Versions (6)
Version DetailsCurrent
Rev: 9 • Jul 30, 2010, 12:00 PMET POLICY IP Check Domain (showip in HTTP Host)
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY IP Check Domain (showip in HTTP Host)"; flow:established,to_server; http.method; content:"GET"; http.host; content:"showip."; fast_pattern; pcre:"/^[^\r\n]*showip\.[a-z]+(?:\x3a\d{1,5})?\r?$/Wm"; classtype:attempted-recon; sid:2008987; rev:9; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_12_09, reviewed_at 2024_05_01;)
Jul 30, 2010, 12:00 PM
Dec 9, 2022, 12:00 PM
Sep 21, 2024, 3:00 AM
Dec 10, 2025, 11:34 PM
rules/emerging-policy.rules