Back to Rule

Rule History

SID: 2100719 • Source: et/open

Versions (3)

Version DetailsCurrent

Rev: 9Sep 23, 2010, 12:00 PM

GPL TELNET root login

alert tcp $TELNET_SERVERS 23 -> $EXTERNAL_NET any (msg:"GPL TELNET root login"; flow:from_server,established; content:"login|3a 20|root"; fast_pattern; classtype:suspicious-login; sid:2100719; rev:9; metadata:created_at 2010_09_23, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_10_08;)

Sep 23, 2010, 12:00 PM

Oct 8, 2019, 12:00 PM

Sep 21, 2024, 3:00 AM

Oct 10, 2025, 8:34 PM

rules/emerging-telnet.rules