Signature Detail
Short Name |
SCAN:CYBERCOP:SMTP-EXPN |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
SCAN |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SCAN: Cybercop SMTP expn
This signature detects attempts to scan the system using CyberCop Scanner. Attackers can be attempting to use the command "expn" to access additional user information from the SMTP port (EXPN identifies the delivery addresses of mail aliases and mailing lists).
Extended Description
Scanning tools are often used by hackers to determine which networks they may be able to break into.
References