🐾 - 🚨 Apple 🍏 Push Notification Service (APNs) (TCP/5223) - Suricata Rule 3300212 (pawpatrules)

🐾 - 🚨 Apple 🍏 Push Notification Service (APNs) (TCP/5223)

SID: 3300212Rev: 20 views

Sourcepawpatrules

CreatedMay 20, 2022

UpdatedAugust 2, 2022

Classificationpolicy-violation

alert tls $HOME_NET any -> $EXTERNAL_NET 5223 (msg:"🐾 - 🚨 Apple 🍏 Push Notification Service (APNs) (TCP/5223)"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; tls_sni; content:"courier.push.apple.com"; nocase; metadata:created_at 2022_05_20, updated_at 2022_08_02; sid:3300212; rev:2; classtype:policy-violation;)

Metadata

created at2022_05_20

updated at2022_08_02

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!