Back to Rule

Rule History

SID: 2036651 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 1May 23, 2022, 12:00 PM

ET INFO External Host Querying Erlang Port Mapper Daemon

alert tcp $EXTERNAL_NET any -> [$HOME_NET,$HTTP_SERVERS] 4369 (msg:"ET INFO External Host Querying Erlang Port Mapper Daemon"; flow:established,to_server; dsize:3; content:"|00 01 6e|"; fast_pattern; classtype:misc-activity; sid:2036651; rev:1; metadata:created_at 2022_05_23, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2022_05_23;)

May 23, 2022, 12:00 PM

May 23, 2022, 12:00 PM

Sep 21, 2024, 3:00 AM

Sep 3, 2025, 8:34 PM

rules/emerging-info.rules