#alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established,from_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:5;)
Added 2007-10-10 06:31:36 UTC
#alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established,from_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:5;)
Added 2007-10-10 06:31:36 UTC
alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established,from_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:5;)
Added 2007-09-17 12:47:00 UTC
alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established,from_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:5;)
Added 2007-09-17 12:47:00 UTC
alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established, to_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:4;)
Added 2007-08-11 12:25:12 UTC
alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established, to_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; metadata:service dns; reference:url,crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:3;)
Added 2007-08-11 05:31:45 UTC
alert tcp $EXTERNAL_NET 53 -> $HOME_NET any (msg:"BLEEDING-EDGE CURRENT EVENTS DNS-Rebinding Attack 10.x.x.x /8 (local IP from remote DNS Server)"; flow:established, to_server; content: "|c0 0c 00 01 00 01|"; content: "|00 04 0a|"; within:3; distance:4; metadata:service dns; reference:
http://crypto.stanford.edu/dns/; classtype:misc-attack; sid:2006918; rev:2;)
Added 2007-08-10 01:20:19 UTC