SSH Brute Force Authentication Attack Detection on Port 22
Detects multiple SSH authentication attempts from a single source IP address within a short timeframe, which is indicative of a brute force or password guessing attack against SSH services.
Suricata

