Back to Rule

Rule History

SID: 3300601 • Source: pawpatrules

Versions (2)

Version DetailsCurrent

Rev: 8Aug 17, 2022, 12:00 PM

🐾 - 🔒 TLS connection to (sni) - ftp.uptobox.com - FTP Upload to File Sharing solution 🗃 - Possible Leak 🚱

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🔒 TLS connection to (sni) - ftp.uptobox.com - FTP Upload to File Sharing solution 🗃 - Possible Leak 🚱"; flow:to_server, stateless; tls_sni; content:"ftp.uptobox.com"; nocase;pcre:"/(^|\.)ftp\.uptobox\.com$/"; metadata:created_at 2022_08_17, updated_at 2025_09_16; sid:3300601; rev:8; classtype:bad-unknown;)

Aug 17, 2022, 12:00 PM

Sep 16, 2025, 12:00 PM

Feb 21, 2024, 4:00 PM

Sep 16, 2025, 8:34 PM

rules/PAW-PATRULES_LEAKS.rules