ET DELETED Possible Warezov/Stration Data Post to Controller (pr2.cgi)

SID: 2006414Rev: 50 views
History
Sourceet/open
CreatedJuly 30, 2010
UpdatedJuly 26, 2019
Classificationtrojan-activity
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET DELETED Possible Warezov/Stration Data Post to Controller (pr2.cgi)"; flow:established,to_server; content:"/cgi-bin/pr2.cgi"; http_uri; pcre:"/\/cgi-bin\/pr2\.cgi\?[a-zA-Z0-9]{172}/Ui"; classtype:trojan-activity; sid:2006414; rev:5; metadata:created_at 2010_07_30, signature_severity Unknown, updated_at 2019_07_26;)

Metadata

created at2010_07_30
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!