Sagan low stable other

[APACHE] User authentication failed

[APACHE] User authentication failed

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[APACHE] User authentication failed"; content: "authentication failed"; nocase; default_proto:tcp; default_dst_port: $HTTP_PORT; classtype: unsuccessful-user; program: *apache*
| httpd; parse_src_ip: 2; parse_dst_ip: 1; sid:5000159; rev:9; metadata: mitre_technique_id T1051, mitre_technique_id T1078, mitre_technique_id T1110;)

Field Validations

Loading…

Comments (0)

Loading comments...