Communication with Known Botnet Infrastructure

Ankit Mehta@Secvyn

•updated Jun 17, 2026•1•0•4

This rule detects successful network connections from devices to a list of known botnet command and control (C2) IP addresses. This indicates potential compromise and communication with malicious infrastructure.