ET SCAN Chroot-apache0day Unknown Web Scanner User Agent

7.0.35.0SID: 2018800Rev: 6Enabled2 views
Sourceet/open
Fileemerging-scan.rules
CreatedJuly 29, 2014
UpdatedApril 12, 2024
Classificationattempted-recon
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET SCAN Chroot-apache0day Unknown Web Scanner User Agent"; flow:established,to_server; http.user_agent; content:"chroot-apach0day"; nocase; startswith; reference:url,isc.sans.edu/forums/diary/Interesting+HTTP+User+Agent+chroot-apach0day+/18453; classtype:attempted-recon; sid:2018800; rev:6; metadata:created_at 2014_07_29, confidence Medium, signature_severity Informational, updated_at 2024_04_12;)

References

urlisc.sans.edu/forums/diary/Interesting+HTTP+User+Agent+chroot-apach0day+/18453

Metadata

created at2014_07_29
confidenceMedium
signature severityInformational
updated at2024_04_12

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!