I would like to make it impossible to make more than a single remote log-in attempt in a number of seconds regardless the client IP address (except some trusted white-listed addresses perhaps). So that if, for example, an SSH user enters a bad password no other remote client can log in until the interval passes.The purpose is to protect the system from distributed (botnet) brute force password attacks.Is this possible?PS: I know I can just use certificates and disable password-only log-in but I am still curious.
How to set up a global interval between SSH log in attempts?
ssh;security