alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; reference:url,doc.emergingthreats.net/2009910; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Coupons.com; sid:2009910; rev:5;)

Added 2009-09-15 16:45:35 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; reference:url,doc.emergingthreats.net/2009910; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Coupons.com; sid:2009910; rev:5;)

Added 2009-09-15 16:45:35 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; reference:url,doc.emergingthreats.net/2009910; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Coupons.com; sid:2009910; rev:3;)

Added 2009-09-15 16:30:36 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; reference:url,doc.emergingthreats.net/2009910; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Coupons.com; sid:2009910; rev:3;)

Added 2009-09-15 16:30:36 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; sid:2009910; rev:2;)

Added 2009-09-15 15:30:36 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent\: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; sid:2009910; rev:2;)

Added 2009-09-15 15:30:36 UTC


alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Coupons.com Coupon Printer Use"; flow:established,to_server; content:"GET "; depth:4; content:"|0d 0a|User-Agent: Mozilla/3.0 (compatible)|0d 0a|"; uricontent:"/ccr/default.aspx?"; uricontent:"go="; uricontent:"&bid=xml&cid="; classtype:policy-violation; reference:url,coupons.com; sid:2009910; rev:1;)

Added 2009-09-15 15:09:29 UTC


Topic revision: r1 - 2009-09-15 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats