Back to Rule

Rule History

SID: 2035948 • Source: et/open

Versions (5)

Version DetailsCurrent

Rev: 4Nov 27, 2017, 12:00 PM

ET POLICY IP Check Domain (iplogger .org in DNS Lookup)

alert dns $HOME_NET any -> any any (msg:"ET POLICY IP Check Domain (iplogger .org in DNS Lookup)"; dns.query; content:"iplogger.org"; endswith; classtype:policy-violation; sid:2035948; rev:4; metadata:created_at 2017_11_27, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_09_15;)

Nov 27, 2017, 12:00 PM

Sep 15, 2020, 12:00 PM

Sep 21, 2024, 3:00 AM

Sep 3, 2025, 8:34 PM

rules/emerging-policy.rules