Signature Detail
Short Name |
SMB:ERROR:GRIND |
|---|---|
Severity |
High |
Recommended |
Yes |
Recommended Action |
Drop |
Category |
SMB |
Keywords |
smb grind |
Release Date |
2004/01/27 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: Brute Force Login Attempt
This protocol anomaly detects multiple login/authentication failures between a unique pair of hosts within a short period of time. Vulnerability scanners and programs like enum that perform dictionary based or password-guessing attacks will likely trigger this attack. The number of login failures to trigger this attack can be configured in the Sensor Settings Rulebase of your Security Policy.
Extended Description
This is a protocol anomaly.
References