125000749 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (needmight.win) | Enabled by default | Events per second (default = 1) | |
| 125000750 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (nextask.loan) | Enabled by default | Events per second (default = 1) | |
| 125000751 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (nextask.loan) | Enabled by default | Events per second (default = 1) | |
| 125000752 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (nfgpeb.top) | Enabled by default | Events per second (default = 1) | |
| 125000753 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (nfgpeb.top) | Enabled by default | Events per second (default = 1) | |
| 125000754 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ninedraws.black) | Enabled by default | Events per second (default = 1) | |
| 125000755 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ninedraws.black) | Enabled by default | Events per second (default = 1) | |
| 125000756 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (nowants.pw) | Enabled by default | Events per second (default = 1) | |
| 125000757 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (nowants.pw) | Enabled by default | Events per second (default = 1) | |
| 125000758 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (og5ezh.top) | Enabled by default | Events per second (default = 1) | |
| 125000759 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (og5ezh.top) | Enabled by default | Events per second (default = 1) | |
| 125000760 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (plambers.bid) | Enabled by default | Events per second (default = 1) | |
| 125000761 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (plambers.bid) | Enabled by default | Events per second (default = 1) | |
| 125000762 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (plotbet.gdn) | Enabled by default | Events per second (default = 1) | |
| 125000763 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (plotbet.gdn) | Enabled by default | Events per second (default = 1) | |
| 125000764 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (powersno.link) | Enabled by default | Events per second (default = 1) | |
| 125000765 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (powersno.link) | Enabled by default | Events per second (default = 1) | |
| 125000766 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using UDP (futnudxthoj.org) | Enabled by default | Events per second (default = 1) | |
| 125000767 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000768 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000769 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000770 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000771 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000772 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000773 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000774 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000775 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000776 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000777 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000778 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000779 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (frecvuged.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000780 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (jetcoul.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000781 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000782 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000783 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000784 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000785 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000786 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000787 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000788 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000789 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000790 | System | DROP UDP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000791 | System | DROP TCP TROJAN Ransomware Domain | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000792 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000793 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000794 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000795 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000796 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000797 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000798 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000799 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000800 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000801 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000802 | System | DROP UDP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000803 | System | DROP TCP TROJAN ABUSE.CH Ransomware | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125000804 | System | DROP UDP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using UDP (rapidcomments.com) | Enabled by default | Events per second (default = 1) | |
| 125000805 | System | DROP TCP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using TCP (rapidcomments.com) | Enabled by default | Events per second (default = 1) | |
| 125000806 | System | DROP UDP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using UDP (bikessport.com) | Enabled by default | Events per second (default = 1) | |
| 125000807 | System | DROP TCP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using TCP (bikessport.com) | Enabled by default | Events per second (default = 1) | |
| 125000808 | System | DROP UDP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using UDP (myhomemusic.com) | Enabled by default | Events per second (default = 1) | |
| 125000809 | System | DROP TCP TROJAN ProjectSauron Remsec | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using TCP (myhomemusic.com) | Enabled by default | Events per second (default = 1) | |
| 125000810 | System | DROP UDP TROJAN ProjectSauron Remsec DNS UDP Lookup (flowershop22.110mb.com) | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using UDP (flowershop22.110mb.com) | Enabled by default | Events per second (default = 1) | |
| 125000811 | System | DROP TCP TROJAN ProjectSauron Remsec DNS TCP Lookup (flowershop22.110mb.com) | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using TCP (flowershop22.110mb.com) | Enabled by default | Events per second (default = 1) | |
| 125000812 | System | DROP UDP TROJAN ProjectSauron Remsec DNS UDP Lookup (wildhorses.awardspace.info) | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using UDP (wildhorses.awardspace.info) | Enabled by default | Events per second (default = 1) | |
| 125000813 | System | DROP TCP TROJAN ProjectSauron Remsec DNS TCP Lookup (wildhorses.awardspace.info) | This rule drops TROJAN ProjectSauron Remsec DNS Lookup using TCP (wildhorses.awardspace.info) | Enabled by default | Events per second (default = 1) | |
| 125000814 | System | DROP UDP TROJAN ProjectSauron Remsec DNS UDP Lookup (asrgd-uzX.weedns.com) | This rule drops TROJAN ProjectSauron Remsec DNS UDP Lookup (asrgd-uzX.weedns.com) | Enabled by default | Events per second (default = 1) | |
| 125000815 | System | DROP TCP TROJAN ProjectSauron Remsec DNS TCP Lookup (asrgd-uzX.weedns.com) | This rule drops TROJAN ProjectSauron Remsec DNS TCP Lookup (asrgd-uzX.weedns.com) | Enabled by default | Events per second (default = 1) | |
| 125000816 | System | DROP UDP TROJAN ProjectSauron Remsec DNS UDP Lookup (sx4-ws42.yi.org) | This rule drops TROJAN ProjectSauron Remsec DNS UDP Lookup (sx4-ws42.yi.org) | Enabled by default | Events per second (default = 1) | |
| 125000817 | System | DROP TCP TROJAN ProjectSauron Remsec DNS TCP Lookup (sx4-ws42.yi.org) | This rule drops TROJAN ProjectSauron Remsec DNS TCP Lookup (sx4-ws42.yi.org) | Enabled by default | Events per second (default = 1) | |
| 125000818 | System | DROP UDP TROJAN ProjectSauron Remsec DNS UDP Lookup (weX.q.tcow.eu) | This rule drops TROJAN ProjectSauron Remsec DNS UDP Lookup (weX.q.tcow.eu) | Enabled by default | Events per second (default = 1) | |
| 125000819 | System | DROP TCP TROJAN ProjectSauron Remsec DNS TCP Lookup (weX.q.tcow.eu) | This rule drops TROJAN ProjectSauron Remsec DNS TCP Lookup (weX.q.tcow.eu) | Enabled by default | Events per second (default = 1) | |
| 125000820 | System | DROP UDP TROJAN DarkHotel DNS UDP | This rule drops TROJAN DarkHotel DNS Lookup using UDP (apply-wsu.ebizx.net) | Enabled by default | Events per second (default = 1) | |
| 125000821 | System | DROP TCP TROJAN DarkHotel DNS TCP | This rule drops TROJAN DarkHotel DNS Lookup using TCP (apply-wsu.ebizx.net) | Enabled by default | Events per second (default = 1) | |
| 125000822 | System | DROP UDP TROJAN DarkHotel DNS UDP | This rule drops TROJAN DarkHotel DNS Lookup using UDP (apply.ebizx.net) | Enabled by default | Events per second (default = 1) | |
| 125000823 | System | DROP TCP TROJAN DarkHotel DNS TCP | This rule drops TROJAN DarkHotel DNS Lookup using TCP (apply.ebizx.net) | Enabled by default | Events per second (default = 1) | |
| 125000824 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.l DNS Lookup using UDP (droidgrades.top) | Enabled by default | Events per second (default = 1) | |
| 125000825 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000826 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000827 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.l DNS Lookup using TCP (droidgrades.us) | Enabled by default | Events per second (default = 1) | |
| 125000828 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (redefined.click) | Enabled by default | Events per second (default = 1) | |
| 125000829 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (redefined.click) | Enabled by default | Events per second (default = 1) | |
| 125000830 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (relyleafs.click) | Enabled by default | Events per second (default = 1) | |
| 125000831 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (relyleafs.click) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (relyleafs.click) | Enabled by default | Events per second (default = 1) | |
| 125000832 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ridsimply.top) | Enabled by default | Events per second (default = 1) | |
| 125000833 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ridsimply.top) | Enabled by default | Events per second (default = 1) | |
| 125000834 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (rl0bdw.top) | Enabled by default | Events per second (default = 1) | |
| 125000835 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (rl0bdw.top) | Enabled by default | Events per second (default = 1) | |
| 125000836 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (rnkj09.top) | Enabled by default | Events per second (default = 1) | |
| 125000837 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (rnkj09.top) | Enabled by default | Events per second (default = 1) | |
| 125000838 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (sayssales.bid) | Enabled by default | Events per second (default = 1) | |
| 125000839 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (sayssales.bid) | Enabled by default | Events per second (default = 1) | |
| 125000840 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (seenmust.pro) | Enabled by default | Events per second (default = 1) | |
| 125000841 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (seenmust.pro) | Enabled by default | Events per second (default = 1) | |
| 125000842 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (sk8r54.top) | Enabled by default | Events per second (default = 1) | |
| 125000843 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (sk8r54.top) | Enabled by default | Events per second (default = 1) | |
| 125000844 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (ssd5gt.top) | Enabled by default | Events per second (default = 1) | |
| 125000845 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (ssd5gt.top) | Enabled by default | Events per second (default = 1) | |
| 125000846 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (stopsage.gdn) | Enabled by default | Events per second (default = 1) | |
| 125000847 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (stopsage.gdn) | Enabled by default | Events per second (default = 1) | |
| 125000848 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (thanreal.link) | Enabled by default | Events per second (default = 1) | |
| 125000849 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (thanreal.link) | Enabled by default | Events per second (default = 1) | |
| 125000850 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (themevery.win) | Enabled by default | Events per second (default = 1) | |
| 125000851 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (themevery.win) | Enabled by default | Events per second (default = 1) | |
| 125000852 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (topicside.club) | Enabled by default | Events per second (default = 1) | |
| 125000853 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (topicside.club) | Enabled by default | Events per second (default = 1) | |
| 125000854 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (v11z5e.top) | Enabled by default | Events per second (default = 1) | |
| 125000855 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (v11z5e.top) | Enabled by default | Events per second (default = 1) | |
| 125000856 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (variedtax.kim) | Enabled by default | Events per second (default = 1) | |
| 125000857 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (variedtax.kim) | Enabled by default | Events per second (default = 1) | |
| 125000858 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (vkm4l6.top) | Enabled by default | Events per second (default = 1) | |
| 125000859 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (vkm4l6.top) | Enabled by default | Events per second (default = 1) | |
| 125000860 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (wht5py.top) | Enabled by default | Events per second (default = 1) | |
| 125000861 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (wht5py.top) | Enabled by default | Events per second (default = 1) | |
| 125000862 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (wishsends.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000863 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (wishsends.mobi) | Enabled by default | Events per second (default = 1) | |
| 125000864 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (wonrough.in) | Enabled by default | Events per second (default = 1) | |
| 125000865 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (wonrough.in) | Enabled by default | Events per second (default = 1) | |
| 125000866 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (worsemine.pro) | Enabled by default | Events per second (default = 1) | |
| 125000867 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (worsemine.pro) | Enabled by default | Events per second (default = 1) | |
| 125000868 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (wz139z.top) | Enabled by default | Events per second (default = 1) | |
| 125000869 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (wz139z.top) | Enabled by default | Events per second (default = 1) | |
| 125000870 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (xab7m0.top) | Enabled by default | Events per second (default = 1) | |
| 125000871 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (xab7m0.top) | Enabled by default | Events per second (default = 1) | |
| 125000872 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (y721yz.top) | Enabled by default | Events per second (default = 1) | |
| 125000873 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (y721yz.top) | Enabled by default | Events per second (default = 1) | |
| 125000874 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (yw4629.top) | Enabled by default | Events per second (default = 1) | |
| 125000875 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (yw4629.top) | Enabled by default | Events per second (default = 1) | |
| 125000876 | System | DROP UDP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (z7ud98.top) | Enabled by default | Events per second (default = 1) | |
| 125000877 | System | DROP TCP POLICY DNS Query to.onion proxy | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (z7ud98.top) | Enabled by default | Events per second (default = 1) | |
| 125000878 | System | DROP UDP TROJAN Unknown .onion Proxy | This rule drops TROJAN Unknown .onion Proxy Domain Lookup using UDP (stohavlirqmkz5te) | Enabled by default | Events per second (default = 1) | |
| 125000879 | System | DROP TCP TROJAN Unknown .onion Proxy | This rule drops TROJAN Unknown .onion Proxy Domain Lookup using TCP (stohavlirqmkz5te) | Enabled by default | Events per second (default = 1) | |
| 125000880 | System | DROP UDP TROJAN Python/SupAgent Domain (lrcyuawm7ifaqqhp) | This rule drops TROJAN Python/SupAgent .onion | Enabled by default | Events per second (default = 1) | |
| 125000881 | System | DROP TCP TROJAN Python/SupAgent.onion Proxy Domain (lrcyuawm7ifaqqhp) | This rule drops TROJAN Python/SupAgent .onion | Enabled by default | Events per second (default = 1) | |
| 125000882 | System | DROP UDP INFO DYNAMIC_DNS Query to a Suspicious now-ip | This rule drops INFO DYNAMIC_DNS Query to a | Enabled by default | Events per second (default = 1) | |
| 125000883 | System | DROP TCP INFO DYNAMIC_DNS Query to a Suspicious now-ip | This rule drops INFO DYNAMIC_DNS Query to a | Enabled by default | Events per second (default = 1) | |
| 125000884 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000885 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000886 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000887 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000888 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125000889 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.l DNS Lookup using TCP (stockmart.at) | Enabled by default | Events per second (default = 1) | |
| 125000890 | System | DROP UDP TROJAN Ransomware/Cerber Onion Domain UDP | This rule drops TROJAN Ransomware/Cerber Onion Domain Lookup using UDP (bqyjebfh25oellur) | Enabled by default | Events per second (default = 1) | |
| 125000891 | System | DROP TCP TROJAN Ransomware/Cerber Onion Domain TCP | This rule drops TROJAN Ransomware/Cerber Onion Domain Lookup using TCP (bqyjebfh25oellur) | Enabled by default | Events per second (default = 1) | |
| 125000892 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.l DNS Lookup using UDP (arfonia.xyz) | Enabled by default | Events per second (default = 1) | |
| 125000893 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.l DNS Lookup using TCP (arfonia.xyz) | Enabled by default | Events per second (default = 1) | |
| 125000894 | System | DROP UDP TROJAN Ransomware Alma | This rule drops TROJAN Ransomware Alma Locker.onion Proxy Domain Lookup using UDP (jjuwnj2ejjmafg74) | Enabled by default | Events per second (default = 1) | |
| 125000895 | System | DROP TCP TROJAN Ransomware Alma | This rule drops TROJAN Ransomware Alma Locker.onion Proxy Domain Lookup using TCP (jjuwnj2ejjmafg74) | Enabled by default | Events per second (default = 1 | |
| 125000896 | System | DROP UDP TROJAN Cerber .onion Proxy | This rule drops TROJAN Cerber.onion Proxy Domain Lookup using UDP (wjtqjleommc4z46i) | Enabled by default | Events per second (default = 1) | |
| 125000897 | System | DROP TCP TROJAN Cerber .onion Proxy | This rule drops TROJAN Cerber.onion Proxy Domain Lookup using TCP (wjtqjleommc4z46i) | Enabled by default | Events per second (default = 1) | |
| 125000898 | System | DROP UDP TROJAN Sefnit .onion Proxy | This rule drops TROJAN Sefnit.onion Proxy Domain Lookup using UDP (kushibsf64sn5bxp) | Enabled by default | Events per second (default = 1) | |
| 125000899 | System | DROP TCP TROJAN Sefnit .onion Proxy | This rule drops TROJAN Sefnit.onion Proxy Domain Lookup using TCP (kushibsf64sn5bxp) | Enabled by default | Events per second (default = 1) | |
| 125000900 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (dakegihufiq.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000901 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (dakegihufiq.org) | This rule drops TROJAN Ransomware DomainDetected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000902 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (kadhyzyi.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000903 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (kadhyzyi.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000904 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000905 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000906 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (biolendt.com) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000907 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000908 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (gorvekt.biz) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125000909 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (gorvekt.biz) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) | Enabled by default | Events per second (default = 1) | |
| 125000910 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (coalfud.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using UDP (coalfud.net) | Enabled by default | Events per second (default = 1) | |
| 125000911 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (coalfud.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using TCP (coalfud.net) | Enabled by default | Events per second (default = 1) | |
| 125000912 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLockerC2) (jyhedkoper.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using UDP (jyhedkoper.net) | Enabled by default | Events per second (default = 1) | |
| 125000913 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLockerC2) (jyhedkoper.net) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using TCP (jyhedkoper.net) | Enabled by default | Events per second (default = 1) | |
| 125000914 | System | DROP UDP TROJAN Ransomware | This rule drops TROJAN Ransomware CTB-Locker Lookup using UDP (rd7v7mhidgrulwqg) | Enabled by default | Events per second (default = 1) | |
| 125000915 | System | DROP TCP TROJAN Ransomware | This rule drops TROJAN Ransomware CTB-Locker.onion Proxy Domain Lookup using TCP (rd7v7mhidgrulwqg) | Enabled by default | Events per second (default = 1) | |
| 125000916 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain (5n7y4yihirccftc5) | This rule drops TROJAN Ransomware Locky .onion Domain using UDP (5n7y4yihirccftc5) | Enabled by default | Events per second (default = 1) | |
| 125000917 | System | DROP TCP TROJAN Ransomware Locky Domain (5n7y4yihirccftc5) | This rule drops TROJAN Ransomware Locky .onion | Enabled by default | Events per second (default = 1) | |
| 125000918 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000919 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125000920 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000921 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000922 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000923 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000924 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000925 | System | DROP TCP TROJAN Possible Pegasus Related DNS TCP | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000926 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000927 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000928 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000929 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000930 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000931 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000932 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000933 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000934 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000935 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000936 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000937 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000938 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000939 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000940 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000941 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000942 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000943 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000944 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000945 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000946 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000947 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000948 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000949 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000950 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000951 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000952 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000953 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000954 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000955 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000956 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000957 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000958 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000959 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000960 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000961 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000962 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000963 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
125000964 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000965 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000966 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000967 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000968 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000969 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000970 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000971 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000972 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000973 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000974 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000975 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000976 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000977 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
125000978 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000979 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000980 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000981 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000982 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000983 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000984 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000985 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000986 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000987 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000988 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000989 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000990 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
125000991 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000992 | System | DROP UDP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000993 | System | DROP TCP TROJAN Possible Pegasus | This rule drops TROJAN Possible Pegasus Related DNS | Enabled by default | Events per second (default = 1) | |
| 125000994 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.my) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.my) | Enabled by default | Events per second (default = 1) | |
| 125000995 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.my) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.my) | Enabled by default | Events per second (default = 1) | |
| 125000996 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.tech) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.tech) | Enabled by default | Events per second (default = 1) | |
| 125000997 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.tech) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.tech) | Enabled by default | Events per second (default = 1) | |
| 125000998 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (hiddenservice.net) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (hiddenservice.net) | Enabled by default | Events per second (default = 1) | |
| 125000999 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (hiddenservice.net) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (hiddenservice.net) | Enabled by default | Events per second (default = 1) | |
| 125001000 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.cl) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.cl) | Enabled by default | Events per second (default = 1) | |
| 125001001 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.cl) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.cl) | Enabled by default | Events per second (default = 1) | |
| 125001002 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.it) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.it) | Enabled by default | Events per second (default = 1) | |
| 125001003 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.it) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.it) | Enabled by default | Events per second (default = 1) | |
| 125001004 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.ink) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.ink) | Enabled by default | Events per second (default = 1) | |
| 125001005 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.ink) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.ink) | Enabled by default | Events per second (default = 1) | |
| 125001006 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.live) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.live) | Enabled by default | Events per second (default = 1) | |
| 125001007 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.live) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.live) | Enabled by default | Events per second (default = 1) | |
| 125001008 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (torlink.co) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (torlink.co) | Enabled by default | Events per second (default = 1) | |
125001009 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (torlink.co) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (torlink.co) | Enabled by default | Events per second (default = 1) | |
| 125001010 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (tor2.club) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (tor2.club) | Enabled by default | Events per second (default = 1) | |
| 125001011 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (tor2.club) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (tor2.club) | Enabled by default | Events per second (default = 1) | |
| 125001012 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (onion.co) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (onion.co) | Enabled by default | Events per second (default = 1) | |
| 125001013 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (onion.co) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (onion.co) | Enabled by default | Events per second (default = 1) | |
| 125001014 | System | DROP UDP TROJAN ReverseShell Download.onion Proxy Domain | This rule drops TROJAN ReverseShell Download .onion Proxy Domain Lookup using UDP (6deuyi43pdjs5ngw) | Enabled by default | Events per second (default = 1) | |
| 125001015 | System | DROP TCP TROJAN ReverseShell Download.onion Proxy Domain | This rule drops TROJAN ReverseShell Download .onion Proxy Domain Lookup using TCP (6deuyi43pdjs5ngw) | Enabled by default | Events per second (default = 1) | |
| 125001016 | System | DROP UDP TROJAN Meterpreter .onion | This rule drops TROJAN Meterpreter .onion Proxy Domain Lookup using UDP (iv4vxs6plynght7x) | Enabled by default | Events per second (default = 1) | |
| 125001017 | System | DROP TCP TROJAN Meterpreter .onion | This rule drops TROJAN Meterpreter .onion Proxy Lookup using TCP (iv4vxs6plynght7x) | Enabled by default | Events per second (default = 1) | |
| 125001018 | System | DROP UDP TROJAN Ransomware/Cerber Onion Domain UDP | This rule drops TROJAN Ransomware/Cerber Onion Lookup using UDP (6liso4fbnupevqsn) | Enabled by default | Events per second (default = 1) | |
| 125001019 | System | DROP TCP TROJAN Ransomware/Cerber Onion Domain TCP | This rule drops TROJAN Ransomware/Cerber Onion Lookup using TCP (6liso4fbnupevqsn) | Enabled by default | Events per second (default = 1) | |
| 125001020 | System | DROP UDP TROJAN TorrentLocker DNS UDP | This rule drops TROJAN TorrentLocker DNS Lookup using UDP (bigcrashcar.net) | Enabled by default | Events per second (default = 1) | |
| 125001021 | System | DROP TCP TROJAN TorrentLocker DNS TCP | This rule drops TROJAN TorrentLocker DNS Lookup using TCP (bigcrashcar.net) | Enabled by default | Events per second (default = 1) | |
| 125001022 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.n DNS Lookup using UDP (wellssecuritypass.com) | Enabled by default | Events per second (default = 1) | |
| 125001023 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.n DNS Lookup using TCP (wellssecuritypass.com) | Enabled by default | Events per second (default = 1) | |
125001024 | System | DROP UDP TROJAN Cry Ransomware Onion | This rule drops TROJAN Cry Ransomware Onion Domain | Enabled by default | Events per second (default = 1) | |
| 125001025 | System | DROP TCP TROJAN Cry Ransomware Onion | This rule drops TROJAN Cry Ransomware Onion Domain | Enabled by default | Events per second (default = 1) | |
| 125001026 | System | DROP UDP TROJAN Ransomware/Poshcoder Onion Domain UDP | This rule drops TROJAN Ransomware/Poshcoder | Enabled by default | Events per second (default = 1) | |
| 125001027 | System | DROP TCP TROJAN Ransomware/Poshcoder Onion Domain TCP | This rule drops TROJAN Ransomware/Poshcoder | Enabled by default | Events per second (default = 1) | |
| 125001028 | System | DROP UDP TROJAN Possible APT3 DNS UDP | This rule drops TROJAN Possible APT3 DNS Lookup using UDP (ste.mullanclan.com) | Enabled by default | Events per second (default = 1) | |
| 125001029 | System | DROP TCP TROJAN Possible APT3 DNS TCP | This rule drops TROJAN Possible APT3 DNS Lookup using TCP (ste.mullanclan.com) | Enabled by default | Events per second (default = 1) | |
| 125001030 | System | DROP UDP TROJAN Possible APT3 DNS UDP | This rule drops TROJAN Possible APT3 DNS Lookup using UDP (ptr.holmessupply.com) | Enabled by default | Events per second (default = 1) | |
| 125001031 | System | DROP TCP TROJAN Possible APT3 DNS TCP | This rule drops TROJAN Possible APT3 DNS Lookup using TCP (ptr.holmessupply.com) | Enabled by default | Events per second (default = 1) | |
| 125001032 | System | DROP UDP TROJAN Possible APT3 DNS UDP | This rule drops TROJAN Possible APT3 DNS Lookup using UDP (lite.ultralitedesigns.com) | Enabled by default | Events per second (default = 1) | |
| 125001033 | System | DROP TCP TROJAN Possible APT3 DNS TCP | This rule drops TROJAN Possible APT3 DNS Lookup using TCP (lite.ultralitedesigns.com) | Enabled by default | Events per second (default = 1) | |
| 125001034 | System | DROP UDP TROJAN Possible APT3 DNS UDP | This rule drops TROJAN Possible APT3 DNS Lookup using UDP (parent.kaapagrains.com) | Enabled by default | Events per second (default = 1) | |
| 125001035 | System | DROP TCP TROJAN Possible APT3 DNS TCP | This rule drops TROJAN Possible APT3 DNS Lookup using TCP (parent.kaapagrains.com) | Enabled by default | Events per second (default = 1) | |
| 125001036 | System | DROP UDP DNS Query to Ebay Phishing | This rule drops DNS Query to Ebay Phishing Domain using UDP (107sbtd9cbhsbtd5d80) | Enabled by default | Events per second (default = 1) | |
| 125001037 | System | DROP TCP DNS Query to Ebay Phishing Domain (107sbtd9cbhsbtd5d80) | This rule drops DNS Query to Ebay Phishing Domain using TCP (107sbtd9cbhsbtd5d80) | Enabled by default | Events per second (default = 1) | |
| 125001038 | System | DROP UDP TROJAN BartCrypt Payment DNS Query to.onion proxy | This rule drops TROJAN BartCrypt Payment DNS Queryto.onion proxy Domain using | Enabled by default | Events per second (default = 1) | |
125001039 | System | DROP TCP TROJAN BartCrypt Payment DNS Query to.onion proxy | This rule drops TROJAN BartCrypt Payment DNS Queryto.onion proxy Domain using | Enabled by default | Events per second (default = 1) | |
| 125001040 | System | DROP UDP TROJAN ABUSE.CH Ransomware Domain Detected | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125001041 | System | DROP TCP TROJAN ABUSE.CH Ransomware Domain Detected | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125001042 | System | DROP UDP TROJAN ABUSE.CH Ransomware Domain Detected | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125001043 | System | DROP TCP TROJAN ABUSE.CH Ransomware Domain Detected | This rule drops TROJAN ABUSE.CH Ransomware | Enabled by default | Events per second (default = 1) | |
| 125001044 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.q DNS Lookup using UDP (bastebirk.com) | Enabled by default | Events per second (default = 1) | |
| 125001045 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher.q DNS Lookup using TCP (bastebirk.com) | Enabled by default | Events per second (default = 1) | |
| 125001046 | System | DROP UDP TROJAN Likely APT28 DNS UDP | This rule drops TROJAN Likely | Enabled by default | Events per second (default = 1) | |
| 125001047 | System | DROP TCP TROJAN Likely APT28 DNS TCP Lookup (worldpostjournal.com) | This rule drops TROJAN Likely APT28 DNS Lookup using TCP (worldpostjournal.com) | Enabled by default | Events per second (default = 1) | |
| 125001048 | System | DROP UDP TROJAN Possible Remcos/Remvio DNS UDP Lookup (maxsen.ddns.net) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
| 125001049 | System | DROP TCP TROJAN Possible Lookup (maxsen.ddns.net) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
| 125001050 | System | DROP UDP TROJAN Possible Lookup (maxten.serveftp.com) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
| 125001051 | System | DROP TCP TROJAN Possible Remcos/Remvio DNS TCP Lookup (maxten.serveftp.com) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
125001052 | System | DROP UDP TROJAN Possible Lookup (maxxven.serveftp.com) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
| 125001053 | System | DROP TCP TROJAN Possible Lookup (maxxven.serveftp.com) | This rule drops TROJAN Possible Remcos/Remvio DNS | Enabled by default | Events per second (default = 1) | |
| 125001054 | System | DROP UDP TROJAN Win32/Agent.XTP.onion Proxy Domain (7bmbjgr4kufcslej) | This rule drops TROJAN Win32/Agent.XTP .onion Proxy Domain Lookup using UDP (7bmbjgr4kufcslej) | Enabled by default | Events per second (default = 1) | |
| 125001055 | System | DROP TCP TROJAN Win32/Agent.XTP | This rule drops TROJAN Win32/Agent.XTP .onion Proxy | Enabled by default | Events per second (default = 1) | |
| 125001056 | System | DROP UDP TROJAN Ransomware Locky.onion Payment Domain | This rule drops TROJAN Ransomware Locky .onion Domain using UDP (f5xraa2y2ybtrefz | Enabled by default | Events per second (default = 1) | |
| 125001057 | System | DROP TCP TROJAN Ransomware Locky | This rule drops TROJAN Ransomware Locky .onion | Enabled by default | Events per second (default = 1) | |
| 125001058 | System | DROP UDP WEB_SERVER DNS | This rule drops WEB_SERVER DNS Query for Suspicious 33db9538.com Domain - Anuna Checkin - Compromised PHP Site using UDP | Enabled by default | Events per second (default = 1) | |
| 125001059 | System | DROP TCP WEB_SERVER DNS Query for Suspicious 33db9538.com Domain | This rule drops WEB_SERVER DNS Query for Suspicious 33db9538.com Domain - Anuna Checkin - Compromised PHP Site using TCP | Enabled by default | Events per second (default = 1) | |
| 125001060 | System | DROP UDP WEB_SERVER DNS | This rule drops WEB_SERVER DNS Query for Suspicious 9507c4e8.com Domain -Anuna Checkin - Compromised PHP Site using UDP | Enabled by default | Events per second (default = 1) | |
| 125001061 | System | DROP TCP WEB_SERVER DNS Query for Suspicious 9507c4e8.com Domain | This rule drops WEB_SERVER DNS Query for Suspicious 9507c4e8.com Domain - Anuna Checkin - Compromised PHP Site using TCP | Enabled by default | Events per second (default = 1) | |
| 125001062 | System | DROP UDP WEB_SERVER DNS | This rule drops WEB_SERVER DNS Query for Suspicious e5b57288.com Domain - Anuna Checkin - Compromised PHP Site using UDP | Enabled by default | Events per second (default = 1) | |
| 125001063 | System | DROP TCP WEB_SERVER DNS Query for Suspicious e5b57288.com Domain | This rule drops WEB_SERVER DNS Query for Suspicious e5b57288.com Domain - | Enabled by default | Events per second (default = 1) | |
125001064 | System | DROP UDP WEB_SERVER DNS | This rule drops WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site using UDP | Enabled by default | Events per second (default = 1) | |
| 125001065 | System | DROP TCP WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - | This rule drops WEB_SERVER DNS Query for Suspicious 54dfa1cb.com Domain - Anuna Checkin - Compromised PHP Site using TCP | Enabled by default | Events per second (default = 1) | |
| 125001066 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Lookup using UDP (int-estate.eu) | Enabled by default | Events per second (default = 1) | |
| 125001067 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Lookup using TCP (int-estate.eu) | Enabled by default | Events per second (default = 1) | |
| 125001068 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (officeupdater.com) | Enabled by default | Events per second (default = 1) | |
| 125001069 | System | DROP TCP TROJAN APT28 XAgent DNS TCP | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (officeupdater.com) | Enabled by default | Events per second (default = 1) | |
| 125001070 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (windowsxupdate.com) | Enabled by default | Events per second (default = 1) | |
| 125001071 | System | DROP TCP TROJAN APT28 XAgent DNS TCP | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (windowsxupdate.com) | Enabled by default | Events per second (default = 1) | |
| 125001072 | System | DROP UDP TROJAN Zbot!CI .onion Proxy | This rule drops TROJAN Zbot!CI.onion Proxy Domain Lookup using UDP (qf7ck3kj3nps4n3n) | Enabled by default | Events per second (default = 1) | |
| 125001073 | System | DROP TCP TROJAN Zbot!CI .onion Proxy | This rule drops TROJAN Zbot!CI.onion Proxy Domain Lookup using TCP (qf7ck3kj3nps4n3n) | Enabled by default | Events per second (default = 1) | |
| 125001074 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (bigestcity.com) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001075 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (bigestcity.com) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001076 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (commingtoday.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001077 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (commingtoday.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
125001078 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (blowjek.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001079 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (blowjek.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001080 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (hoecred.com) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001081 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (hoecred.com) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001082 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001083 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (kolergt.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001084 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (oneklick.biz) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001085 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (oneklick.biz) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001086 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (gostavs.biz) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001087 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (gostavs.biz) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001088 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (artsteb.com) | This rule drops TROJAN Ransomware Domain Detected (TorrentLocker C2) using UDP (artsteb.com) | Enabled by default | Events per second (default = 1) | |
| 125001089 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (artsteb.com) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001090 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (miobrand.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001091 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (miobrand.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001092 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (borndorn.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001093 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (borndorn.net) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
125001094 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001095 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001096 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001097 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001098 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001099 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 Stage1 Uploader DNS Lookup using TCP (windystem.com) | Enabled by default | Events per second (default = 1) | |
| 125001100 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001101 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001102 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001103 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001104 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001105 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001106 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001107 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001108 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001109 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
125001110 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001111 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001112 | System | DROP UDP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001113 | System | DROP TCP TROJAN | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001116 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH TorrenLocker | Enabled by default | Events per second (default = 1) | |
| 125001117 | System | DROP TCP TROJAN | This rule drops TROJAN ABUSE.CH TorrenLocker | Enabled by default | Events per second (default = 1) | |
| 125001118 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH TorrenLocker | Enabled by default | Events per second (default = 1) | |
| 125001119 | System | DROP TCP TROJAN | This rule drops TROJAN ABUSE.CH TorrenLocker | Enabled by default | Events per second (default = 1) | |
| 125001120 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH Locky Payment Domain Detected using UDP (jhomitevd2abj3fk) | Enabled by default | Events per second (default = 1) | |
| 125001121 | System | DROP TCP TROJAN | This rule drops TROJAN ABUSE.CH Locky Payment Domain Detected using TCP | Enabled by default | Events per second (default = 1) | |
| 125001122 | System | DROP UDP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
| 125001123 | System | DROP TCP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
| 125001124 | System | DROP UDP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
| 125001125 | System | DROP TCP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
| 125001126 | System | DROP UDP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
125001127 | System | DROP TCP TROJAN | This rule drops TROJAN CryptoWall/TeslaCrypt | Enabled by default | Events per second (default = 1) | |
| 125001128 | System | DROP UDP EXPLOIT | This rule drops EXPLOIT BIND9 msg->reserved Assertion DoS Packet Inbound using UDP | Enabled by default | Events per second (default = 1) | |
| 125001129 | System | DROP TCP EXPLOIT | This rule drops EXPLOIT BIND9 msg->reserved Assertion DoS Packet Inbound using TCP | Enabled by default | Events per second (default = 1) | |
| 125001130 | System | DROP UDP | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Rittew.a DNS Lookup using UDP (dvosower.ru) | Enabled by default | Events per second (default = 1) | |
| 125001131 | System | DROP TCP | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Rittew.a DNS Lookup using TCP (dvosower.ru) | Enabled by default | Events per second (default = 1) | |
| 125001132 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Backdoor.AndroidOS.Rittew.a DNS Lookup using UDP (5vekta.ru) | Enabled by default | Events per second (default = 1) | |
| 125001133 | System | DROP TCP MOBILE_MALWARE Backdoor.AndroidOS.Ri ttew.a DNS TCP Lookup (5vekta.ru) | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125001134 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Mar cher DNS Lookup using UDP (erotical4all.org) | Enabled by default | Events per second (default = 1) | |
| 125001135 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Mar cher DNS Lookup using TCP (erotical4all.org) | Enabled by default | Events per second (default = 1) | |
| 125001136 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125001137 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Mar cher.pac DNS Lookup using | Enabled by default | Events per second (default = 1) | |
| 125001138 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125001139 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Mar cher.q DNS Lookup using TCP (propsyours.com) | Enabled by default | Events per second (default = 1) | |
125001140 | System | DROP UDP TROJAN APT28 XAgent DNS UDP Lookup (akamaichecker.com) | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (akamaichecker.com) | Enabled by default | Events per second (default = 1) | |
| 125001141 | System | DROP TCP TROJAN APT28 XAgent DNS TCP Lookup (akamaichecker.com) | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (akamaichecker.com) | Enabled by default | Events per second (default = 1) | |
| 125001142 | System | DROP UDP TROJAN Ransomware Domain Detected (TorrentLocker C2) (ordest.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001143 | System | DROP TCP TROJAN Ransomware Domain Detected (TorrentLocker C2) (ordest.org) | This rule drops TROJAN Ransomware Domain | Enabled by default | Events per second (default = 1) | |
| 125001144 | System | DROP UDP TROJAN DNS Query to Cerber Domain (u2r7tm.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001145 | System | DROP TCP TROJAN DNS Query to Cerber Domain (u2r7tm.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001146 | System | DROP UDP TROJAN DNS Query to Cerber Domain (gvoafg.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001147 | System | DROP TCP TROJAN DNS Query to Cerber Domain (gvoafg.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001148 | System | DROP UDP TROJAN DNS Query to Cerber Domain (zbj2kc.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001149 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zbj2kc.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001150 | System | DROP UDP TROJAN DNS Query to Cerber Domain (2y4t6f.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001151 | System | DROP TCP TROJAN DNS Query to Cerber Domain (2y4t6f.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001152 | System | DROP UDP TROJAN DNS Query to Cerber Domain (w6sj06.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001153 | System | DROP TCP TROJAN DNS Query to Cerber Domain (w6sj06.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001154 | System | DROP UDP TROJAN DNS Query to Cerber Domain (8zi4pf.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001155 | System | DROP TCP TROJAN DNS Query to Cerber Domain (8zi4pf.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001156 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tauunm.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001157 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tauunm.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001158 | System | DROP UDP TROJAN DNS Query to Cerber Domain (56185u.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
125001159 | System | DROP TCP TROJAN DNS Query to Cerber Domain (56185u.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001160 | System | DROP UDP TROJAN DNS Query to Cerber Domain (vmotsf.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001161 | System | DROP TCP TROJAN DNS Query to Cerber Domain (vmotsf.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001162 | System | DROP UDP TROJAN DNS Query to Cerber Domain (drawsif.loan) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001163 | System | DROP TCP TROJAN DNS Query to Cerber Domain (drawsif.loan) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001164 | System | DROP UDP TROJAN DNS Query to Cerber Domain (bipnnp.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001165 | System | DROP TCP TROJAN DNS Query to Cerber Domain (bipnnp.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001166 | System | DROP UDP TROJAN DNS Query to Cerber Domain (y12acl.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001167 | System | DROP TCP TROJAN DNS Query to Cerber Domain (y12acl.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001168 | System | DROP UDP TROJAN DNS Query to Cerber Domain (whomate.red) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001169 | System | DROP TCP TROJAN DNS Query to Cerber Domain (whomate.red) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001170 | System | DROP UDP TROJAN DNS Query to Cerber Domain (samesizes.asia) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001171 | System | DROP TCP TROJAN DNS Query to Cerber Domain (samesizes.asia) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001172 | System | DROP UDP TROJAN DNS Query to Cerber Domain (outpolicy.men) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001173 | System | DROP TCP TROJAN DNS Query to Cerber Domain (outpolicy.men) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001174 | System | DROP UDP TROJAN DNS Query to Cerber Domain (easyits.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001175 | System | DROP TCP TROJAN DNS Query to Cerber Domain (easyits.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001176 | System | DROP UDP TROJAN DNS Query to Cerber Domain (5ctoeb.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001177 | System | DROP TCP TROJAN DNS Query to Cerber Domain (5ctoeb.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001178 | System | DROP UDP TROJAN DNS Query to Cerber Domain (g948g1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001179 | System | DROP TCP TROJAN DNS Query to Cerber Domain (g948g1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001180 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rexjyp.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001181 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rexjyp.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001182 | System | DROP UDP TROJAN DNS Query to Cerber Domain (fx4wz2.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001183 | System | DROP TCP TROJAN DNS Query to Cerber Domain (fx4wz2.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001184 | System | DROP UDP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001185 | System | DROP TCP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001186 | System | DROP UDP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001187 | System | DROP TCP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001188 | System | DROP UDP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001189 | System | DROP TCP MOBILE_MALWARE | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001190 | System | DROP UDP TROJAN DNS Query to Cerber Domain (kb6051.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001191 | System | DROP TCP TROJAN DNS Query to Cerber Domain (kb6051.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001192 | System | DROP UDP TROJAN DNS Query to Cerber Domain (oldboxs.red) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001193 | System | DROP TCP TROJAN DNS Query to Cerber Domain (oldboxs.red) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001194 | System | DROP UDP TROJAN DNS Query to Cerber Domain (hhc366.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001195 | System | DROP TCP TROJAN DNS Query to Cerber Domain (hhc366.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001196 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ev99ln.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001197 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ev99ln.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001198 | System | DROP UDP TROJAN DNS Query to Cerber Domain (homehuge.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001199 | System | DROP TCP TROJAN DNS Query to Cerber Domain (homehuge.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001200 | System | DROP UDP TROJAN DNS Query to Cerber Domain (flowpoint.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001201 | System | DROP TCP TROJAN DNS Query to Cerber Domain (flowpoint.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001202 | System | DROP UDP TROJAN DNS Query to Cerber Domain (onlyprove.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001203 | System | DROP TCP TROJAN DNS Query to Cerber Domain (onlyprove.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001204 | System | DROP UDP TROJAN DNS Query to Cerber Domain (uwckha.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001205 | System | DROP TCP TROJAN DNS Query to Cerber Domain (uwckha.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001206 | System | DROP UDP TROJAN DNS Query to Cerber Domain (249isv.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001207 | System | DROP TCP TROJAN DNS Query to Cerber Domain (249isv.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001208 | System | DROP UDP TROJAN DNS Query to Cerber Domain (pfija1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001209 | System | DROP TCP TROJAN DNS Query to Cerber Domain (pfija1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001210 | System | DROP UDP TROJAN DNS Query to Cerber Domain (io9ygi.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001211 | System | DROP TCP TROJAN DNS Query to Cerber Domain (io9ygi.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001212 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tolgens.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001213 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tolgens.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001214 | System | DROP UDP TROJAN DNS Query to Cerber Domain (wheelball.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001215 | System | DROP TCP TROJAN DNS Query to Cerber Domain (wheelball.black) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001216 | System | DROP UDP TROJAN DNS Query to Cerber Domain (vpsj40.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001217 | System | DROP TCP TROJAN DNS Query to Cerber Domain (vpsj40.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001218 | System | DROP UDP TROJAN DNS Query to Cerber Domain (yoursdoor.lol) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001219 | System | DROP TCP TROJAN DNS Query to Cerber Domain (yoursdoor.lol) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001220 | System | DROP UDP TROJAN DNS Query to Cerber Domain (patchmans.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001221 | System | DROP TCP TROJAN DNS Query to Cerber Domain (patchmans.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001222 | System | DROP UDP TROJAN DNS Query to Cerber Domain (065ism.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001223 | System | DROP TCP TROJAN DNS Query to Cerber Domain (065ism.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001224 | System | DROP UDP TROJAN DNS Query to Cerber Domain (getsbug.kim) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001225 | System | DROP TCP TROJAN DNS Query to Cerber Domain (getsbug.kim) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001226 | System | DROP UDP TROJAN DNS Query to Cerber Domain (stageend.link) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001227 | System | DROP TCP TROJAN DNS Query to Cerber Domain (stageend.link) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001228 | System | DROP UDP TROJAN DNS Query to Cerber Domain (hotcopies.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001229 | System | DROP TCP TROJAN DNS Query to Cerber Domain (hotcopies.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001230 | System | DROP UDP TROJAN DNS Query to Cerber Domain (2ym6om.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001231 | System | DROP TCP TROJAN DNS Query to Cerber Domain (2ym6om.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001232 | System | DROP UDP TROJAN DNS Query to Cerber Domain (06boy8.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001233 | System | DROP TCP TROJAN DNS Query to Cerber Domain (06boy8.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001234 | System | DROP UDP TROJAN DNS Query to Cerber Domain (zmfhjr.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001235 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zmfhjr.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001236 | System | DROP UDP TROJAN DNS Query to Cerber Domain (holescase.pw) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001237 | System | DROP TCP TROJAN DNS Query to Cerber Domain (holescase.pw) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001238 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tankplain.date) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001239 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tankplain.date) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001240 | System | DROP UDP TROJAN DNS Query to Cerber Domain (n41n1a.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001241 | System | DROP TCP TROJAN DNS Query to Cerber Domain (n41n1a.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001242 | System | DROP UDP TROJAN DNS Query to Cerber Domain (storingus.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001243 | System | DROP TCP TROJAN DNS Query to Cerber Domain (storingus.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001244 | System | DROP UDP TROJAN DNS Query to Cerber Domain (piitem.in) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001245 | System | DROP TCP TROJAN DNS Query to Cerber Domain (piitem.in) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001246 | System | DROP UDP TROJAN DNS Query to Cerber Domain (jvrh8g.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001247 | System | DROP TCP TROJAN DNS Query to Cerber Domain (jvrh8g.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001248 | System | DROP UDP TROJAN DNS Query to Cerber Domain (laterugly.win) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001249 | System | DROP TCP TROJAN DNS Query to Cerber Domain (laterugly.win) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001250 | System | DROP UDP TROJAN DNS Query to Cerber Domain (eventeach.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001251 | System | DROP TCP TROJAN DNS Query to Cerber Domain (eventeach.gdn) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001252 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001253 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001254 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001255 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001256 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001257 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001258 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001259 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001260 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001261 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001262 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001263 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001264 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001265 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001266 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001267 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001268 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001269 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001270 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001271 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001272 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001273 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001274 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001275 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001276 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001277 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001278 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001279 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001280 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001281 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001282 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001283 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001284 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001285 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001286 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001287 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001288 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001289 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001290 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001291 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001292 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001293 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001294 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001295 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001296 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001297 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001298 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001299 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001300 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001301 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001302 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001303 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001304 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001305 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001306 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001307 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001308 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001309 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001310 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001311 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001312 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001313 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001314 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001315 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001316 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001317 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001318 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001319 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001320 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001321 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001322 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001323 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001324 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001325 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001326 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001327 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001328 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001329 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001330 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001331 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001332 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001333 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001334 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001335 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001336 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001337 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001338 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001339 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001340 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001341 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001342 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001343 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001344 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001345 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001346 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001347 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001348 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001349 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001350 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001351 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001352 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001353 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001354 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001355 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001356 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001357 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001358 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001359 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001360 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001361 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001362 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001363 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001364 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001365 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001366 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001367 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001368 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001369 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001370 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001371 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001372 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001373 | System | DROP TCP TROJAN APT28/Sednit DNS TCP | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001374 | System | DROP UDP TROJAN APT28/Sednit DNS UDP | This rule drops TROJAN APT28/Sednit DNS Lookup | Enabled by default | Events per second (default = 1) | |
| 125001375 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup (capisp.com) | This rule drops TROJAN APT28/Sednit DNS Lookup | Enabled by default | Events per second (default = 1) | |
| 125001376 | System | DROP UDP TROJAN APT28/Sednit DNS UDP Lookup (dataclen.org) | This rule drops TROJAN APT28/Sednit DNS Lookup | Enabled by default | Events per second (default = 1) | |
| 125001377 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup (dataclen.org) | This rule drops TROJAN APT28/Sednit DNS Lookup | Enabled by default | Events per second (default = 1) | |
| 125001378 | System | DROP UDP TROJAN APT28/Sednit DNS UDP Lookup (mscoresvw.com) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001379 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup (mscoresvw.com) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001380 | System | DROP UDP TROJAN APT28/Sednit DNS UDP Lookup (windowscheckupdater.net) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001381 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001382 | System | DROP UDP TROJAN APT28/Sednit DNS UDP Lookup (acledit.com) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001383 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup (acledit.com) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001384 | System | DROP UDP TROJAN APT28/Sednit DNS UDP Lookup (biocpl.org) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001385 | System | DROP TCP TROJAN APT28/Sednit DNS TCP Lookup (biocpl.org) | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001386 | System | DROP UDP TROJAN DNS Query to Cerber Domain (nxmu0x.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001387 | System | DROP TCP TROJAN DNS Query to Cerber Domain (nxmu0x.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001388 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001389 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001390 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001391 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001392 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001393 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001394 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001395 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001396 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001397 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001398 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001399 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001400 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001401 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001402 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001403 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001404 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001405 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001406 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001407 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001408 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001409 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001410 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001411 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001412 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001413 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001414 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001415 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001416 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001417 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001418 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001419 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001420 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001421 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001422 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001423 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001424 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001425 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001426 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001427 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001428 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001429 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001430 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001431 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001432 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001433 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001434 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001435 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001436 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001437 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001438 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001439 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001440 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001441 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001442 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001443 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001444 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001445 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001446 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001447 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001448 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001449 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001450 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001451 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001452 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001453 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001454 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001455 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001456 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001457 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001458 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001459 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001460 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001461 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001462 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001463 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001464 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001465 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001466 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001467 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001468 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001469 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001470 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001471 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001472 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001473 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001474 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001475 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001476 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001477 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001478 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001479 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001480 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001481 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001482 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001483 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001484 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001485 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001486 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001487 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001488 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001489 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001490 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001491 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001492 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001493 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001494 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001495 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001496 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001497 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001498 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001499 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001500 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001501 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001502 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001503 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001504 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001505 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001506 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001507 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001508 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001509 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001510 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001511 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001512 | System | DROP UDP TROJAN | This rule drops TROJAN Enigma | Enabled by default | Events per second (default = 1) | |
| 125001513 | System | DROP TCP TROJAN | This rule drops TROJAN Enigma | Enabled by default | Events per second (default = 1) | |
| 125001514 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001515 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001516 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001517 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001518 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001519 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001520 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001521 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001522 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001523 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001524 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001525 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001526 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001527 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001528 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001529 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001530 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001531 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001532 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001533 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001534 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001535 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001536 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001537 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001538 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001539 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001540 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001541 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001542 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001543 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001544 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001545 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001546 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001547 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001548 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001549 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001550 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001551 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001552 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001553 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001554 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001555 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001556 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001557 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001558 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001559 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001560 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001561 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001562 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001563 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001564 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001565 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001566 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001567 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001568 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001569 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001570 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001571 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001572 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001573 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001574 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001575 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001576 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001577 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001578 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001579 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001580 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001581 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001582 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001583 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001584 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001585 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001586 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001587 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001588 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001589 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001590 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001591 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001592 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001593 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001594 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001595 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001596 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001597 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001598 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001599 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001600 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001601 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001602 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001603 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001604 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001605 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001606 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001607 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001608 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001609 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001610 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001611 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001612 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001613 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001614 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001615 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001616 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001617 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001618 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001619 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001620 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001621 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001622 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001623 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001624 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001625 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001626 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001627 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001628 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001629 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001630 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001631 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001632 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001633 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001634 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001635 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001636 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001637 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001638 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001639 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001640 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001641 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001642 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001643 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001644 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001645 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001646 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001647 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001648 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001649 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001650 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001651 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001652 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001653 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001654 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001655 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001656 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001657 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001658 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001659 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001660 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001661 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001662 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001663 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001664 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001665 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001666 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001667 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001668 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001669 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001670 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001671 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001672 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001673 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001674 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001675 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001676 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001677 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001678 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001679 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001680 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001681 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001682 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001683 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001684 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001685 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001686 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001687 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001688 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001689 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001690 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001691 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001692 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001693 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001694 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001695 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001696 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001697 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001698 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001699 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001700 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001701 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001702 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001703 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001704 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001705 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001706 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001707 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001708 | System | DROP UDP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001709 | System | DROP TCP POLICY | This rule drops POLICY | Enabled by default | Events per second (default = 1) | |
| 125001710 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001711 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001712 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001713 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001714 | System | DROP UDP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001715 | System | DROP TCP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001716 | System | DROP UDP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001717 | System | DROP TCP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001718 | System | DROP UDP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001719 | System | DROP TCP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001720 | System | DROP UDP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001721 | System | DROP TCP TROJAN | This rule drops TROJAN KeyBoy | Enabled by default | Events per second (default = 1) | |
| 125001722 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001723 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001724 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001725 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001726 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001727 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001728 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001729 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001730 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001731 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001732 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001733 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001734 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001735 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001736 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001737 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001738 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001739 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001740 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001741 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001742 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001743 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001744 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001745 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001746 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001747 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001748 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001749 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001750 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001751 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001752 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001753 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001754 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001755 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001756 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001757 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001758 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001759 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001760 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001761 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001762 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001763 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001764 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001765 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001766 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001767 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001768 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001769 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001770 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001771 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001772 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001773 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001774 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001775 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001776 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001777 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001778 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001779 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001780 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001781 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001782 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001783 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001784 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001785 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001786 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001787 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001788 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001789 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001790 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001791 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001792 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001793 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001794 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001795 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001796 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001797 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001798 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001799 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001800 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001801 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001802 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001803 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001804 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001805 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001806 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001807 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001808 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001809 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001810 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001811 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001812 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001813 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001814 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001815 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001816 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001817 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001818 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001819 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001820 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001821 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001822 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001823 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001824 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001825 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001826 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001827 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001828 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001829 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001830 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001831 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001832 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001833 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001834 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001835 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001836 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001837 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001838 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001839 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001840 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001841 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001842 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001843 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001844 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001845 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001846 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001847 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001848 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001849 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001850 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001851 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001852 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001853 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001854 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001855 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001856 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001857 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001858 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001859 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001860 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001861 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001862 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001863 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001864 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001865 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001866 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001867 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001868 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001869 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001870 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001871 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001872 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001873 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001874 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001875 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001876 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001877 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001878 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001879 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001880 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001881 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001882 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001883 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001884 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001885 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001886 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001887 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001888 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001889 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001890 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001891 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001892 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001893 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001894 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001895 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001896 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001897 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001898 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001899 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001900 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001901 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001902 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001903 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001904 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001905 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001906 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001907 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001908 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001909 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001910 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001911 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001912 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001913 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001914 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001915 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001916 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001917 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001918 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001919 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125001920 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001921 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125001922 | System | DROP UDP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001923 | System | DROP TCP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001924 | System | DROP UDP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001925 | System | DROP TCP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001926 | System | DROP UDP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001927 | System | DROP TCP Likely | This rule drops Likely Phishing | Enabled by default | Events per second (default = 1) | |
| 125001928 | System | Enabled by default | Events per second (default = 1) | |||
| 125001929 | System | DROP TCP DNSChanger | This rule drops DNSChanger | Enabled by default | Events per second (default = 1) | |
| 125001931 | System | EK DNS Reply Adfraud Server. | This rule drops DNSChanger | Enabled by default | Events per second (default = 1) | |
| 125001932 | System | DROP UDP MOBILE_MALWARE Trojan-Banker.Android OS.Marcher DNS UDP Lookup (barberink.biz) | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001933 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001934 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001935 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001936 | System | DROP UDP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001937 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001938 | System | DROP UDP | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Mar cher DNS Lookup using UDP (castso.com) | Enabled by default | Events per second (default = 1) | |
| 125001939 | System | DROP TCP | This rule drops | Enabled by default | Events per second (default = 1) | |
| 125001940 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001941 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001942 | System | DROP UDP TROJAN DNS Query to Cerber Domain (jnhdk3.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (jnhdk3.bid) | Enabled by default | Events per second (default = 1) | |
| 125001943 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (jnhdk3.bid) | Enabled by default | Events per second (default = 1) | |
| 125001944 | System | DROP UDP TROJAN DNS Query to Cerber Domain (llm3m0.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (llm3m0.bid) | Enabled by default | Events per second (default = 1) | |
| 125001945 | System | DROP TCP TROJAN DNS Query to Cerber Domain (llm3m0.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (llm3m0.bid) | Enabled by default | Events per second (default = 1) | |
| 125001946 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001947 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001948 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001949 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001950 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001951 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001952 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001953 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001954 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001955 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001956 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001957 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001958 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001959 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001960 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001961 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001962 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001963 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001964 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001965 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001966 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001967 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001968 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001969 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001970 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001971 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001972 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001973 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001974 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001975 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (paahyp.bid) | Enabled by default | Events per second (default = 1) | |
| 125001976 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rsi6gn.top) | This rule drops TROJAN DNS Domain using UDP (rsi6gn.top) | Enabled by default | Events per second (default = 1) | |
| 125001977 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rsi6gn.top) | This rule drops TROJAN DNS Domain using TCP (rsi6gn.top) | Enabled by default | Events per second (default = 1) | |
| 125001978 | System | DROP UDP TROJAN DNS Query to Cerber Domain (xf9wd1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001979 | System | DROP TCP TROJAN DNS Query to Cerber Domain (xf9wd1.bid) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125001980 | System | DROP UDP TROJAN DNS Domain (zreknv.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (zreknv.bid) | Enabled by default | Events per second (default = 1) | |
| 125001981 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zreknv.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (zreknv.bid) | Enabled by default | Events per second (default = 1) | |
| 125001982 | System | DROP UDP TROJAN Donoff .onion Proxy | This rule drops TROJAN Donoff.onion Proxy Domain Lookup using UDP (6ffnownlcnzlrn7w) | Enabled by default | Events per second (default = 1) | |
| 125001983 | System | DROP TCP TROJAN Donoff .onion Proxy | This rule drops TROJAN Donoff.onion Proxy Domain Lookup using TCP (6ffnownlcnzlrn7w) | Enabled by default | Events per second (default = 1) | |
| 125001984 | System | DROP UDP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using UDP | Enabled by default | Events per second (default = 1) | |
| 125001985 | System | DROP TCP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using TCP | Enabled by default | Events per second (default = 1) | |
| 125001986 | System | DROP UDP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using UDP | Enabled by default | Events per second (default = 1) | |
| 125001987 | System | DROP TCP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using TCP | Enabled by default | Events per second (default = 1) | |
| 125001988 | System | DROP UDP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using UDP | Enabled by default | Events per second (default = 1) | |
| 125001989 | System | DROP TCP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using TCP | Enabled by default | Events per second (default = 1) | |
| 125001990 | System | DROP UDP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using UDP | Enabled by default | Events per second (default = 1) | |
| 125001991 | System | DROP TCP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using TCP | Enabled by default | Events per second (default = 1) | |
| 125001992 | System | DROP UDP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using UDP | Enabled by default | Events per second (default = 1) | |
| 125001993 | System | DROP TCP TROJAN APT28 (Likely | This rule drops TROJAN APT28 (Likely using TCP | Enabled by default | Events per second (default = 1) | |
| 125001994 | System | DROP UDP TROJAN Possible Zcrypt | This rule drops TROJAN Possible Zcrypt Ransomware Variant .onion Proxy Domain | Enabled by default | Events per second (default = 1) | |
| 125001995 | System | DROP TCP TROJAN Possible Zcrypt | This rule drops TROJAN Possible Zcrypt Ransomware Variant .onion Proxy Domain | Enabled by default | Events per second (default = 1) | |
| 125001996 | System | DROP UDP TROJAN VBA/TrojanDownloader.Agent.CCD .onion Proxy | This rule drops TROJAN VBA/TrojanDownloader.Agent.CCD .onion Proxy Domain | Enabled by default | Events per second (default = 1) | |
| 125001997 | System | DROP TCP TROJAN VBA/TrojanDownloader.Agent.CCD .onion Proxy | This rule drops TROJAN VBA/TrojanDownloader.Agent.CCD .onion Proxy Domain | Enabled by default | Events per second (default = 1) | |
| 125001998 | System | DROP UDP TROJAN Donoff .onion Proxy | This rule drops TROJAN Donoff .onion Proxy Domain Lookup using UDP (k33w7qn22wtk2ser) | Enabled by default | Events per second (default = 1) | |
| 125001999 | System | DROP TCP TROJAN Donoff .onion Proxy | This rule drops TROJAN Donoff.onion Proxy Domain Lookup using TCP (k33w7qn22wtk2ser) | Enabled by default | Events per second (default = 1) | |
| 125002000 | System | DROP UDP TROJAN DNS Query to Cerber Domain (r3b2sh.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (r3b2sh.top) | Enabled by default | Events per second (default = 1) | |
| 125002001 | System | DROP TCP TROJAN DNS Query to Cerber Domain (r3b2sh.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (r3b2sh.top) | Enabled by default | Events per second (default = 1) | |
| 125002002 | System | DROP UDP TROJAN DNS Query to Cerber Domain (63rx85.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (63rx85.top) | Enabled by default | Events per second (default = 1) | |
| 125002003 | System | DROP TCP TROJAN DNS Query to Cerber Domain (63rx85.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (63rx85.top) | Enabled by default | Events per second (default = 1) | |
| 125002004 | System | DROP UDP TROJAN DNS Query to Cerber Domain (bvbg1l.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (bvbg1l.top) | Enabled by default | Events per second (default = 1) | |
| 125002005 | System | DROP TCP TROJAN DNS Query to Cerber Domain (bvbg1l.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (bvbg1l.top) | Enabled by default | Events per second (default = 1) | |
| 125002006 | System | DROP UDP TROJAN DNS Query to Cerber Domain (jnv1df.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (jnv1df.top) | Enabled by default | Events per second (default = 1) | |
| 125002007 | System | DROP TCP TROJAN DNS Query to Cerber Domain (jnv1df.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (jnv1df.top) | Enabled by default | Events per second (default = 1) | |
| 125002008 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ucrw57.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ucrw57.top) | Enabled by default | Events per second (default = 1) | |
| 125002009 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ucrw57.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ucrw57.top) | Enabled by default | Events per second (default = 1) | |
| 125002010 | System | DROP UDP TROJAN DNS Query to Cerber Domain (x83zw1.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (x83zw1.top) | Enabled by default | Events per second (default = 1) | |
| 125002011 | System | DROP TCP TROJAN DNS Query to Cerber Domain (x83zw1.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (x83zw1.top) | Enabled by default | Events per second (default = 1) | |
| 125002012 | System | DROP UDP TROJAN DNS Query to Cerber Domain (bdlvdy.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (bdlvdy.top) | Enabled by default | Events per second (default = 1) | |
| 125002013 | System | DROP TCP TROJAN DNS Query to Cerber Domain (bdlvdy.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (bdlvdy.top) | Enabled by default | Events per second (default = 1) | |
| 125002014 | System | DROP UDP TROJAN DNS Query to Cerber Domain (fytfiy.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (fytfiy.top) | Enabled by default | Events per second (default = 1) | |
| 125002015 | System | DROP TCP TROJAN DNS Query to Cerber Domain (fytfiy.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (fytfiy.top) | Enabled by default | Events per second (default = 1) | |
| 125002016 | System | DROP UDP TROJAN DNS Query to Cerber Domain (t8rizh.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (t8rizh.top) | Enabled by default | Events per second (default = 1) | |
| 125002017 | System | DROP TCP TROJAN DNS Query to Cerber Domain (t8rizh.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (t8rizh.top) | Enabled by default | Events per second (default = 1) | |
| 125002018 | System | DROP UDP TROJAN DNS Query to Cerber Domain (otruw6.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (otruw6.top) | Enabled by default | Events per second (default = 1) | |
| 125002019 | System | DROP TCP TROJAN DNS Query to Cerber Domain (otruw6.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (otruw6.top) | Enabled by default | Events per second (default = 1) | |
| 125002020 | System | DROP UDP TROJAN Win32.Scar.olyu .onion Proxy Domain (kkt7fg6khmgemz3w) | This rule drops TROJAN Win32.Scar.olyu .onion Proxy Domain Lookup using UDP (kkt7fg6khmgemz3w) | Enabled by default | Events per second (default = 1) | |
| 125002021 | System | DROP TCP TROJAN Win32.Scar.olyu .onion | This rule drops TROJAN Win32.Scar.olyu .onion Proxy Domain Lookup using TCP (kkt7fg6khmgemz3w) | Enabled by default | Events per second (default = 1) | |
| 125002022 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002023 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tse45f.top) | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002024 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002025 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002026 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using UDP (3vjkdo.top) | Enabled by default | Events per second (default = 1) | |
| 125002027 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (3vjkdo.top) | Enabled by default | Events per second (default = 1) | |
| 125002028 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using UDP (2fu7bc.top) | Enabled by default | Events per second (default = 1) | |
| 125002029 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (2fu7bc.top) | Enabled by default | Events per second (default = 1) | |
| 125002030 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using UDP (4h16v3.top) | Enabled by default | Events per second (default = 1) | |
| 125002031 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (4h16v3.top) | Enabled by default | Events per second (default = 1) | |
| 125002032 | System | DROP UDP TROJAN DNS Query to Cerber Domain (5m2n7x.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (5m2n7x.top) | Enabled by default | Events per second (default = 1) | |
| 125002033 | System | DROP TCP TROJAN DNS Query to Cerber Domain (5m2n7x.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (5m2n7x.top) | Enabled by default | Events per second (default = 1) | |
| 125002034 | System | DROP UDP TROJAN DNS Query to Cerber Domain (c8jxpp.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (c8jxpp.top) | Enabled by default | Events per second (default = 1) | |
| 125002035 | System | DROP TCP TROJAN DNS Query to Cerber Domain (c8jxpp.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (c8jxpp.top) | Enabled by default | Events per second (default = 1) | |
| 125002036 | System | DROP UDP TROJAN DNS Query to Cerber Domain (gutwj0.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (gutwj0.top) | Enabled by default | Events per second (default = 1) | |
| 125002037 | System | DROP TCP TROJAN DNS Query to Cerber Domain (gutwj0.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (gutwj0.top) | Enabled by default | Events per second (default = 1) | |
| 125002038 | System | DROP UDP TROJAN DNS Query to Cerber Domain (odmtu3.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (odmtu3.top) | Enabled by default | Events per second (default = 1) | |
| 125002039 | System | DROP TCP TROJAN DNS Query to Cerber Domain (odmtu3.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (odmtu3.top) | Enabled by default | Events per second (default = 1) | |
| 125002040 | System | DROP UDP TROJAN DNS Query to Cerber Domain (83zw1f.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (83zw1f.bid) | Enabled by default | Events per second (default = 1) | |
| 125002041 | System | DROP TCP TROJAN DNS Query to Cerber Domain (83zw1f.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (83zw1f.bid) | Enabled by default | Events per second (default = 1) | |
| 125002042 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (msfontsrv.com) | Enabled by default | Events per second (default = 1) | |
| 125002043 | System | DROP TCP TROJAN APT28 XAgent DNS TCP | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (msfontsrv.com) | Enabled by default | Events per second (default = 1) | |
| 125002044 | System | DROP UDP TROJAN APT28 XTunnel DNS UDP Lookup (netcloselysecure.org) | This rule drops TROJAN APT28 XTunnel DNS Lookup using UDP (netcloselysecure.org) | Enabled by default | Events per second (default = 1) | |
| 125002045 | System | DROP TCP TROJAN APT28 XTunnel DNS TCP | This rule drops TROJAN APT28 XTunnel DNS Lookup using TCP (netcloselysecure.org) | Enabled by default | Events per second (default = 1) | |
| 125002046 | System | DROP UDP TROJAN APT28 DealersChoice DNS UDP Lookup (microsoftfont.com) | This rule drops TROJAN APT28 DealersChoice DNS Lookup using UDP (microsoftfont.com) | Enabled by default | Events per second (default = 1) | |
| 125002047 | System | DROP TCP TROJAN APT28 DealersChoice DNS TCP Lookup (microsoftfont.com) | This rule drops TROJAN APT28 DealersChoice DNS Lookup using TCP (microsoftfont.com) | Enabled by default | Events per second (default = 1) | |
| 125002048 | System | DROP UDP TROJAN APT28 Uploader DNS UDP Lookup (researchcontinental.org) | This rule drops TROJAN APT28 Uploader DNS Lookup using UDP (researchcontinental.org) | Enabled by default | Events per second (default = 1) | |
| 125002049 | System | DROP TCP TROJAN APT28 Uploader DNS TCP Lookup (researchcontinental.org) | This rule drops TROJAN APT28 Uploader DNS Lookup using TCP (researchcontinental.org) | Enabled by default | Events per second (default = 1) | |
| 125002050 | System | DROP UDP TROJAN APT28 Uploader DNS UDP Lookup (wsusconnect.com) | This rule drops TROJAN APT28 Uploader DNS Lookup using UDP (wsusconnect.com) | Enabled by default | Events per second (default = 1) | |
| 125002051 | System | DROP TCP TROJAN APT28 Uploader DNS TCP Lookup (wsusconnect.com) | This rule drops TROJAN APT28 Uploader DNS Lookup using TCP (wsusconnect.com) | Enabled by default | Events per second (default = 1) | |
| 125002052 | System | DROP UDP TROJAN APT28 XAgent DNS UDP Lookup (amxserviceactive.com) | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (amxserviceactive.com) | Enabled by default | Events per second (default = 1) | |
| 125002053 | System | DROP TCP TROJAN APT28 XAgent DNS TCP Lookup (amxserviceactive.com) | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (amxserviceactive.com) | Enabled by default | Events per second (default = 1) | |
| 125002054 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (apps4updates.com) | Enabled by default | Events per second (default = 1) | |
| 125002055 | System | DROP TCP TROJAN APT28 XAgent DNS TCP | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (apps4updates.com) | Enabled by default | Events per second (default = 1) | |
| 125002056 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (registnum.com) | Enabled by default | Events per second (default = 1) | |
| 125002057 | System | DROP TCP TROJAN APT28 XAgent DNS TCP | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (registnum.com) | Enabled by default | Events per second (default = 1) | |
| 125002058 | System | DROP UDP TROJAN APT28 XAgent DNS UDP | This rule drops TROJAN APT28 XAgent DNS Lookup using UDP (akamaistatistics.com) | Enabled by default | Events per second (default = 1) | |
| 125002059 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 XAgent DNS Lookup using TCP (akamaistatistics.com) | Enabled by default | Events per second (default = 1) | |
| 125002060 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 Azzy DNS Lookup using UDP (msgetupdt.com) | Enabled by default | Events per second (default = 1) | |
| 125002061 | System | DROP TCP TROJAN APT28 Azzy DNS TCP | This rule drops TROJAN APT28 Azzy DNS Lookup using TCP (msgetupdt.com) | Enabled by default | Events per second (default = 1) | |
| 125002062 | System | DROP UDP TROJAN APT28 Azzy DNS UDP | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002063 | System | DROP TCP TROJAN APT28 Azzy DNS TCP | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002064 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002065 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002066 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002067 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002068 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002069 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002070 | System | DROP UDP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002071 | System | DROP TCP TROJAN | This rule drops TROJAN APT28 | Enabled by default | Events per second (default = 1) | |
| 125002072 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002073 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002074 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002075 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002076 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002077 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002078 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002079 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002080 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002081 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002082 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002083 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002084 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002085 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002086 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002087 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002088 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002089 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002090 | System | DROP UDP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002091 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS | Enabled by default | Events per second (default = 1) | |
| 125002092 | System | DROP UDP POLICY DNS | This rule drops POLICY DNS | Enabled by default | Events per second (default = 1) | |
| 125002093 | System | DROP TCP POLICY DNS | This rule drops POLICY DNS | Enabled by default | Events per second (default = 1) | |
| 125002094 | System | DROP UDP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125002095 | System | DROP TCP TROJAN | This rule drops TROJAN | Enabled by default | Events per second (default = 1) | |
| 125002096 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH | Enabled by default | Events per second (default = 1) | |
| 125002097 | System | DROP TCP TROJAN | This rule drops TROJAN ABUSE.CH | Enabled by default | Events per second (default = 1) | |
| 125002098 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH | Enabled by default | Events per second (default = 1) | |
| 125002099 | System | DROP TCP TROJAN | This rule drops TROJAN ABUSE.CH Lookup using TCP (fnmi62725zfti2vy) | Enabled by default | Events per second (default = 1) | |
| 125002100 | System | DROP UDP TROJAN | This rule drops TROJAN ABUSE.CH | Enabled by default | Events per second (default = 1) | |
| 125002101 | System | DROP TCP TROJAN ABUSE.CH | This rule drops TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup using TCP (ftoxmpdipwobp4qy) | Enabled by default | Events per second (default = 1) | |
| 125002102 | System | DROP UDP TROJAN ABUSE.CH | This rule drops TROJAN ABUSE.CH Lookup using UDP (pe2cku7pebkpgeko) | Enabled by default | Events per second (default = 1) | |
| 125002103 | System | DROP TCP TROJAN ABUSE.CH | This rule drops TROJAN ABUSE.CH Ransomware/Cerber Onion Domain Lookup using TCP (pe2cku7pebkpgeko) | Enabled by default | Events per second (default = 1) | |
| 125002104 | System | DROP UDP TROJAN Ransomware Goldeneye .onion Payment Domain | This rule drops TROJAN Ransomware Goldeneye | Enabled by default | Events per second (default = 1) | |
| 125002105 | System | DROP TCP TROJAN Ransomware | This rule drops TROJAN Ransomware Goldeneye | Enabled by default | Events per second (default = 1) | |
| 125002106 | System | DROP UDP TROJAN Ransomware | This rule drops TROJAN Ransomware Goldeneye | Enabled by default | Events per second (default = 1) | |
| 125002107 | System | DROP TCP TROJAN Ransomware | This rule drops TROJAN Ransomware Goldeneye | Enabled by default | Events per second (default = 1) | |
| 125002108 | System | DROP UDP TROJAN Ransomware | This rule drops TROJAN Ransomware Popcorn-Time.onion Payment Domain using UDP (3hnuhydu4pd247qb) | Enabled by default | Events per second (default = 1) | |
| 125002109 | System | DROP TCP TROJAN Ransomware | This rule drops TROJAN Ransomware Popcorn-Time.onion Payment Domain using TCP (3hnuhydu4pd247qb) | Enabled by default | Events per second (default = 1) | |
| 125002110 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (zugzwang.me) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (zugzwang.me) | Enabled by default | Events per second (default = 1) | |
| 125002111 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (zugzwang.me) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (zugzwang.me) | Enabled by default | Events per second (default = 1) | |
| 125002112 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (vmdefmnsndoj.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (vmdefmnsndoj.tech) | Enabled by default | Events per second (default = 1) | |
| 125002113 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (vmdefmnsndoj.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (vmdefmnsndoj.tech) | Enabled by default | Events per second (default = 1) | |
| 125002114 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (xpknpxmywqsr.support) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (xpknpxmywqsr.support) | Enabled by default | Events per second (default = 1) | |
| 125002115 | System | DROP TCP TROJAN Mirai Botnet Domain Observed | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (xpknpxmywqsr.support) | Enabled by default | Events per second (default = 1) | |
| 125002116 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (lvfjcwwobycj.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (lvfjcwwobycj.tech) | Enabled by default | Events per second (default = 1) | |
| 125002117 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (lvfjcwwobycj.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (lvfjcwwobycj.tech) | Enabled by default | Events per second (default = 1) | |
| 125002118 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (bwhrdaumwuvn.support) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP | Enabled by default | Events per second (default = 1) | |
| 125002119 | System | DROP TCP TROJAN Mirai Botnet Domain Observed | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (bwhrdaumwuvn.support) | Enabled by default | Events per second (default = 1) | |
| 125002120 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (bpmsfckfkrpr.support) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (bpmsfckfkrpr.support) | Enabled by default | Events per second (default = 1) | |
| 125002121 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (bpmsfckfkrpr.support) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (bpmsfckfkrpr.support) | Enabled by default | Events per second (default = 1) | |
| 125002122 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (oornsduuwjli.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (oornsduuwjli.tech) | Enabled by default | Events per second (default = 1) | |
| 125002123 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (oornsduuwjli.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (oornsduuwjli.tech) | Enabled by default | Events per second (default = 1) | |
| 125002124 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (qjqubpciajoc.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (qjqubpciajoc.tech) | Enabled by default | Events per second (default = 1) | |
| 125002125 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (qjqubpciajoc.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (qjqubpciajoc.tech) | Enabled by default | Events per second (default = 1) | |
| 125002126 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (exvdaajegjur.support) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (exvdaajegjur.support) | Enabled by default | Events per second (default = 1) | |
| 125002127 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (exvdaajegjur.support | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (exvdaajegjur.support) | Enabled by default | Events per second (default = 1) | |
| 125002128 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (tro69.online) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (tro69.online) | Enabled by default | Events per second (default = 1) | |
| 125002129 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (tro69.online) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (tro69.online) | Enabled by default | Events per second (default = 1) | |
| 125002130 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (tro69.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (tro69.tech) | Enabled by default | Events per second (default = 1) | |
| 125002131 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (tro69.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (tro69.tech) | Enabled by default | Events per second (default = 1) | |
| 125002132 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (tro69.support) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (tro69.support) | Enabled by default | Events per second (default = 1) | |
| 125002133 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (tro69.support) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (tro69.support) | Enabled by default | Events per second (default = 1) | |
| 125002134 | System | DROP UDP MOBILE_MALWARE Trojan-Banker.Android OS.Marcher DNS UDP | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using UDP | Enabled by default | Events per second (default = 1) | |
| 125002135 | System | DROP TCP MOBILE_MALWARE Trojan-Banker.Android OS.Marcher DNS TCP | This rule drops MOBILE_MALWARE | Enabled by default | Events per second (default = 1) | |
| 125002136 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using UDP | Enabled by default | Events per second (default = 1) | |
| 125002137 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using TCP | Enabled by default | Events per second (default = 1) | |
| 125002138 | System | DROP UDP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using UDP | Enabled by default | Events per second (default = 1) | |
| 125002139 | System | DROP TCP MOBILE_MALWARE | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using TCP | Enabled by default | Events per second (default = 1) | |
| 125002140 | System | DROP UDP POLICY DNS Query to.onion proxy Domain | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (paysteroptionway.com) | Enabled by default | Events per second (default = 1) | |
| 125002141 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (paysteroptionway.com) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (paysteroptionway.com) | Enabled by default | Events per second (default = 1) | |
| 125002142 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (dorfact.at) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (dorfact.at) | Enabled by default | Events per second (default = 1) | |
| 125002143 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (dorfact.at) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (dorfact.at) | Enabled by default | Events per second (default = 1) | |
| 125002144 | System | DROP UDP POLICY DNS Query to.onion proxy Domain (flyjo.pl) | This rule drops POLICY DNS Query to.onion proxy Domain using UDP (flyjo.pl) | Enabled by default | Events per second (default = 1) | |
| 125002145 | System | DROP TCP POLICY DNS Query to.onion proxy Domain (flyjo.pl) | This rule drops POLICY DNS Query to.onion proxy Domain using TCP (flyjo.pl) | Enabled by default | Events per second (default = 1) | |
| 125002146 | System | DROP UDP TROJAN DNS Query to Cerber Domain (m20ehf.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (m20ehf.top) | Enabled by default | Events per second (default = 1) | |
| 125002147 | System | DROP TCP TROJAN DNS Query to Cerber Domain (m20ehf.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (m20ehf.top) | Enabled by default | Events per second (default = 1) | |
| 125002148 | System | DROP UDP TROJAN DNS Query to Cerber Domain (lbxvhk.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (lbxvhk.top) | Enabled by default | Events per second (default = 1) | |
| 125002149 | System | DROP TCP TROJAN DNS Query to Cerber Domain (lbxvhk.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (lbxvhk.top) | Enabled by default | Events per second (default = 1) | |
| 125002150 | System | DROP UDP TROJAN DNS Query to Cerber Domain (g0lpnj.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (g0lpnj.bid) | Enabled by default | Events per second (default = 1) | |
| 125002151 | System | DROP TCP TROJAN DNS Query to Cerber Domain (g0lpnj.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (g0lpnj.bid) | Enabled by default | Events per second (default = 1) | |
| 125002152 | System | DROP UDP TROJAN DNS Query to Cerber Domain (g0lpnj.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (g0lpnj.bid) | Enabled by default | Events per second (default = 1) | |
| 125002153 | System | DROP TCP TROJAN DNS Query to Cerber Domain (g0lpnj.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (g0lpnj.bid) | Enabled by default | Events per second (default = 1) | |
| 125002154 | System | DROP UDP TROJAN DNS Query to Cerber Domain (17rmvr.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (17rmvr.top) | Enabled by default | Events per second (default = 1) | |
| 125002155 | System | DROP TCP TROJAN DNS Query to Cerber Domain (17rmvr.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (17rmvr.top) | Enabled by default | Events per second (default = 1) | |
| 125002156 | System | DROP UDP TROJAN DNS Query to Cerber Domain (85kvie.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (85kvie.top) | Enabled by default | Events per second (default = 1) | |
| 125002157 | System | DROP TCP TROJAN DNS Query to Cerber Domain (85kvie.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (85kvie.top) | Enabled by default | Events per second (default = 1) | |
| 125002158 | System | DROP UDP TROJAN DNS Query to Cerber Domain (hmjwi2.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (hmjwi2.bid) | Enabled by default | Events per second (default = 1) | |
| 125002159 | System | DROP TCP TROJAN DNS Query to Cerber Domain (hmjwi2.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (hmjwi2.bid) | Enabled by default | Events per second (default = 1) | |
| 125002160 | System | DROP UDP TROJAN DNS Query to Cerber Domain (x9ap4h.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (x9ap4h.top) | Enabled by default | Events per second (default = 1) | |
| 125002161 | System | DROP TCP TROJAN DNS Query to Cerber Domain (x9ap4h.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (x9ap4h.top) | Enabled by default | Events per second (default = 1) | |
| 125002162 | System | DROP UDP TROJAN DNS Query to Cerber Domain (zj1ffv.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (zj1ffv.top) | Enabled by default | Events per second (default = 1) | |
| 125002163 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zj1ffv.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (zj1ffv.top) | Enabled by default | Events per second (default = 1) | |
| 125002164 | System | DROP UDP TROJAN DNS Query to Cerber Domain (bhynoo.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (bhynoo.top) | Enabled by default | Events per second (default = 1) | |
| 125002165 | System | DROP TCP TROJAN DNS Query to Cerber Domain (bhynoo.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (bhynoo.top) | Enabled by default | Events per second (default = 1) | |
| 125002166 | System | DROP UDP TROJAN DNS Query to Cerber Domain (htbzl2.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (htbzl2.top) | Enabled by default | Events per second (default = 1) | |
| 125002167 | System | DROP TCP TROJAN DNS Query to Cerber Domain (htbzl2.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (htbzl2.top) | Enabled by default | Events per second (default = 1) | |
| 125002168 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rovr6i.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (rovr6i.top) | Enabled by default | Events per second (default = 1) | |
| 125002169 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rovr6i.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (rovr6i.top) | Enabled by default | Events per second (default = 1) | |
| 125002170 | System | DROP UDP TROJAN DNS Query to Cerber Domain (5s96fr.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (5s96fr.top) | Enabled by default | Events per second (default = 1) | |
| 125002171 | System | DROP TCP TROJAN DNS Query to Cerber Domain (5s96fr.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (5s96fr.top) | Enabled by default | Events per second (default = 1) | |
| 125002172 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tidldc.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (tidldc.top) | Enabled by default | Events per second (default = 1) | |
| 125002173 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tidldc.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (tidldc.top) | Enabled by default | Events per second (default = 1) | |
| 125002174 | System | DROP UDP TROJAN DNS Query to Cerber Domain (0cgaez.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (0cgaez.top) | Enabled by default | Events per second (default = 1) | |
| 125002175 | System | DROP TCP TROJAN DNS Query to Cerber Domain (0cgaez.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (0cgaez.top) | Enabled by default | Events per second (default = 1) | |
| 125002176 | System | DROP UDP TROJAN DNS Query to Cerber Domain (eu2xdg.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (eu2xdg.top) | Enabled by default | Events per second (default = 1) | |
| 125002177 | System | DROP TCP TROJAN DNS Query to Cerber Domain (eu2xdg.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (eu2xdg.top) | Enabled by default | Events per second (default = 1) | |
| 125002178 | System | DROP UDP TROJAN DNS Query to Cerber Domain (dj68hn.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (dj68hn.top) | Enabled by default | Events per second (default = 1) | |
| 125002179 | System | DROP TCP TROJAN DNS Query to Cerber Domain (dj68hn.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (dj68hn.top) | Enabled by default | Events per second (default = 1) | |
| 125002180 | System | DROP UDP TROJAN DNS Query to Cerber Domain (45yu0p.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (45yu0p.bid) | Enabled by default | Events per second (default = 1) | |
| 125002181 | System | DROP TCP TROJAN DNS Query to Cerber Domain (45yu0p.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (45yu0p.bid) | Enabled by default | Events per second (default = 1) | |
| 125002182 | System | DROP UDP TROJAN DNS Query to Cerber Domain (djiag3.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (djiag3.top) | Enabled by default | Events per second (default = 1) | |
| 125002183 | System | DROP TCP TROJAN DNS Query to Cerber Domain (djiag3.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (djiag3.top) | Enabled by default | Events per second (default = 1) | |
| 125002184 | System | DROP UDP TROJAN DNS Query to Cerber Domain (d7h6yx.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (d7h6yx.top) | Enabled by default | Events per second (default = 1) | |
| 125002185 | System | DROP TCP TROJAN DNS Query to Cerber Domain (d7h6yx.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (d7h6yx.top) | Enabled by default | Events per second (default = 1) | |
| 125002186 | System | DROP UDP TROJAN Ransomware/Cerber Onion Domain UDP | This rule drops TROJAN Ransomware/Cerber Onion | Enabled by default | Events per second (default = 1) | |
| 125002187 | System | DROP TCP TROJAN Ransomware/Cerber Onion Domain TCP | This rule drops TROJAN Ransomware/Cerber Onion | Enabled by default | Events per second (default = 1) | |
| 125002188 | System | DROP UDP TROJAN DNS Query to Cerber Domain (pfw1bw.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (pfw1bw.bid) | Enabled by default | Events per second (default = 1) | |
| 125002189 | System | DROP TCP TROJAN DNS Query to Cerber Domain (pfw1bw.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (pfw1bw.bid) | Enabled by default | Events per second (default = 1) | |
| 125002190 | System | DROP UDP TROJAN DNS Query to Cerber Domain (dgjpgy.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (dgjpgy.top) | Enabled by default | Events per second (default = 1) | |
| 125002191 | System | DROP TCP TROJAN DNS Query to Cerber Domain (dgjpgy.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (dgjpgy.top) | Enabled by default | Events per second (default = 1) | |
| 125002192 | System | DROP UDP TROJAN DNS Query to Cerber Domain (yur4j5.top) | This rule drops TROJAN DNS Query to Cerber Do | Enabled by default | Events per second (default = 1) | |
| 125002193 | System | DROP TCP TROJAN DNS Query to Cerber Domain (yur4j5.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (yur4j5.top) | Enabled by default | Events per second (default = 1) | |
| 125002194 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ncw0rp.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ncw0rp.top) | Enabled by default | Events per second (default = 1) | |
| 125002195 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ncw0rp.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ncw0rp.top) | Enabled by default | Events per second (default = 1) | |
| 125002196 | System | DROP UDP TROJAN DNS Query to Cerber Domain (xe1ws1.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (xe1ws1.top) | Enabled by default | Events per second (default = 1) | |
| 125002197 | System | DROP TCP TROJAN DNS Query to Cerber Domain (xe1ws1.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (xe1ws1.top) | Enabled by default | Events per second (default = 1) | |
| 125002198 | System | DROP UDP TROJAN DNS Query to Cerber Domain (llt6up.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (llt6up.top) | Enabled by default | Events per second (default = 1) | |
| 125002199 | System | DROP TCP TROJAN DNS Query to Cerber Domain (llt6up.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (llt6up.top) | Enabled by default | Events per second (default = 1) | |
| 125002200 | System | DROP UDP TROJAN DNS Query to Cerber Domain (dc2djf.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (dc2djf.top) | Enabled by default | Events per second (default = 1) | |
| 125002201 | System | DROP TCP TROJAN DNS Query to Cerber Domain (dc2djf.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (dc2djf.top) | Enabled by default | Events per second (default = 1) | |
| 125002202 | System | DROP UDP TROJAN DNS Query to Cerber Domain (zee0xr.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (zee0xr.top) | Enabled by default | Events per second (default = 1) | |
| 125002203 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zee0xr.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (zee0xr.top) | Enabled by default | Events per second (default = 1) | |
| 125002204 | System | DROP UDP TROJAN DNS Query to Cerber Domain (p161bl.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (p161bl.top) | Enabled by default | Events per second (default = 1) | |
| 125002205 | System | DROP TCP TROJAN DNS Query to Cerber Domain (p161bl.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (p161bl.top) | Enabled by default | Events per second (default = 1) | |
| 125002206 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rjf9yn.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (rjf9yn.top) | Enabled by default | Events per second (default = 1) | |
| 125002207 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rjf9yn.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (rjf9yn.top) | Enabled by default | Events per second (default = 1) | |
| 125002208 | System | DROP UDP TROJAN DNS Query to Cerber Domain (4d0934.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (4d0934.bid) | Enabled by default | Events per second (default = 1) | |
| 125002209 | System | DROP TCP TROJAN DNS Query to Cerber Domain (4d0934.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (4d0934.bid) | Enabled by default | Events per second (default = 1) | |
| 125002210 | System | DROP UDP TROJAN DNS Query to Cerber Domain (w2fzwt.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (w2fzwt.top) | Enabled by default | Events per second (default = 1) | |
| 125002211 | System | DROP TCP TROJAN DNS Query to Cerber Domain (w2fzwt.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (w2fzwt.top) | Enabled by default | Events per second (default = 1) | |
| 125002212 | System | DROP UDP TROJAN DNS Query to Cerber Domain (glg1i0.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (glg1i0.top) | Enabled by default | Events per second (default = 1) | |
| 125002213 | System | DROP TCP TROJAN DNS Query to Cerber Domain (glg1i0.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (glg1i0.top) | Enabled by default | Events per second (default = 1) | |
| 125002214 | System | DROP UDP TROJAN DNS Query to Cerber Domain (uld7hk.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (uld7hk.top) | Enabled by default | Events per second (default = 1) | |
| 125002215 | System | DROP TCP TROJAN DNS Query to Cerber Domain (uld7hk.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (uld7hk.top) | Enabled by default | Events per second (default = 1) | |
| 125002216 | System | DROP UDP TROJAN DNS Query to Cerber Domain (fwzxnb.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (fwzxnb.bid) | Enabled by default | Events per second (default = 1) | |
| 125002217 | System | DROP TCP TROJAN DNS Query to Cerber Domain (fwzxnb.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (fwzxnb.bid) | Enabled by default | Events per second (default = 1) | |
| 125002218 | System | DROP UDP TROJAN DNS Query to Cerber Domain (19h8gc.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (19h8gc.top) | Enabled by default | Events per second (default = 1) | |
| 125002219 | System | DROP TCP TROJAN DNS Query to Cerber Domain (19h8gc.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (19h8gc.top) | Enabled by default | Events per second (default = 1) | |
| 125002220 | System | DROP UDP TROJAN DNS Query to Cerber Domain (x29u3i.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (x29u3i.top) | Enabled by default | Events per second (default = 1) | |
| 125002221 | System | DROP TCP TROJAN DNS Query to Cerber Domain (x29u3i.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (x29u3i.top) | Enabled by default | Events per second (default = 1) | |
| 125002222 | System | DROP UDP TROJAN DNS Query to Cerber Domain (smd95z.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (smd95z.top) | Enabled by default | Events per second (default = 1) | |
| 125002223 | System | DROP TCP TROJAN DNS Query to Cerber Domain (smd95z.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (smd95z.top) | Enabled by default | Events per second (default = 1) | |
| 125002224 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ovzy6p.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ovzy6p.top) | Enabled by default | Events per second (default = 1) | |
| 125002225 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ovzy6p.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ovzy6p.top) | Enabled by default | Events per second (default = 1) | |
| 125002226 | System | DROP UDP TROJAN DNS Query to Cerber Domain (8dlgyg.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (8dlgyg.bid) | Enabled by default | Events per second (default = 1) | |
| 125002227 | System | DROP TCP TROJAN DNS Query to Cerber Domain (8dlgyg.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (8dlgyg.bid) | Enabled by default | Events per second (default = 1) | |
| 125002228 | System | DROP UDP TROJAN VBA/TrojanDownloader.Agent.CEW.onion Proxy Domain (hl3gj7zkxjvo6cra) | This rule drops TROJAN VBA/TrojanDownloader.Agent.CEW .onion Proxy Domain Lookup using UDP (hl3gj7zkxjvo6cra) | Enabled by default | Events per second (default = 1) | |
| 125002229 | System | DROP TCP TROJAN VBA/TrojanDownloader.Agent.CEW.onion Proxy Domain (hl3gj7zkxjvo6cra) | This rule drops TROJAN VBA/TrojanDownloader.Agent.CEW .onion Proxy Domain | Enabled by default | Events per second (default = 1) | |
| 125002230 | System | DROP UDP TROJAN DNS Query to Cerber Domain (8l4jpw.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (8l4jpw.top) | Enabled by default | Events per second (default = 1) | |
| 125002231 | System | DROP TCP TROJAN DNS Query to Cerber Domain (8l4jpw.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (8l4jpw.top) | Enabled by default | Events per second (default = 1) | |
| 125002232 | System | DROP UDP TROJAN DNS Query to Cerber Domain (drg1gf.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (drg1gf.top) | Enabled by default | Events per second (default = 1) | |
| 125002233 | System | DROP TCP TROJAN DNS Query to Cerber Domain (drg1gf.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (drg1gf.top) | Enabled by default | Events per second (default = 1) | |
| 125002234 | System | DROP UDP TROJAN DNS Query to Cerber Domain (z20x0r.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (z20x0r.top) | Enabled by default | Events per second (default = 1) | |
| 125002235 | System | DROP TCP TROJAN DNS Query to Cerber Domain (z20x0r.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (z20x0r.top) | Enabled by default | Events per second (default = 1) | |
| 125002236 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rmgs2r.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (rmgs2r.top) | Enabled by default | Events per second (default = 1) | |
| 125002237 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rmgs2r.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (rmgs2r.top) | Enabled by default | Events per second (default = 1) | |
| 125002238 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ttx0ig.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ttx0ig.top) | Enabled by default | Events per second (default = 1) | |
| 125002239 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ttx0ig.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ttx0ig.top) | Enabled by default | Events per second (default = 1) | |
| 125002240 | System | DROP UDP TROJAN DNS Query to Cerber Domain (gwz8gh.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (gwz8gh.top) | Enabled by default | Events per second (default = 1) | |
| 125002241 | System | DROP TCP TROJAN DNS Query to Cerber Domain (gwz8gh.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (gwz8gh.top) | Enabled by default | Events per second (default = 1) | |
| 125002242 | System | DROP UDP TROJAN DNS Query to Cerber Domain (p3tt2t.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (p3tt2t.top) | Enabled by default | Events per second (default = 1) | |
| 125002243 | System | DROP TCP TROJAN DNS Query to Cerber Domain (p3tt2t.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (p3tt2t.top) | Enabled by default | Events per second (default = 1) | |
| 125002244 | System | DROP UDP TROJAN DNS Query to Cerber Domain (vtwyjd.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (vtwyjd.top) | Enabled by default | Events per second (default = 1) | |
| 125002245 | System | DROP TCP TROJAN DNS Query to Cerber Domain (vtwyjd.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (vtwyjd.top) | Enabled by default | Events per second (default = 1) | |
| 125002246 | System | DROP UDP TROJAN DNS Query to Cerber Domain (3pxhgt.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (3pxhgt.top) | Enabled by default | Events per second (default = 1) | |
| 125002247 | System | DROP TCP TROJAN DNS Query to Cerber Domain (3pxhgt.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (3pxhgt.top) | Enabled by default | Events per second (default = 1) | |
| 125002248 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rzt69n.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (rzt69n.top) | Enabled by default | Events per second (default = 1) | |
| 125002249 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rzt69n.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (rzt69n.top) | Enabled by default | Events per second (default = 1) | |
| 125002250 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (nympompksmfx.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (nympompksmfx.tech) | Enabled by default | Events per second (default = 1) | |
| 125002251 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (nympompksmfx.tech) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (nympompksmfx.tech) | Enabled by default | Events per second (default = 1) | |
| 125002252 | System | DROP UDP TROJAN Mirai Botnet Domain Observed | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (xpknpxmywqsrhe.online) | Enabled by default | Events per second (default = 1) | |
| 125002253 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (xpknpxmywqsrhe.online) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (xpknpxmywqsrhe.online) | Enabled by default | Events per second (default = 1) | |
| 125002254 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (kedbuffigfjs.online) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (kedbuffigfjs.online) | Enabled by default | Events per second (default = 1) | |
| 125002255 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (kedbuffigfjs.online) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (kedbuffigfjs.online) | Enabled by default | Events per second (default = 1) | |
| 125002256 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (srrys.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (srrys.pw) | Enabled by default | Events per second (default = 1) | |
| 125002257 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (srrys.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (srrys.pw) | Enabled by default | Events per second (default = 1) | |
| 125002258 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (binpt.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (binpt.pw) | Enabled by default | Events per second (default = 1) | |
| 125002259 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (binpt.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (binpt.pw) | Enabled by default | Events per second (default = 1) | |
| 125002260 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (kciap.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (kciap.pw) | Enabled by default | Events per second (default = 1) | |
| 125002261 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (kciap.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (kciap.pw) | Enabled by default | Events per second (default = 1) | |
| 125002262 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (mziep.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (mziep.pw) | Enabled by default | Events per second (default = 1) | |
| 125002263 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (mziep.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (mziep.pw) | Enabled by default | Events per second (default = 1) | |
| 125002264 | System | DROP UDP TROJAN Mirai Botnet Domain Observed (tr069.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using UDP (tr069.pw) | Enabled by default | Events per second (default = 1) | |
| 125002265 | System | DROP TCP TROJAN Mirai Botnet Domain Observed (tr069.pw) | This rule drops TROJAN Mirai Botnet Domain Observed using TCP (tr069.pw) | Enabled by default | Events per second (default = 1) | |
| 125002266 | System | DROP UDP TROJAN NEODYMIUM Wingbird DNS UDP Lookup (srv601.ddns.net) | This rule drops TROJAN NEODYMIUM Wingbird DNS Lookup using UDP (srv601.ddns.net) | Enabled by default | Events per second (default = 1) | |
| 125002267 | System | DROP TCP TROJAN NEODYMIUM Wingbird DNS TCP Lookup (srv601.ddns.net) | This rule drops TROJAN NEODYMIUM Wingbird DNS Lookup using TCP (srv601.ddns.net) | Enabled by default | Events per second (default = 1) | |
| 125002268 | System | DROP UDP TROJAN NEODYMIUM Wingbird DNS UDP Lookup (srv602.ddns.net) | This rule drops TROJAN NEODYMIUM Wingbird DNS Lookup using UDP (srv602.ddns.net) | Enabled by default | Events per second (default = 1) | |
| 125002269 | System | DROP TCP TROJAN NEODYMIUM Wingbird DNS TCP Lookup (srv602.ddns.net) | This rule drops TROJAN NEODYMIUM Wingbird DNS Lookup using TCP (srv602.ddns.net) | Enabled by default | Events per second (default = 1) | |
| 125002270 | System | DROP UDP TROJAN PROMETHIUM/StrongPi ty DNS UDP Lookup (updatesync.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS Lookup using UDP (updatesync.com) | Enabled by default | Events per second (default = 1) | |
| 125002271 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (updatesync.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS Lookup using TCP (updatesync.com) | Enabled by default | Events per second (default = 1) | |
| 125002272 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (svnservices.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS Lookup using UDP (svnservices.com) | Enabled by default | Events per second (default = 1) | |
| 125002273 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (svnservices.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002274 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (mynetenergy.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002275 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (mynetenergy.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002276 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (windriversupport.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002277 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (windriversupport.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002278 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (truecrypte.org) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002279 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (truecrypte.org) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002280 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (edicupd002.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002281 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (edicupd002.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002282 | System | DROP UDP TROJAN PROMETHIUM/StrongPi ty DNS UDP Lookup (jourrapid.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002283 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (jourrapid.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002284 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (true-crypte.website) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002285 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (true-crypte.website) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002286 | System | DROP UDP TROJAN PROMETHIUM/StrongPity DNS UDP Lookup (myrappid.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002287 | System | DROP TCP TROJAN PROMETHIUM/StrongPity DNS TCP Lookup (myrappid.com) | This rule drops TROJAN PROMETHIUM/StrongPity DNS | Enabled by default | Events per second (default = 1) | |
| 125002288 | System | DROP UDP TROJAN Ransomware Maktub.onion Payment Domain (maktubebz6z6cgtw) | This rule drops TROJAN Ransomware Maktub.onion | Enabled by default | Events per second (default = 1) | |
| 125002289 | System | DROP TCP TROJAN Ransomware Maktub.onion Payment Domain (maktubebz6z6cgtw) | This rule drops TROJAN Ransomware Maktub .onion | Enabled by default | Events per second (default = 1) | |
| 125002290 | System | DROP UDP TROJAN APT28/SEDNIT | This rule drops TROJAN Lookup using UDP (postlkwarn.com) | Enabled by default | Events per second (default = 1) | |
| 125002291 | System | DROP TCP TROJAN APT28/SEDNIT | This rule drops TROJAN APT28/SEDNIT Uploader Lookup using TCP (postlkwarn.com) | Enabled by default | Events per second (default = 1) | |
| 125002292 | System | DROP UDP MOBILE_MALWARE Trojan-Banker.Android OS.Marcher DNS UDP | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using UDP (androidfofrukt.ru) | Enabled by default | Events per second (default = 1) | |
| 125002293 | System | DROP TCP MOBILE_MALWARE Trojan-Banker.Android OS.Marcher DNS TCP | This rule drops MOBILE_MALWARE Trojan-Banker.AndroidOS.Marcher DNS Lookup using TCP (androidfofrukt.ru) | Enabled by default | Events per second (default = 1) | |
| 125002294 | System | DROP UDP TROJAN DNS Query to Cerber Domain (z5xfkc.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (z5xfkc.top) | Enabled by default | Events per second (default = 1) | |
| 125002295 | System | DROP TCP TROJAN DNS Query to Cerber Domain (z5xfkc.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (z5xfkc.top) | Enabled by default | Events per second (default = 1) | |
| 125002296 | System | DROP UDP TROJAN DNS Query to Cerber Domain (nn2ms2.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (nn2ms2.top) | Enabled by default | Events per second (default = 1) | |
| 125002297 | System | DROP TCP TROJAN DNS Query to Cerber Domain (nn2ms2.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (nn2ms2.top) | Enabled by default | Events per second (default = 1) | |
| 125002298 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ul8hph.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ul8hph.top) | Enabled by default | Events per second (default = 1) | |
| 125002299 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ul8hph.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ul8hph.top) | Enabled by default | Events per second (default = 1) | |
| 125002300 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tyn5ya.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (tyn5ya.top) | Enabled by default | Events per second (default = 1) | |
| 125002301 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tyn5ya.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (tyn5ya.top) | Enabled by default | Events per second (default = 1) | |
| 125002302 | System | DROP UDP TROJAN DNS Query to Cerber Domain (1kvftk.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (1kvftk.top) | Enabled by default | Events per second (default = 1) | |
| 125002303 | System | DROP TCP TROJAN DNS Query to Cerber Domain (1kvftk.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (1kvftk.top) | Enabled by default | Events per second (default = 1) | |
| 125002304 | System | DROP UDP TROJAN DNS Query to Cerber Domain (arpbxw.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (arpbxw.top) | Enabled by default | Events per second (default = 1) | |
| 125002305 | System | DROP TCP TROJAN DNS Query to Cerber Domain (arpbxw.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (arpbxw.top) | Enabled by default | Events per second (default = 1) | |
| 125002306 | System | DROP UDP TROJAN DNS Query to Cerber Domain (z0mkoc.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (z0mkoc.top) | Enabled by default | Events per second (default = 1) | |
| 125002307 | System | DROP TCP TROJAN DNS Query to Cerber Domain (z0mkoc.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (z0mkoc.top) | Enabled by default | Events per second (default = 1) | |
| 125002308 | System | DROP UDP TROJAN DNS Query to Cerber Domain (85xcav.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (85xcav.top) | Enabled by default | Events per second (default = 1) | |
| 125002309 | System | DROP TCP TROJAN DNS Query to Cerber Domain (85xcav.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (85xcav.top) | Enabled by default | Events per second (default = 1) | |
| 125002310 | System | DROP UDP TROJAN DNS Query to Cerber Domain (15poas.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (15poas.top) | Enabled by default | Events per second (default = 1) | |
| 125002311 | System | DROP TCP TROJAN DNS Query to Cerber Domain (15poas.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (15poas.top) | Enabled by default | Events per second (default = 1) | |
| 125002312 | System | DROP UDP TROJAN DNS Query to Cerber Domain (o08ra6.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (o08ra6.top) | Enabled by default | Events per second (default = 1) | |
| 125002313 | System | DROP TCP TROJAN DNS Query to Cerber Domain (o08ra6.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (o08ra6.top) | Enabled by default | Events per second (default = 1) | |
| 125002314 | System | DROP UDP TROJAN DNS Query to Cerber Domain (2wfe60.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (2wfe60.top) | Enabled by default | Events per second (default = 1) | |
| 125002315 | System | DROP TCP TROJAN DNS Query to Cerber Domain (2wfe60.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (2wfe60.top) | Enabled by default | Events per second (default = 1) | |
| 125002316 | System | DROP UDP TROJAN DNS Query to Cerber Domain (af38vz.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (af38vz.top) | Enabled by default | Events per second (default = 1) | |
| 125002317 | System | DROP TCP TROJAN DNS Query to Cerber Domain (af38vz.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (af38vz.top) | Enabled by default | Events per second (default = 1) | |
| 125002318 | System | DROP UDP TROJAN DNS Query to Cerber Domain (r31sot.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (r31sot.top) | Enabled by default | Events per second (default = 1) | |
| 125002319 | System | DROP TCP TROJAN DNS Query to Cerber Domain (r31sot.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (r31sot.top) | Enabled by default | Events per second (default = 1) | |
| 125002320 | System | DROP UDP TROJAN DNS Query to Cerber Domain (o6fa2g.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (o6fa2g.top) | Enabled by default | Events per second (default = 1) | |
| 125002321 | System | DROP TCP TROJAN DNS Query to Cerber Domain (o6fa2g.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (o6fa2g.top) | Enabled by default | Events per second (default = 1) | |
| 125002322 | System | DROP UDP TROJAN DNS Query to Cerber Domain (1bqroa.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (1bqroa.top) | Enabled by default | Events per second (default = 1) | |
| 125002323 | System | DROP TCP TROJAN DNS Query to Cerber Domain (1bqroa.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (1bqroa.top) | Enabled by default | Events per second (default = 1) | |
| 125002324 | System | DROP UDP TROJAN DNS Query to Cerber Domain (piv6tv.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (piv6tv.top) | Enabled by default | Events per second (default = 1) | |
| 125002325 | System | DROP TCP TROJAN DNS Query to Cerber Domain (piv6tv.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (piv6tv.top) | Enabled by default | Events per second (default = 1) | |
| 125002326 | System | DROP UDP TROJAN DNS Query to Cerber Domain (tih6y9.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (tih6y9.top) | Enabled by default | Events per second (default = 1) | |
| 125002327 | System | DROP TCP TROJAN DNS Query to Cerber Domain (tih6y9.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (tih6y9.top) | Enabled by default | Events per second (default = 1) | |
| 125002328 | System | DROP UDP TROJAN DNS Query to Cerber Domain (f5x6ws.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (f5x6ws.top) | Enabled by default | Events per second (default = 1) | |
| 125002329 | System | DROP TCP TROJAN DNS Query to Cerber Domain (f5x6ws.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (f5x6ws.top) | Enabled by default | Events per second (default = 1) | |
| 125002330 | System | DROP UDP TROJAN DNS Query to Cerber Domain (pcwcu6.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (pcwcu6.bid) | Enabled by default | Events per second (default = 1) | |
| 125002331 | System | DROP TCP TROJAN DNS Query to Cerber Domain (pcwcu6.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (pcwcu6.bid) | Enabled by default | Events per second (default = 1) | |
| 125002332 | System | DROP UDP TROJAN DNS Query to Cerber Domain (od3rag.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (od3rag.top) | Enabled by default | Events per second (default = 1) | |
| 125002333 | System | DROP TCP TROJAN DNS Query to Cerber Domain (od3rag.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (od3rag.top) | Enabled by default | Events per second (default = 1) | |
| 125002334 | System | DROP UDP TROJAN DNS Query to Cerber Domain (yjo0z9.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (yjo0z9.top) | Enabled by default | Events per second (default = 1) | |
| 125002335 | System | DROP TCP TROJAN DNS Query to Cerber Domain (yjo0z9.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (yjo0z9.top) | Enabled by default | Events per second (default = 1) | |
| 125002336 | System | DROP UDP TROJAN DNS Query to Cerber Domain (gt6nsg.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (gt6nsg.bid) | Enabled by default | Events per second (default = 1) | |
| 125002337 | System | DROP TCP TROJAN DNS Query to Cerber Domain (gt6nsg.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (gt6nsg.bid) | Enabled by default | Events per second (default = 1) | |
| 125002338 | System | DROP UDP TROJAN DNS Query to Cerber Domain (ud9z0v.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (ud9z0v.top) | Enabled by default | Events per second (default = 1) | |
| 125002339 | System | DROP TCP TROJAN DNS Query to Cerber Domain (ud9z0v.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (ud9z0v.top) | Enabled by default | Events per second (default = 1) | |
| 125002340 | System | DROP UDP TROJAN DNS Query to Cerber Domain (h6dxvo.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (h6dxvo.top) | Enabled by default | Events per second (default = 1) | |
| 125002341 | System | DROP TCP TROJAN DNS Query to Cerber Domain (h6dxvo.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (h6dxvo.top) | Enabled by default | Events per second (default = 1) | |
| 125002342 | System | DROP UDP TROJAN DNS Query to Cerber Domain (u8yz5b.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (u8yz5b.top) | Enabled by default | Events per second (default = 1) | |
| 125002343 | System | DROP TCP TROJAN DNS Query to Cerber Domain (u8yz5b.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (u8yz5b.top) | Enabled by default | Events per second (default = 1) | |
| 125002344 | System | DROP UDP TROJAN DNS Query to Cerber Domain (j5s57p.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (j5s57p.bid) | Enabled by default | Events per second (default = 1) | |
| 125002345 | System | DROP TCP TROJAN DNS Query to Cerber Domain (j5s57p.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (j5s57p.bid) | Enabled by default | Events per second (default = 1) | |
| 125002346 | System | DROP UDP TROJAN DNS Query to Cerber Domain (a9glrg.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (a9glrg.top) | Enabled by default | Events per second (default = 1) | |
| 125002347 | System | DROP TCP TROJAN DNS Query to Cerber Domain (a9glrg.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (a9glrg.top) | Enabled by default | Events per second (default = 1) | |
| 125002348 | System | DROP UDP TROJAN DNS Query to Cerber Domain (utebcd.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (utebcd.top) | Enabled by default | Events per second (default = 1) | |
| 125002349 | System | DROP TCP TROJAN DNS Query to Cerber Domain (utebcd.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (utebcd.top) | Enabled by default | Events per second (default = 1) | |
| 125002350 | System | DROP UDP TROJAN DNS Query to Cerber Domain (et7izd.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (et7izd.top) | Enabled by default | Events per second (default = 1) | |
| 125002351 | System | DROP TCP TROJAN DNS | This rule drops TROJAN DNS Query to Cerber Domain using TCP (et7izd.top) | Enabled by default | Events per second (default = 1) | |
| 125002352 | System | DROP UDP TROJAN DNS Query to Cerber Domain (7pnxn9.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (7pnxn9.top) | Enabled by default | Events per second (default = 1) | |
| 125002353 | System | DROP TCP TROJAN DNS Query to Cerber Domain (7pnxn9.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (7pnxn9.top) | Enabled by default | Events per second (default = 1) | |
| 125002354 | System | DROP UDP TROJAN Hidden Tear .onion | This rule drops TROJAN Hidden Tear .onion Proxy Domain Lookup using UDP (gpvwsmq4tshfg77y) | Enabled by default | Events per second (default = 1) | |
| 125002355 | System | DROP TCP TROJAN Hidden Tear .onion | This rule drops TROJAN Hidden Tear .onion Proxy Domain Lookup using TCP (gpvwsmq4tshfg77y) | Enabled by default | Events per second (default = 1) | |
| 125002356 | System | DROP UDP TROJAN DNS Query to Cerber Domain (obnctf.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (obnctf.bid) | Enabled by default | Events per second (default = 1) | |
| 125002357 | System | DROP TCP TROJAN DNS Query to Cerber Domain (obnctf.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (obnctf.bid) | Enabled by default | Events per second (default = 1) | |
| 125002358 | System | DROP UDP TROJAN DNS Query to Cerber Domain (kj3f52.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (kj3f52.bid) | Enabled by default | Events per second (default = 1) | |
| 125002359 | System | DROP TCP TROJAN DNS Query to Cerber Domain (kj3f52.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (kj3f52.bid) | Enabled by default | Events per second (default = 1) | |
| 125002360 | System | DROP UDP TROJAN DNS Query to Cerber Domain (zgw8bu.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (zgw8bu.top) | Enabled by default | Events per second (default = 1) | |
| 125002361 | System | DROP TCP TROJAN DNS Query to Cerber Domain (zgw8bu.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (zgw8bu.top) | Enabled by default | Events per second (default = 1) | |
| 125002362 | System | DROP UDP TROJAN DNS Query to Cerber Domain (rt01jw.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (rt01jw.top) | Enabled by default | Events per second (default = 1) | |
| 125002363 | System | DROP TCP TROJAN DNS Query to Cerber Domain (rt01jw.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (rt01jw.top) | Enabled by default | Events per second (default = 1) | |
| 125002364 | System | DROP UDP TROJAN DNS Query to Cerber Domain (4ghwzy.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (4ghwzy.top) | Enabled by default | Events per second (default = 1) | |
| 125002365 | System | DROP TCP TROJAN DNS Query to Cerber Domain (4ghwzy.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (4ghwzy.top) | Enabled by default | Events per second (default = 1) | |
| 125002366 | System | DROP UDP TROJAN DNS Query to Cerber Domain (u8e2dz.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (u8e2dz.top) | Enabled by default | Events per second (default = 1) | |
| 125002367 | System | DROP TCP TROJAN DNS Query to Cerber Domain (u8e2dz.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (u8e2dz.top) | Enabled by default | Events per second (default = 1) | |
| 125002368 | System | DROP UDP TROJAN DNS Query to Cerber Domain (3m3ngm.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (3m3ngm.top) | Enabled by default | Events per second (default = 1) | |
| 125002369 | System | DROP TCP TROJAN DNS Query to Cerber Domain (3m3ngm.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (3m3ngm.top) | Enabled by default | Events per second (default = 1) | |
| 125002370 | System | DROP UDP TROJAN DNS Query to Cerber Domain (eujvrw.bid) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (eujvrw.bid) | Enabled by default | Events per second (default = 1) | |
| 125002371 | System | DROP TCP TROJAN DNS Query to Cerber Domain (eujvrw.bid) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (eujvrw.bid) | Enabled by default | Events per second (default = 1) | |
| 125002372 | System | DROP UDP TROJAN DNS Query to Cerber Domain (bw9e2z.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (bw9e2z.top) | Enabled by default | Events per second (default = 1) | |
| 125002373 | System | DROP TCP TROJAN DNS Query to Cerber Domain (bw9e2z.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (bw9e2z.top) | Enabled by default | Events per second (default = 1) | |
| 125002374 | System | DROP UDP TROJAN DNS Query to Cerber Domain (yl1wg6.top) | This rule drops TROJAN DNS Query to Cerber Domain using UDP (yl1wg6.top) | Enabled by default | Events per second (default = 1) | |
| 125002375 | System | DROP TCP TROJAN DNS Query to Cerber Domain (yl1wg6.top) | This rule drops TROJAN DNS Query to Cerber Domain using TCP (yl1wg6.top) | Enabled by default | Events per second (default = 1) | |
| 125002376 | System | DROP UDP TROJAN Win32.Bunitu DNS UDP Lookup (horolwaiting.biz) | This rule drops TROJAN Win32.Bunitu DNS Lookup | Enabled by default | Events per second (default = 1) | |
| 125002377 | System | DROP TCP TROJAN Win32.Bunitu DNS TCP Lookup (horolwaiting.biz) | This rule drops TROJAN Win32.Bunitu DNS Lookup | Enabled by default | Events per second (default = 1) |