External Attacker & port 22
{"Image DocumentName": "External Attacker & port 22", "Image ImageDescription": "Is there more port 22 traffic relating to the attacker? Use nfdump to filter. Notice the series of connection attempts. Byte size Roughly every six seconds. What does it mean? Port 22 = ssh. Common target for brute-force. Process is commonly automated. Regular intervals. Same small amount of data. Notice the byte change at :00: followed by a quick connection. At :01: a flow was created: (attacker) \u2013 (target).", "Image XResolution": "37", "Image YResolution": "37", "Image ResolutionUnit": "Pixels/Centimeter", "Image Software": "SlidePlayer", "Image YCbCrPositioning": "Centered"}