Rule History

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET SCAN Springenwerk XSS Scanner User-Agent Detected"; flow:to_server,established; threshold: type limit, count 1, seconds 60, track by_src; http.user_agent; content:"Springenwerk"; reference:url,springenwerk.org/; classtype:attempted-recon; sid:2010508; rev:6; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2020_05_04;)