ET DNS Query to a *.pw domain - Likely Hostile
Sourceet/open
CreatedApril 20, 2013
UpdatedNovember 19, 2020
Classificationbad-unknown
alert dns $HOME_NET any -> any any (msg:"ET DNS Query to a *.pw domain - Likely Hostile"; dns.query; content:".pw"; nocase; endswith; content:!".u.pw"; endswith; nocase; classtype:bad-unknown; sid:2016778; rev:8; metadata:created_at 2013_04_20, confidence Medium, signature_severity Informational, updated_at 2020_11_19, reviewed_at 2024_04_22;)
Metadata
created at2013_04_20
confidenceMedium
signature severityInformational
updated at2020_11_19
reviewed at2024_04_22
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!