ssh: improve bruteforce detection and add time-based-bf scenario#1566

Open

LaurenceJJones wants to merge 11 commits intocrowdsecurity:masterfrom

LaurenceJJones:ssh-slow-bf-improvement

Commits on Nov 4, 2025

ssh: improve bruteforce detection and add slowest-bf scenario
LaurenceJJones
committed
tests: add ssh-slowest-bf test and update ssh-bf/ssh-slow-bf for capacity changes
LaurenceJJones
committed
refactor: rename ssh-slowest-bf to ssh-time-based-bf for clarity
LaurenceJJones
committed
refactor: optimize time-based detection intervals
LaurenceJJones
committed
tests: update dependent tests for ssh-bf capacity change
LaurenceJJones
committed
feat: add false positive reduction to ssh-time-based-bf
LaurenceJJones
committed
feat: provide both standard and user-enum variants for ssh-time-based-bf
LaurenceJJones
committed
fix: add service filter to prevent cross-service auth_success pollution
LaurenceJJones
committed

Commits on Jan 13, 2026