Back to Rule

Rule History

SID: 2018327 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 4Mar 26, 2014, 12:00 PM

ET DELETED JCE Joomla Extension User-Agent (BOT)

alert http $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"ET DELETED JCE Joomla Extension User-Agent (BOT)"; flow:to_server,established; content:"BOT/0.1 (BOT for JCE)"; depth:21; http_user_agent; reference:url,exploit-db.com/exploits/17734/; reference:url,blog.spiderlabs.com/2014/03/honeypot-alert-jce-joomla-extension-attacks.html; classtype:attempted-recon; sid:2018327; rev:4; metadata:created_at 2014_03_26, signature_severity Unknown, updated_at 2019_07_26;)

Mar 26, 2014, 12:00 PM

Jul 26, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-deleted.rules