Signature Detail
Short Name |
FTP:PASSWORD:BRUTE-FORCE |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
FTP |
Keywords |
ftp brute force |
Release Date |
2004/01/26 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
FTP: Brute Force Login Attempt
This protocol anomaly detects multiple login failures within a short period of time between a unique pair of hosts. The number of login failures that triggered this attack can be configured in the Sensor Settings Rulebase of your Security Policy.
Extended Description
Multiple login failures within a short period could indicate that a brute force password guessing attack is taking place or has taken place.
References