SSH Brute-Force Credential Stuffing - 10+ Attempts in 60s

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•2

Detects repeated SSH connection attempts to a server over a short duration (10+ attempts in 60 seconds), which is characteristic of credential stuffing or brute-force password guessing attacks against the SSH service.