RULE(RULE ID:806303)

Rule General Information
Release Date: 2021-12-20
Rule Name: Tool FRP Detection
Severity:
CVE ID:
Rule Protection Details
Description: The FRP is an open source Intranet penetration and reverse proxy software. It can expose Intranet services to the public network through public network nodes, which may be exploited by hackers.This rule is used to detect suspicious FRP connection requests.
Impact: Attackers use attack tools to attack targets, which can lead to data leakage, service interruption, system crash, data tampering, and illegal access.
Affected OS: Windows, Linux, Others
Reference:
Solutions
1. Scan the server file system to ensure that there are no hacker tools and related malicious files. 2. Complete system backup to ensure server data security. 3. Harden the security of the server, restrict access permissions, install firewalls, and use secure access control lists.