Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED NYU Internet HTTP/SSL Census Scan"; flow:established,to_server; http.user_agent; content:"NYU Internet Census (https://scan.lol|3b 20|research@scan.lol)"; reference:url,scan.lol; classtype:network-scan; sid:2025460; rev:5; metadata:affected_product Web_Server_Applications, attack_target Web_Server, created_at 2018_04_03, deployment Perimeter, deprecation_reason Age, signature_severity Minor, updated_at 2023_04_26;)