#alert http any any -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"302"; http_stat_code; content:"Found"; nocase; content:"Location|3a| "; nocase; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; reference:url,doc.emergingthreats.net/2011085; classtype:misc-activity; sid:2011085; rev:7; metadata:created_at 2010_07_30, updated_at 2010_07_30;)

Added 2017-08-07 21:04:14 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"302"; http_stat_code; content:"Found"; nocase; content:"Location|3a| "; nocase; http_header; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; reference:url,doc.emergingthreats.net/2011085; classtype:misc-activity; sid:2011085; rev:6;)

Added 2011-10-12 19:31:17 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"302"; http_stat_code; content:"Found"; nocase; content:"Location|3a| "; nocase; http_header; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; sid:2011085; rev:6;)

Added 2011-09-14 22:44:25 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"302"; http_stat_code; content:"Found"; nocase; content:"Location|3a| "; nocase; http_header; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_Redirect; sid:2011085; rev:6;)

Added 2011-04-26 18:47:17 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"302"; http_stat_code; content:"Found"; nocase; http_stat_msg; content:"Location|3a| "; nocase; http_header; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_Redirect; sid:2011085; rev:5;)

Added 2011-02-04 17:30:49 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"HTTP/1.1 302 Found"; nocase; depth:18; content:"Location\: "; nocase; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_Redirect; sid:2011085; rev:2;)

Added 2010-05-10 17:49:14 UTC


#alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"HTTP/1.1 302 Found"; nocase; depth:18; content:"Location\: "; nocase; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_Redirect; sid:2011085; rev:2;)

Added 2010-05-10 17:49:14 UTC


alert tcp any $HTTP_PORTS -> $HOME_NET any (msg:"ET POLICY HTTP Redirect to IPv4 Address"; flow:established,from_server; content:"HTTP/1.1 302 Found"; nocase; depth:18; content:"Location\: "; nocase; pcre:"/Location\: (http\:\/\/)?\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\//i"; classtype:misc-activity; reference:url,doc.emergingthreats.net/2011085; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_HTTP_Redirect; sid:2011085; rev:2;)

Added 2010-05-06 16:27:54 UTC


Topic revision: r1 - 2017-08-08 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats