HTTP: Suspicious Randomized Host Header (5)

This signature detects a suspicious HTTP host header. This kind of behavior is mostly observed when someone is trying to scan and send malicious traffic against a network security device using various traffic generation tools. This signature may trigger false-positives inside the Intranet traffic, so it is suggested to avoid using it for inspecting such traffic. This signature is highly recommended to protect web servers and devices deployed at a data centre.

Short Name

HTTP:EXPLOIT:HOST-RANDOM-5

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Suspicious Randomized Host Header (5)

Found a potential security threat?