IMAP.Unknown.Reply

description-logoDescription

This signature indicates detection of a SMTP protocol anomaly of which an unknown response from a server is sent.

affected-products-logoAffected Products

Any host running SMTP services

Impact logoImpact

Protocol Anomaly: This is an anomaly which may also indicate attack attempts in some cases.

recomended-action-logoRecommended Actions

This indicates detection of traffic that does not comply with the protocol standard.
Monitor the traffic from that network for any suspicious activity.

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)