ET POLICY FTP Conversation on Low Port - Likely Hostile (TYPE A) - Inbound

SID: 2008589Rev: 30 views
History
Sourceet/open
CreatedJuly 30, 2010
UpdatedMay 3, 2023
Classificationunusual-client-port-connection
alert tcp $EXTERNAL_NET any -> $HOME_NET 22:1024 (msg:"ET POLICY FTP Conversation on Low Port - Likely Hostile (TYPE A) - Inbound"; flow:established,to_server; dsize:6; content:"TYPE "; depth:5; classtype:unusual-client-port-connection; sid:2008589; rev:3; metadata:created_at 2010_07_30, deployment Perimeter, confidence High, signature_severity Informational, updated_at 2023_05_03; target:dest_ip;)

Metadata

created at2010_07_30
deploymentPerimeter
confidenceHigh
signature severityInformational
updated at2023_05_03

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!