Multiple rapid Exim authentication failures.
This rule detects when exim reports a high number of incorrect authentication failures for the same IP. The threshold is 8 failures in 2 minutes.
There are no known false positive for this rule.
Knowledge Base Articles
ASL has no control over the message generated by your application (in this case sshd). This messages generated by an application and neither generated by ASL, nor is this something ASL can control. ASL is just listening to what you application is "saying", analyzing the "message" and then reporting its significance to you you based on its internal understanding of those messages, and other events that may (or may not) be occurring on the system.