Search and filter across all detection sources
27 rules
Courier logout/timeout.
sshd: connection timed out
Serv-U: Session timeout
FTPD: User disconnected due to time out.
proftpd: Remote host disconnected due to inactivity.
Windows: Session reconnected/disconnected to winstation.
proftpd: Remote host disconnected due to time out.
proftpd: Remote host disconnected due to login time out.
pure-ftpd: FTP user logout/timeout
Dropbear: User disconnected.
Dropbear: Client exited before authentication.
Remote access login success
Windows: Remote access login success.
Dropbear: Bad password attempt.
Remote access login failure
Windows: Remote access login failure.
Windows: Logon Failure - Specified account expired.
Windows: Logon Failure - Account logon time restriction violation.
Dropbear: brute force attempt.
Dropbear: User successfully logged in using a password.
Dovecot Session Disconnected.
Dropbear: dropbear brute force attempt.
Dropbear: User successfully logged in using a public key.
Dropbear: Bad password attempt for non existent user.
Multiple remote access login failures