ET POLICY Observed IP Lookup Domain (formyip .com in DNS Lookup)

SID: 2024830Rev: 50 views
History
Sourceet/open
CreatedOctober 10, 2017
UpdatedJuly 22, 2022
Classificationexternal-ip-check
alert dns $HOME_NET any -> any any (msg:"ET POLICY Observed IP Lookup Domain (formyip .com in DNS Lookup)"; dns.query; content:"formyip.com"; fast_pattern; nocase; endswith; classtype:external-ip-check; sid:2024830; rev:5; metadata:created_at 2017_10_10, confidence Medium, signature_severity Informational, updated_at 2022_07_22;)

Metadata

created at2017_10_10
confidenceMedium
signature severityInformational
updated at2022_07_22

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!