ET INFO SSHv2 Client New Keys Detected on Unusual Port

7.0.35.0SID: 2001983Rev: 12Disabled2 views
Sourceet/open
Fileemerging-info.rules
CreatedJuly 30, 2010
UpdatedApril 26, 2024
Classificationmisc-activity
alert tcp any any -> any !$SSH_PORTS (msg:"ET INFO SSHv2 Client New Keys Detected on Unusual Port"; flow:established,to_server; flowbits:isset,ET.is_ssh_client_kex; flowbits:set,is_proto_ssh; flowbits:noalert; byte_test:1,=,21,5; classtype:misc-activity; sid:2001983; rev:12; metadata:created_at 2010_07_30, confidence High, signature_severity Informational, updated_at 2024_04_26;)

Metadata

created at2010_07_30
confidenceHigh
signature severityInformational
updated at2024_04_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!