""ET SCAN External to Internal UPnP Request udp port 1900""
SID: 2008094
Revision: 4
Class Type: attempted-recon
Metadata: created_at 2010_07_30, updated_at 2010_08_30
Reference:
Protocol: udp
Source Network: $EXTERNAL_NET
Source Port: any
Destination Network: $HOME_NET
Destination Port: 1900
Flow:
Contents:
-
Value: "MSEARCH * HTTP/1.1" Depth: 18
-
Value: "MAN|3a| ssdp|3a|"
Within:
PCRE:
Special Options:
- nocase