SSH Brute Force Login Attempts - 5+ Failures in 60 Seconds
Detects multiple failed SSH authentication attempts against a server from a single source within a short timeframe, which is indicative of a brute force password attack.
Suricata

Detects multiple failed SSH authentication attempts against a server from a single source within a short timeframe, which is indicative of a brute force password attack.

Already have an account?