HIDS 171004
From Atomicorp Wiki
Rule ID
171004
Message
Multiple rapid Exim authentication failures.
Description
This rule detects when exim reports a high number of incorrect authentication failures for the same IP. The threshold is 5 failures in 10 seconds.
False Positives
There are no known false positive for this rule.
Tuning Recommendations
None.
Similar Rules
HIDS_171004
Knowledge Base Articles
None.
Outside References
None.
Notes
None.
