[Snort-sigs] Unknown IIS Worm Sigs

Matthew Jonkman matt at ...2436...
Fri Jun 25 08:15:08 EDT 2004

Really? That's good news. I hope he is right. I've turned it back on for 
my nets. The flood of false's hasn't appeared yet, so maybe it's good now.

That russian site's down now. Did you get hits on it last night?



Hoover, James A (EIS, Corp) wrote:

> I believe Brian is correct on this.  I've been able to confirm that this
> rule triggers when visiting the site the was listed on incidents.org

More information about the Snort-sigs mailing list