Intrusion PreventionSSH.Client.Request.Mimicking
Description
This detects the Client Protocol field used by SSH Brute Forcer, an attack tool that is popularly used to discover accounts with weak passwords. The client field can also be used for legitimate applications but this should rarely be seen.
Affected Products
Any SSH server.
Impact
Password disclosure.
Recommended Actions
N/A
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 14292 |
| Created | Mar 08, 2007 |
| Updated | Aug 29, 2022 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | Linux, BSD, Solaris |
| Affected App | Other |