#alert tcp $HOME_NET any -> $EXTERNAL_NET [81:8079,8081:65535] (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flow:established,to_server; content:"POST "; nocase; depth:5; reference:url,doc.emergingthreats.net/2006409; classtype:policy-violation; sid:2006409; rev:8;)

Added 2011-10-12 19:20:40 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET [81:8079,8081:65535] (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; reference:url,doc.emergingthreats.net/2006409; sid:2006409; rev:8;)

Added 2011-09-14 22:34:12 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET [81:8079,8081:65535] (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; reference:url,doc.emergingthreats.net/2006409; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_on_Off_Ports; sid:2006409; rev:8;)

Added 2011-02-04 17:25:20 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; reference:url,doc.emergingthreats.net/2006409; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_on_Off_Ports; sid:2006409; rev:4;)

Added 2009-02-11 19:15:22 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; reference:url,doc.emergingthreats.net/2006409; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_on_Off_Ports; sid:2006409; rev:4;)

Added 2009-02-11 19:15:22 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; sid:2006409; rev:3;)

Added 2008-06-06 20:49:01 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; classtype:policy-violation; sid:2006409; rev:3;)

Added 2008-06-06 20:49:01 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port -- Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; offset:0; classtype:policy-violation; sid:2006409; rev:2;)

Added 2008-01-31 18:48:09 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"ET POLICY HTTP POST on unusual Port -- Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; offset:0; classtype:policy-violation; sid:2006409; rev:2;)

Added 2008-01-31 18:48:09 UTC


#alert tcp $HOME_NET any -> $EXTERNAL_NET 81:65535 (msg:"BLEEDING-EDGE POLICY HTTP POST on unusual Port -- Possibly Hostile"; flowbits:isnotset,BS.HTTP.ok; flow:established,to_server; content:"POST "; nocase; depth:5; offset:0; classtype:policy-violation; sid:2006409; rev:1;)

Added 2007-07-19 03:30:52 UTC


Topic revision: r1 - 2011-10-12 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats