ET INFO SSHv2 Client KEX Detected on Expected Port

7.0.35.0SID: 2001976Rev: 12Disabled1 views
Sourceet/open
Fileemerging-info.rules
CreatedJuly 30, 2010
UpdatedMarch 15, 2024
Classificationmisc-activity
alert tcp any any -> any $SSH_PORTS (msg:"ET INFO SSHv2 Client KEX Detected on Expected Port"; flow:established,to_server; flowbits:isset,is_ssh_server_kex; flowbits:set,ET.is_ssh_client_kex; flowbits:noalert; byte_test:1,=,20,5; classtype:misc-activity; sid:2001976; rev:12; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2024_03_15;)

Metadata

created at2010_07_30
confidenceHigh
signature severityInformational
updated at2024_03_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!