🐾 - 🚨 👀 myip.opendns.com (DNS Query) lookup public IP address from local network - Possible Leak 🚱 - Suricata Rule 3300361 (pawpatrules)

🐾 - 🚨 👀 myip.opendns.com (DNS Query) lookup public IP address from local network - Possible Leak 🚱

SID: 3300361Rev: 30 viewsHistory

Sourcepawpatrules

CreatedOctober 31, 2022

UpdatedAugust 8, 2024

Classificationexternal-ip-check

alert dns $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 👀 myip.opendns.com (DNS Query) lookup public IP address from local network - Possible Leak 🚱"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; dns_query; content:"myip.opendns.com"; nocase; reference:url,https://www.teamviewer.com/; metadata:created_at 2022_10_31, updated_at 2024_08_08; sid:3300361; rev:3; classtype:external-ip-check;)

References

url	https://www.teamviewer.com/

🐾 - 🚨 👀 myip.opendns.com (DNS Query) lookup public IP address from local network - Possible Leak 🚱

References

Metadata

Comments (0)