Sagan low stable other

[PUREFTPD] Authentication failed

[PUREFTPD] Authentication failed

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[PUREFTPD] Authentication failed"; content: "[WARNING] Authentication failed for user"; default_proto: tcp; default_dst_port: $FTP_PORT; classtype:unsuccessful-user; program: pure-ftpd; threshold:type suppress,track by_src,count 5,seconds 14400; parse_src_ip: 1; sid:5005743; rev:7;)

Field Validations

Loading…

Comments (0)

Loading comments...