This signature indicates an invalid FTP login. Typically, this event is not an attack. A user might be mistyping their password, or may have forgotten it. This event also could be interpreted as an attacker trying to guess a username/password combination if such an event is seen frequently. A brute force style dictionary technique is an example of such password guessing activity that would repeatedly trigger this event. |