HIDS 60817
From Atomicorp Wiki
Rule ID
60817
Status
Active rule currently published
Description
This rule reports when Apache has rejected a connection from a client because the method is not implemented. ASL does not cause this, this is simply a reporting rule, and disabling this rule will not prevent Apache from rejecting these connections.
This rule does not shun the offending the IP by default.
Certain DOS attacks use this method.
False Positives
None. This rule simply reports when Apache has rejected the connection because it is using an invalid method.
Tuning Recommendations
None.