ET INFO SSHv2 Client New Keys detected on Expected Port

7.0.35.0SID: 2001977Rev: 12Disabled3 views
Sourceet/open
Fileemerging-info.rules
CreatedJuly 30, 2010
UpdatedApril 26, 2024
Classificationmisc-activity
alert tcp any any -> any $SSH_PORTS (msg:"ET INFO SSHv2 Client New Keys detected on Expected Port"; flow:established,to_server; flowbits:isset,ET.is_ssh_client_kex; flowbits:set,is_proto_ssh; flowbits:noalert; byte_test:1,=,21,5; classtype:misc-activity; sid:2001977; rev:12; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2024_04_26;)

Metadata

created at2010_07_30
confidenceHigh
signature severityInformational
updated at2024_04_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!