SSH Brute-Force Login Attempt - 10+ Connections in 60s

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•3

Detects multiple TCP connection attempts to port 22 (SSH) from the same source within a 60-second window, which is indicative of a brute-force or password guessing attack against SSH services.