Back to ffraud
Threat signatureHighServer Attack
ssh_brute_force
IPs performing SSH brute-force attacks: automated password guessing against SSH servers. These target port 22 and attempt thousands of username/password combinations per minute.
Related signatures
Check an IP for this and every other signature.
ffraud returns the exact threat tags on any IP, free, no key needed. Or pull the whole labelled dataset from GitHub.