ET SCAN Non-Malicious SSH/SSL Scanner on the run

SID: 2016763Rev: 70 viewsHistory

Sourceet/open

CreatedApril 17, 2013

UpdatedJuly 26, 2019

Classificationnetwork-scan

alert tcp 188.95.234.6 any -> $HOME_NET [22,443] (msg:"ET SCAN Non-Malicious SSH/SSL Scanner on the run"; threshold:type limit, track by_src, seconds 60, count 1; reference:url,pki.net.in.tum.de/node/21; reference:url,isc.sans.edu/diary/SSH%2bscans%2bfrom%2b188.95.234.6/15532; classtype:network-scan; sid:2016763; rev:7; metadata:created_at 2013_04_17, confidence Medium, signature_severity Informational, updated_at 2019_07_26;)

References

url	pki.net.in.tum.de/node/21
url	isc.sans.edu/diary/SSH%2bscans%2bfrom%2b188.95.234.6/15532

Metadata

created at2013_04_17

confidenceMedium

signature severityInformational

updated at2019_07_26

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!