|
|
|||||||
| Home | Documentation | Download | Latest Rule File | Rule Database | Mailing List | Contact | ||
Rule Database ( GID14 )
| ID | GID14 |
| Revision | 1 |
| Name | PhatBot |
| Type | requestLine |
| Pattern | ^SEARCH /\x90(\x02\xB1){1000,} |
| Condition | match |
| Case Sensitive | yes |
| Log | yes |
| Action | block |
| Command | %req% |
| Description | Triggers when a PhatBot HTTP request is detected. ( IIS, worm ) |
| Credit | Kanatoko |
| Signature |