[Snort-sigs] FP on 1:16442:3

Martin Holste mcholste at ...2420...
Wed May 11 15:04:27 EDT 2011


This is generating FP's to stats.kaspersky.com (verified IP 81.176.69.91):

POST /zrcvstat?t=2&e=1&md5=3tetZWOPPgXNgEdEZ3W6zg
Connection: keep-alive
Host: stats.kaspersky.com
User-Agent: Mozilla
Content-Length: 553
X-HTTP-Version: 1.0

DATA=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




More information about the Snort-sigs mailing list