alert tcp $EXTERNAL_NET any -> $HOME_NET 27017 (msg:"[MONGODB] Admin command received from client"; content: "admin"; content: "received"; content: "client"; classtype: successful-admin; program: mongod; reference: url,www.mongodb.org; sid: 5001605; rev:1;)
-- Main.Sagan-Wiki-Add - 2015-10-21
New revisions of 5001605 will be below...
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[MONGODB] Admin command received from client"; content: "admin"; content: "received"; content: "client"; default_proto: tcp; default_dst_port: 27017; classtype: successful-admin; program: mongod; reference: url,www.mongodb.org; sid: 5001605; rev:2;)
-- Main.Sagan-Wiki-Add - 2021-4-12