TimeSeriesSSHData

SSH-related data

SecurityThreat IntelligenceCybersecurityIP ReputationVulnerability ManagementNetwork TelemetrySOC AutomationPublic APIs

Properties

Name	Type	Description
key	array	This is the SSH key used.
ja4ssh	array	List of JA4SSH fingerprints observed in network traffic from the IP. JA4SSH captures SSH traffic patterns including packet lengths and directions, useful for identifying SSH client behavior and detect

View JSON Schema on GitHub

JSON Schema

{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://api-evangelist.github.io/greynoise/json-schema/greynoise-time-series-ssh-data-schema.json",
  "title": "TimeSeriesSSHData",
  "type": "object",
  "description": "SSH-related data",
  "properties": {
    "key": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "This is the SSH key used.\n",
      "example": [
        "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC1234567890"
      ]
    },
    "ja4ssh": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of JA4SSH fingerprints observed in network traffic from the IP.\nJA4SSH captures SSH traffic patterns including packet lengths and\ndirections, useful for identifying SSH client behavior and detecting\nanomalous sessions.\n",
      "example": [
        "c76s76_c71s59_c0s0"
      ]
    }
  }
}