ET DELETED Suspicious Mozilla UA with no Space after colon

SID: 2016921Rev: 70 views
History
Sourceet/open
CreatedMay 24, 2013
UpdatedJuly 6, 2023
Classificationtrojan-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED Suspicious Mozilla UA with no Space after colon"; flow:established,to_server; content:"User-Agent|3a|Mozilla"; http_header; nocase; fast_pattern:only; threshold:type limit,track by_src,count 2,seconds 60; classtype:trojan-activity; sid:2016921; rev:7; metadata:created_at 2013_05_24, signature_severity Unknown, updated_at 2023_07_06;)

Metadata

created at2013_05_24
signature severityUnknown
updated at2023_07_06

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!