Reverse SSH tunnel setup to free.pinggy.io via renamed OpenSSH client
Detects DNS queries and established TLS connections to free.pinggy.io, a service often used to establish unauthorized reverse tunnels to internal networks, bypassing perimeter security controls.
Suricata

