Multiple rapid Exim authentication failures.
This rule detects when exim reports a high number of incorrect authentication failures for the same IP. The threshold is 5 failures in 10 seconds.
There are no known false positive for this rule.
Knowledge Base Articles