Outbound SMB from a PeopleSoft Server to a Public Destination

Daniel Jeremiah@daniyyell

•updated Jun 19, 2026•0•0•8

Detects outbound TCP port 445 traffic (SMB) from a host identified as PeopleSoft, WebLogic, or PIA to a public IP address. This could indicate data exfiltration or forced authentication attempts.