On this page

Atomicorp WAF Rule 321009

Rule Summary

  • Rule ID: 321009
  • Status: Active
  • Alert message: Atomicorp.com WAF Rules: Possible Probe detected multiple distinct 404s from one IP in 60s (5-slot memory)
  • Observed CWEs: None documented
  • Rule severity: Critical (2)
  • Phase: 3 (response headers)
  • Rule action: deny
  • HTTP status: 429
  • Public tags: 404-distinct, probing
  • Logging: log, auditlog

Description

This rule detects behavior identified by its current alert as “Possible Probe detected multiple distinct 404s from one IP in 60s (5-slot memory)”. It evaluates during the response headers phase and denies matching traffic with HTTP status 429.

This is a selected list of documented research observations, not an exhaustive coverage matrix. Absence of a CVE does not imply absence of protection.

No selected related public CVE research notes are currently published.