Rule History

SID: 2033002 • Source: et/open

Versions (2)

Version DetailsCurrent

Rev: 1 • May 19, 2021, 12:00 PM

Message:

ET DELETED Baidu Spider Webcrawler User Agent - inbound

Rule:

alert http $EXTERNAL_NET any -> $HOME_NET $HTTP_PORTS (msg:"ET DELETED Baidu Spider Webcrawler User Agent - inbound"; flow:established,to_server; content:"baiduspider"; nocase; http_user_agent; classtype:not-suspicious; sid:2033002; rev:1; metadata:attack_target Web_Server, created_at 2021_05_19, signature_severity Informational, updated_at 2021_05_19;)

Created:

May 19, 2021, 12:00 PM

Updated:

May 19, 2021, 12:00 PM

DB Created:

May 19, 2021, 12:00 PM

DB Updated:

May 19, 2021, 12:00 PM

Filename:

rules/emerging-deleted.rules