Browse Rules

Search and filter across all detection sources

140 rules

sagan low other

[COURIER] Authentication failure

[COURIER] Authentication failure

sagan low other

[ORACLE] Authentication Failure

[ORACLE] Authentication Failure

sagan high other

[RSYNC] Authentication failure

[RSYNC] Authentication failure

sagan low other

[ZEUS] Authentication failure

[ZEUS] Authentication failure

sagan low other

[POSTFIX] SASL authentication failure

[POSTFIX] SASL authentication failure

sagan low other

[POSTGRESQL] Database authentication failure

[POSTGRESQL] Database authentication failure

sagan medium other

[CISCO-PRIME] MESH authentication failure

[CISCO-PRIME] MESH authentication failure

sagan medium other

[CISCO-PRIME] SNMP Authentication failure

[CISCO-PRIME] SNMP Authentication failure

sagan medium other

[CISCO-PRIME] Station authentication failure

[CISCO-PRIME] Station authentication failure

sagan medium other

[CISCO-PRIME] User authentication failure

[CISCO-PRIME] User authentication failure

sagan low other

[OPENVPN] Authentication failure [0/5]

[OPENVPN] Authentication failure [0/5]

sagan high other

[SYMANTEC-EMS] Multiple authentication failures

[SYMANTEC-EMS] Multiple authentication failures

sagan low other

[VMPOP3D] Authentication failure for POP3

[VMPOP3D] Authentication failure for POP3

sagan low other

[VPOPMAIL] Authentication failure for POP3 service

[VPOPMAIL] Authentication failure for POP3 service

sagan low other

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

sagan low other

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

sagan medium other

[CISCO-IOS] SNMP Authentication Failure [0/5]

[CISCO-IOS] SNMP Authentication Failure [0/5]

sagan high other

[COURIER] Authentication failure - Brute Force [5/5]

[COURIER] Authentication failure - Brute Force [5/5]

sagan high other

[OPENSSH] Authentication failure - Brute force [10/5]

[OPENSSH] Authentication failure - Brute force [10/5]

sagan high other

[ORACLE] Brute force authentication failure [5/1]

[ORACLE] Brute force authentication failure [5/1]

sagan high other

[SYSLOG] Authentication failure - Brute force [25/5]

[SYSLOG] Authentication failure - Brute force [25/5]

sagan high other

[CLOUDGENIX] PAM Authentication failure - Brute force [10/1]

[CLOUDGENIX] PAM Authentication failure - Brute force [10/1]

sagan low other

[COURIER-GEOIP] Authentication failure from outside HOME_COUNTRY

[COURIER-GEOIP] Authentication failure from outside HOME_COUNTRY

sagan high other

[OPENSSH] PAM Authentication failure - Brute force [10/1]

[OPENSSH] PAM Authentication failure - Brute force [10/1]

sagan high other

[OPENSSH] SYSLOG Authentication failure - Brute force [5/5]

[OPENSSH] SYSLOG Authentication failure - Brute force [5/5]