[Snort-sigs] Unknown IIS Worm Sigs

Matthew Jonkman matt at ...2436...
Fri Jun 25 08:15:08 EDT 2004


Really? That's good news. I hope he is right. I've turned it back on for 
my nets. The flood of false's hasn't appeared yet, so maybe it's good now.

That russian site's down now. Did you get hits on it last night?

Thanks

Matt

Hoover, James A (EIS, Corp) wrote:

> I believe Brian is correct on this.  I've been able to confirm that this
> rule triggers when visiting the site the was listed on incidents.org
> 217.107.218.147.  
> 




More information about the Snort-sigs mailing list