Back to Rule

Rule History

SID: 2010816 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 7Jul 30, 2010, 12:00 PM

ET POLICY Incoming UDP Packet From Amazon EC2 Cloud

alert udp [174.129.0.0/16,67.202.0.0/18,79.125.0.0/17,184.72.0.0/15,75.101.128.0/17,174.129.0.0/16,204.236.128.0/17] !53 -> $HOME_NET !53 (msg:"ET POLICY Incoming UDP Packet From Amazon EC2 Cloud";  classtype:command-and-control; sid:2010816; rev:7; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2020_08_20;)

Jul 30, 2010, 12:00 PM

Aug 20, 2020, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-policy.rules