---
title: "Discussion on \"Investigating an SSH brute force in my home lab: 357 failed logins, one stolen account\" | Hashnode"
description: "Discussion on \"Investigating an SSH brute force in my home lab: 357 failed logins, one stolen account\". Structured on the NIST SP 800-61 incident response lifecycle. Own lab: the attack was run on purpose against a throwaway account, then investigated from the logs as if it were a real alert.\n\n\n\n\nField"
url: "https://hashnode.com/posts/ssh-brute-force-investigation/6af6bae1c8bfd9a7f1d6e5a1"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Investigating an SSH brute force in my home lab: 357 failed logins, one stolen account](https://braindump.0x8r41nr07.xyz/ssh-brute-force-investigation?utm_source=hashnode&utm_medium=feed)

Structured on the NIST SP 800-61 incident response lifecycle. Own lab: the attack was run on purpose against a throwaway account, then investigated from the logs as if it were a real alert. Field

2h ago · 9 min read · braindump.0x8r41nr07.xyz  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#incident-response](https://hashnode.com/tag/incident-response)
-   [#blueteam](https://hashnode.com/tag/blueteam)

## Written by

[0x8r41nr07](https://hashnode.com/@0x8r41nr07)

@0x8r41nr07

  
[View profile](https://hashnode.com/@0x8r41nr07)

from Hacker to Creative Director and back

30 years in creative leadership (in the ad industry as a Creative Director) taught me one core skill: dissecting complex systems and finding the flaw before someone else does. My tech roots run back to 8-bit machine code on a C64 (yeah – 80s, baby!) Today, I’m combining that legacy hacker curiosity with modern threat detection and offensive security. BATTLE-TESTED LOGIC: Decades of high-pressure problem solving and systems analysis. HACKER MINDSET: I don't just follow playbooks; I reverse-engineer how the attack path actually works. CONTINOUS SKILL-UP: CompTIA Security+ certified (among other certs), building home labs, and constantly training for L1 ops to future Pentesting.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.
