ET DELETED FAKEAV client requesting fake scanner page

7.0.35.0SID: 2011546Rev: 2Disabled0 views
Sourceet/open
Fileemerging-deleted.rules
CreatedSeptember 27, 2010
UpdatedJuly 26, 2019
Classificationbad-unknown
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET DELETED FAKEAV client requesting fake scanner page"; flow:established,to_server; content:"/scaner/?id="; http_uri; classtype:bad-unknown; sid:2011546; rev:2; metadata:created_at 2010_09_27, signature_severity Unknown, updated_at 2019_07_26;)

Metadata

created at2010_09_27
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!