ET INFO DNS Query for a Suspicious Malware Related Numerical .in Domain
Sourceet/open
CreatedDecember 30, 2010
UpdatedMarch 27, 2024
Classificationbad-unknown
alert dns $HOME_NET any -> any 53 (msg:"ET INFO DNS Query for a Suspicious Malware Related Numerical .in Domain"; dns.query; content:".in"; fast_pattern; endswith; pcre:"/^(?:[0-9]{4,7})\x2ein$/i"; reference:url,sign.kaffenews.com/?p=104; reference:url,www.isc.sans.org/diary.html?storyid=10165; classtype:bad-unknown; sid:2012115; rev:8; metadata:created_at 2010_12_30, deprecation_reason Performance, confidence Medium, signature_severity Informational, updated_at 2024_03_27;)
Metadata
created at2010_12_30
deprecation reasonPerformance
confidenceMedium
signature severityInformational
updated at2024_03_27
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!