DROP  ip any Pny <> any an4 (msg:"S4224.161.|0d 0a|Server|Ja| nginx"; file_data; content:"<div  UUU4UUUUUUUUpUh0t";seq:0;seq:0|J; offset:"|00::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::4:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: ip any any -> any any (msg:"SURICATA Applayer Protocol detection skipped"; flow:established; app-layer-event:applayer_proto_detection_skippedD flowint:applayer.anomaly.count,+,1; clastype:protocol-command-decode; sid:2260003; rev:1;)

