Rule History

alert tcp $EXTERNAL_NET any -> $HOME_NET 22:1024 (msg:"ET POLICY FTP Conversation on Low Port - Likely Hostile (TYPE A) - Inbound"; flow:established,to_server; dsize:6; content:"TYPE "; depth:5; classtype:unusual-client-port-connection; sid:2008589; rev:3; metadata:created_at 2010_07_30, deployment Perimeter, confidence High, signature_severity Informational, updated_at 2023_05_03; target:dest_ip;)