Emerging Threats

Nginx ( http://nginx.net/ ) is a good http server and proxy. used in a lot of places for legitimate things. Unfortunately it's used most often in hosting or redirecting for malicious sites.

I've added sig 2008054 to catch these. This doesn't necessarily mean 100% that traffic is hostile, but it's worth checking into.  

As always please report any issues!

UPDATE: The existing sigs didn't work, too many legitimate sites using nginx. Have added two signatures to catch modified server version strings that are more likely to be hostile. 2008064  and 2008065.