{"verdict":"True Positive","executive_summary":"There were 150 failed login attempts (attempt count: 150) from one IP address (192.0.2.45) to SSH port (22) under the admin account.\nSuch a number of unsuccessful attempts in a short time is a characteristic feature of an automated Brute Force attack (password brute force).\nThe attacker's goal was to gain unauthorized access to the internal system. The \"Brute Force Detection Policy\" protection rule has been activated.","artifacts":"192.0.2.45, port 22, admin","analysis_answers":{"action_taken":"There were 150 failed login attempts (attempt count: 150) from one IP address (192.0.2.45) to SSH port (22) under the admin account.\nSuch a number of unsuccessful attempts in a short time is a characteristic feature of an automated Brute Force attack (password brute force).\nThe attacker's goal was to gain unauthorized access to the internal system. The \"Brute Force Detection Policy\" protection rule has been activated.","conclusion":""},"submitted_at":"2026-03-12T12:51:07.762Z"}