ET DELETED HTTP GET Request on port 53 - Very Likely Hostile
Sourceet/open
CreatedJuly 30, 2010
UpdatedJuly 16, 2020
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET 53 (msg:"ET DELETED HTTP GET Request on port 53 - Very Likely Hostile"; flow:established,to_server; content:"GET"; nocase; depth:4; content:!".newsinc.com"; classtype:trojan-activity; sid:2008420; rev:8; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2020_07_16;)
Metadata
created at2010_07_30
signature severityUnknown
updated at2020_07_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!