Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET WEB_CLIENT User-Agent used in Injection Attempts"; flow:established,to_server; http.user_agent; content:"MOT-MPx220/1.400 Mozilla/4.0"; startswith; reference:url,lists.emergingthreats.net/pipermail/emerging-sigs/2011-December/016882.html; classtype:trojan-activity; sid:2014054; rev:3; metadata:created_at 2011_12_30, confidence High, signature_severity Minor, updated_at 2024_02_08;)