DDOS: Low Orbit Ion Cannon Webpage Traffic
This signature detects HTTP requests generated by the web-page version of the Low Orbit Ion Cannon, a URL-flooding tool. This signature is to be used to protect web servers from LOIC requests, and therefore should be placed at the DMZ border between your organization's web servers and the Internet at large to filter in-bound requests. This signature should NOT be used to filter outbound client requests.
References
Short Name
DDOS:LOIC-WEB
Severity
Major
Recommended
False
Recommended Action
Drop
Category
DDOS
Keywords
Cannon Ion Low Orbit Traffic Webpage
Release Date
03/27/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown