ET DYN_DNS DYNAMIC_DNS HTTP Request to *.passinggas.net Domain (Sitelutions)

7.0.35.0SID: 2018847Rev: 3Enabled0 views
Sourceet/open
Fileemerging-dyn_dns.rules
CreatedJuly 30, 2014
UpdatedJune 11, 2024
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DYN_DNS DYNAMIC_DNS HTTP Request to *.passinggas.net Domain (Sitelutions)"; flow:established,to_server; content:".passinggas.net"; nocase; http_header; fast_pattern:only; pcre:"/^Host\x3a[^\r\n]+\.passinggas\.net(?:\x3a\d{1,5})?\r?$/Hmi"; classtype:bad-unknown; sid:2018847; rev:3; metadata:created_at 2014_07_30, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_06_11;)

Metadata

created at2014_07_30
confidenceHigh
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_06_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!