reference Hurricane Electric DNS server

rule:
  meta:
    name: reference Hurricane Electric DNS server
    namespace: communication/dns
    authors:
      - william.ballenthin@mandiant.com
    scopes:
      static: function
      dynamic: thread
    references:
      - https://dns.he.net/
      - https://dnslytics.com/ip/216.66.1.2
  features:
    - or:
      - string: "216.218.130.2"
        description: ns1.he.net
      - string: "216.218.131.2"
        description: ns2.he.net
      - string: "216.218.132.2"
        description: ns3.he.net
      - string: "216.66.1.2"
        description: ns4.he.net
      - string: "216.66.80.18"
        description: ns5.he.net