SMTP too many errors
advICE :Intrusions : 2001015

Summary

SMTP too many errors are being reported.

Details

This could be a user account attack. A spammer could be looking for valid e-mail accounts. A typical example is by sending e-mail to all possible combinations, and any that aren't rejected are probably legitimate users.

configuration for this item smtp.error.count 10 This intrusion detection is triggered if the number of SMTP errors exceeds this count within the specified time interval. smtp.error.interval 120 The time interval over which SMTP errors are counted.

 
Version appeared: