Difference between revisions of "HIDS 171003"

From Atomicorp Wiki
Jump to: navigation, search
(Created page with "'''Rule ID''' 171003 '''Message''' Multiple rapid Exim authentication failures. '''Description''' This rule detects when exim reports a number of incorrect authenticat...")
 

Latest revision as of 14:07, 5 January 2015

Rule ID

171003

Message

Multiple rapid Exim authentication failures.

Description

This rule detects when exim reports a number of incorrect authentication failures for the same IP. The threshold is 5 failures in 2 seconds.

False Positives

There are no known false positive for this rule.

Tuning Recommendations

None.

Similar Rules

HIDS_171003

HIDS_171004

HIDS_171006


Knowledge Base Articles

None.

Outside References

None.

Notes

None.

Personal tools