ET DNS Excessive NXDOMAIN responses - Possible DNS Backscatter or Domain Generation Algorithm Lookups
Sourceet/open
CreatedJuly 30, 2010
UpdatedJuly 26, 2019
Classificationbad-unknown
alert udp any 53 -> $HOME_NET any (msg:"ET DNS Excessive NXDOMAIN responses - Possible DNS Backscatter or Domain Generation Algorithm Lookups"; byte_test:1,&,128,2; byte_test:1,&,1,3; byte_test:1,&,2,3; threshold:type both, track by_src, count 50, seconds 10; classtype:bad-unknown; sid:2008470; rev:6; metadata:created_at 2010_07_30, confidence Medium, signature_severity Informational, updated_at 2019_07_26;)
Metadata
created at2010_07_30
confidenceMedium
signature severityInformational
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!