🐾 - 🚨 Suspicious 👀 non DNS TCP trafic on usual DNS port
Sourcepawpatrules
CreatedFebruary 11, 2022
UpdatedJune 17, 2022
Classificationpolicy-violation
alert tcp any any -> any [53] (msg:"🐾 - 🚨 Suspicious 👀 non DNS TCP trafic on usual DNS port"; flow:to_server; app-layer-protocol:!dns; threshold:type limit, track by_src, seconds 60, count 1; reference:url,https://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers; metadata:created_at 2022_02_11, updated_at 2022_06_17; sid:3300300; rev:6; classtype:policy-violation;)
Metadata
created at2022_02_11
updated at2022_06_17
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!