Analyzing the Attack Pattern of Brute Force Attack on SSH Port

Cyberattacks are one of the threats in the world of technology. Various kinds of cyberattacks can be a threat to information security. One example of a cyberattack is a brute force attack. The attacker breaks into the system by using various login usernames and passwords. It is necessary to analyze cyberattacks using honeypot to prevent and improve information security from existing cyberattacks. This research aims to analyze the Brute Force Attack Pattern on SSH Port by utilizing a honeypot. This research collected attacks on the SSH port captured by the honeypot server. Visualization logs were created from the honeypot logs to observe the patterns of attacks that targeted the SSH port. We utilized visualization tools like Tableau and Metabase to analyze the attack patterns. The research uses action research methodology to analyze how to prevent attacks. The research results revealed the most exploited usernames and passwords by hackers, analyzed the IP and identified the command patterns that hackers most exploited. We provided recommendations to mitigate the attacks based on these attack patterns.