alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET SCAN Arachni Web Scan"; flow:established,to_server; http.uri; content:"/Arachni-"; threshold:type limit, track by_src, seconds 60, count 1; reference:url,www.arachni-scanner.com/; classtype:attempted-recon; sid:2017142; rev:3; metadata:created_at 2013_07_13, confidence Medium, signature_severity Informational, updated_at 2024_03_17;)