alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 👀 IPinfo.io CLI 👨‍💻 - Possible Leak 🚱"; flow:to_server, stateless; ja3.hash; content:"049f44ae40ab2cab555bdfee22e7d7cb"; tls_sni; content:"ipinfo.io"; metadata:former_category JA3; reference:url,https://github.com/ipinfo/cli/; metadata:created_at 2024_10_17, updated_at 2024_10_17; sid:3321384; rev:1; classtype:external-ip-check;)