ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain
Sourceet/open
CreatedApril 8, 2011
UpdatedFebruary 22, 2024
Classificationmisc-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET MALWARE HTTP Request to a Malware Related Numerical .cn Domain"; flow:established,to_server; http.host; content:".cn"; endswith; fast_pattern; pcre:"/[^a-z]*[0-9]{4,30}\x2Ecn$/i"; classtype:misc-activity; sid:2012650; rev:8; metadata:created_at 2011_04_08, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_02_22;)
Metadata
created at2011_04_08
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_02_22
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!