alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"Paros/"; http_header; fast_pattern; pcre:"/^User-Agent\x3a[^\n]+Paros\//H"; reference:url,www.parosproxy.org; reference:url,doc.emergingthreats.net/2008187; classtype:attempted-recon; sid:2008187; rev:10;)

Added 2011-10-19 18:51:43 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"User-Agent|3a|"; http_header; content:"Paros/"; http_header; fast_pattern; pcre:"/^User-Agent\:[^\n]+Paros\//Hm"; reference:url,www.parosproxy.org; reference:url,doc.emergingthreats.net/2008187; classtype:attempted-recon; sid:2008187; rev:9;)

Added 2011-10-12 19:24:37 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"User-Agent|3a|"; http_header; content:"Paros/"; http_header; fast_pattern; pcre:"/^User-Agent\:[^\n]+Paros\//Hm"; classtype:attempted-recon; reference:url,www.parosproxy.org; reference:url,doc.emergingthreats.net/2008187; sid:2008187; rev:9;)

Added 2011-09-14 22:38:04 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"User-Agent|3a|"; http_header; content:"Paros/"; http_header; fast_pattern; pcre:"/^User-Agent\:[^\n]+Paros\//Hm"; classtype:attempted-recon; reference:url,www.parosproxy.org; reference:url,doc.emergingthreats.net/2008187; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_Paros_Proxy; sid:2008187; rev:9;)

Added 2011-02-04 17:27:17 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"|0d 0a|User-Agent\:"; content:"Paros/"; distance:0; within:150; pcre:"/User-Agent\:[^\n]+Paros\//"; reference:url,www.parosproxy.org; classtype:attempted-recon; reference:url,doc.emergingthreats.net/2008187; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_Paros_Proxy; sid:2008187; rev:3;)

Added 2009-02-12 18:21:19 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"|0d 0a|User-Agent\:"; content:"Paros/"; distance:0; within:150; pcre:"/User-Agent\:[^\n]+Paros\//"; reference:url,www.parosproxy.org; classtype:attempted-recon; reference:url,doc.emergingthreats.net/2008187; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/SCAN/SCAN_Paros_Proxy; sid:2008187; rev:3;)

Added 2009-02-12 18:21:19 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"|0d 0a|User-Agent\:"; content:"Paros/"; distance:0; within:150; pcre:"/User-Agent\:[^\n]+Paros\//"; reference:url,www.parosproxy.org; classtype:attempted-recon; sid:2008187; rev:2;)

Added 2008-05-11 07:49:23 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"|0d 0a|User-Agent\:"; content:"Paros/"; distance:0; within:150; pcre:"/User-Agent\:[^\n]+Paros\//"; reference:url,www.parosproxy.org; classtype:attempted-recon; sid:2008187; rev:2;)

Added 2008-05-11 07:49:23 UTC

alert tcp $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET SCAN Paros Proxy Scanner Detected"; flow:to_server,established; content:"|0d 0a|User-Agent:"; content:"Paros/"; distance:0; within:150; pcre:"/User-Agent\:[^\n]+Paros\//"; reference:url,www.parosproxy.org; classtype:attempted-recon; sid:2008187; rev:1;)

Added 2008-05-05 13:11:27 UTC