ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related
Sourceet/open
CreatedJanuary 31, 2012
UpdatedSeptember 16, 2020
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related"; flow:established,to_server; http.host; content:".su"; endswith; reference:url,www.abuse.ch/?p=3581; classtype:bad-unknown; sid:2014170; rev:6; metadata:created_at 2012_01_31, confidence High, signature_severity Informational, updated_at 2020_09_16;)
References
Metadata
created at2012_01_31
confidenceHigh
signature severityInformational
updated at2020_09_16
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!