alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Python 🐍 urllib module 🌐"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.user_agent; content:"python-urllib"; nocase; reference:url,https://docs.python.org/fr/3/library/urllib.html; metadata:created_at 2021_08_25, updated_at 2022_06_13; sid:3300112; rev:4; classtype:policy-violation;)