Intrusion PreventionHTTP.Authentication.Brute.Force
Description
This indicates a detection of at least 200 HTTP authentications in 10 seconds which indicate a possible HTTP authentication brute force attack.
Affected Products
Any web server requiring authentication to access
Impact
Impact of a successful attack could vary, with the worse case being a system compromise.
Recommended Actions
Adjust the threshold to your network.
Monitor the traffic from that network for any suspicious activity.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 20949 |
| Created | May 14, 2010 |
| Updated | Apr 23, 2014 |
| Risk |
|
| Default Action | pass |
| Active | |
| Affected OS | All |
| Affected App | Other |