🐾 - 🌐 HTTP connection to 🇷🇺 .ru extension observed

SID: 3301022Rev: 7Enabled0 views
FilePAW-PATRULES_SPECIAL_DOMAIN_EXTENSIONS.rules
CreatedSeptember 28, 2021
UpdatedNovember 15, 2021
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🌐 HTTP connection to 🇷🇺 .ru extension observed"; flow:to_server, stateless; content:".ru"; fast_pattern; http_host; isdataat:!1,relative; classtype:bad-unknown; metadata:created_at 2021_09_28, updated_at 2021_11_15; sid:3301022; rev:7;)

Metadata

created at2021_09_28
updated at2021_11_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!