Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "28b87a959601",
"src_ip": "129.104.5.4",
"start_time": "2026-08-04T01:03:53.290127Z",
"end_time": "2026-08-04T01:03:55.093615Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "Nonproductions2024#"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "845f043a276c",
"src_ip": "129.104.5.4",
"start_time": "2026-08-04T01:03:52.974089Z",
"end_time": "2026-08-04T01:03:53.139605Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / nonproductions123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8e7cc2a9bbca",
"src_ip": "14.225.207.233",
"start_time": "2026-08-04T01:03:35.202065Z",
"end_time": "2026-08-04T01:03:36.896179Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nonproductions123"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ebc0509e6ea5",
"src_ip": "14.225.207.233",
"start_time": "2026-08-04T01:03:34.799116Z",
"end_time": "2026-08-04T01:03:35.006196Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Nonproductions123@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "fb5ea34fc235",
"src_ip": "142.171.227.7",
"start_time": "2026-08-04T01:03:25.243958Z",
"end_time": "2026-08-04T01:03:25.464119Z",
"duration": "0.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Nonproductions123@"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "bf7357232d6c",
"src_ip": "142.171.227.7",
"start_time": "2026-08-04T01:03:25.206583Z",
"end_time": "2026-08-04T01:03:25.227051Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "961be715fcd4",
"src_ip": "77.90.185.42",
"start_time": "2026-08-04T01:02:11.156829Z",
"end_time": "2026-08-04T01:02:13.000194Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "nonproductions"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "671b387025eb",
"src_ip": "77.90.185.42",
"start_time": "2026-08-04T01:02:10.825636Z",
"end_time": "2026-08-04T01:02:10.993036Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "a13440decbb4",
"src_ip": "130.12.180.51",
"start_time": "2026-08-04T01:01:25.002565Z",
"end_time": "2026-08-04T01:01:26.646649Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "5f904648ee8964bef0e8834012e26003",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "839f8cfa5157",
"src_ip": "118.216.88.229",
"start_time": "2026-08-04T01:01:22.806085Z",
"end_time": "2026-08-04T01:01:24.588685Z",
"duration": "1.8",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / nonproductions123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "85824376fefd",
"src_ip": "138.197.159.9",
"start_time": "2026-08-04T00:58:50.655704Z",
"end_time": "2026-08-04T00:58:51.384555Z",
"duration": "0.7",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "nonproductions123"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "91c37901a1ca",
"src_ip": "138.197.159.9",
"start_time": "2026-08-04T00:58:50.501417Z",
"end_time": "2026-08-04T00:58:50.578516Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f040acf85ca7",
"src_ip": "195.178.110.137",
"start_time": "2026-08-04T00:58:47.576668Z",
"end_time": "2026-08-04T00:58:47.862231Z",
"duration": "0.3",
"version": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Admin2026
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c738a20f8d6a",
"src_ip": "89.179.33.44",
"start_time": "2026-08-04T00:57:28.348963Z",
"end_time": "2026-08-04T00:57:29.813535Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Admin2026"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1573f1cea2bd",
"src_ip": "89.179.33.44",
"start_time": "2026-08-04T00:57:26.941574Z",
"end_time": "2026-08-04T00:57:27.142721Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "90ff1c6fa602",
"src_ip": "205.210.31.108",
"start_time": "2026-08-04T00:57:03.386102Z",
"end_time": "2026-08-04T00:57:03.545559Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "e8b9c40072a6",
"src_ip": "158.69.203.17",
"start_time": "2026-08-04T00:56:45.106066Z",
"end_time": "2026-08-04T00:56:46.510034Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "nonproductions2024."
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "6c3064f0fb20",
"src_ip": "158.69.203.17",
"start_time": "2026-08-04T00:56:44.951522Z",
"end_time": "2026-08-04T00:56:45.030107Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / Nonproductions2025
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "268f3a900df5",
"src_ip": "167.233.168.251",
"start_time": "2026-08-04T00:56:16.912889Z",
"end_time": "2026-08-04T00:56:18.081988Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "Nonproductions2025"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "674214e616a0",
"src_ip": "167.233.168.251",
"start_time": "2026-08-04T00:56:16.603101Z",
"end_time": "2026-08-04T00:56:16.758782Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: test / nonproductions123!
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "08c5eeda45e2",
"src_ip": "51.178.53.190",
"start_time": "2026-08-04T00:55:28.384647Z",
"end_time": "2026-08-04T00:55:29.569046Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "nonproductions123!"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e0de6fdc7d01",
"src_ip": "51.178.53.190",
"start_time": "2026-08-04T00:55:28.067120Z",
"end_time": "2026-08-04T00:55:28.229116Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: backup
{
"id": "062d1e263311",
"src_ip": "101.99.37.80",
"start_time": "2026-08-04T00:50:11.811790Z",
"end_time": "2026-08-04T00:50:13.871194Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "backup",
"pass": "Nonproductions@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "da24f688f35d",
"src_ip": "101.99.37.80",
"start_time": "2026-08-04T00:50:11.406332Z",
"end_time": "2026-08-04T00:50:11.610472Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Nonproductions#1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2b0661bfa221",
"src_ip": "2.26.252.159",
"start_time": "2026-08-04T00:50:07.131849Z",
"end_time": "2026-08-04T00:50:08.307646Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Nonproductions#1"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "12404de84940",
"src_ip": "2.26.252.159",
"start_time": "2026-08-04T00:50:06.821000Z",
"end_time": "2026-08-04T00:50:06.977919Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / nonproductions
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ac1532ad1933",
"src_ip": "185.31.65.28",
"start_time": "2026-08-04T00:49:36.863257Z",
"end_time": "2026-08-04T00:49:38.095371Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "nonproductions"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "171e710eaa38",
"src_ip": "185.31.65.28",
"start_time": "2026-08-04T00:49:36.527463Z",
"end_time": "2026-08-04T00:49:36.693722Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "7e2588d71980",
"src_ip": "129.104.5.4",
"start_time": "2026-08-04T00:49:23.227736Z",
"end_time": "2026-08-04T00:49:25.042534Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "Nonproductions@2025"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "65ec815c09f7",
"src_ip": "129.104.5.4",
"start_time": "2026-08-04T00:49:22.908386Z",
"end_time": "2026-08-04T00:49:23.069530Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / NONPRODUCTIONS@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6b04c3f3dec2",
"src_ip": "172.94.9.43",
"start_time": "2026-08-04T00:49:19.688913Z",
"end_time": "2026-08-04T00:49:21.859311Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "NONPRODUCTIONS@123"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f67e5ce49850",
"src_ip": "172.94.9.43",
"start_time": "2026-08-04T00:49:19.361749Z",
"end_time": "2026-08-04T00:49:19.535964Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "2a766dfe4755",
"src_ip": "77.90.185.42",
"start_time": "2026-08-04T00:47:52.655346Z",
"end_time": "2026-08-04T00:47:54.503845Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "debian",
"pass": "Nonproductions123#"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e6aca5071ac7",
"src_ip": "77.90.185.42",
"start_time": "2026-08-04T00:47:52.322885Z",
"end_time": "2026-08-04T00:47:52.491659Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / nonproductions@2024
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1f7391207662",
"src_ip": "192.253.248.65",
"start_time": "2026-08-04T00:45:38.660184Z",
"end_time": "2026-08-04T00:45:40.362675Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nonproductions@2024"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "6d05827aa76d",
"src_ip": "192.253.248.65",
"start_time": "2026-08-04T00:45:38.331416Z",
"end_time": "2026-08-04T00:45:38.498502Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / Nonproductions#2026
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e0df940b19d3",
"src_ip": "103.185.52.113",
"start_time": "2026-08-04T00:45:34.498315Z",
"end_time": "2026-08-04T00:45:37.222920Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "Nonproductions#2026"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "dbb74341e310",
"src_ip": "103.185.52.113",
"start_time": "2026-08-04T00:45:33.745087Z",
"end_time": "2026-08-04T00:45:34.301690Z",
"duration": "0.6",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / nonproductions2023#
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "403286206bab",
"src_ip": "51.38.115.161",
"start_time": "2026-08-04T00:45:26.248596Z",
"end_time": "2026-08-04T00:45:27.590993Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nonproductions2023#"
},
"commands": [
"uname -a"
],
"detailed_commands": [
{
"cmd": "uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e13047274905",
"src_ip": "51.38.115.161",
"start_time": "2026-08-04T00:45:25.930809Z",
"end_time": "2026-08-04T00:45:26.091492Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "7edcd4369e7e",
"src_ip": "138.197.159.9",
"start_time": "2026-08-04T00:42:39.474590Z",
"end_time": "2026-08-04T00:42:40.906344Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "467e470565bc",
"src_ip": "138.197.159.9",
"start_time": "2026-08-04T00:42:39.297907Z",
"end_time": "2026-08-04T00:42:39.392608Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a77161506806",
"src_ip": "91.92.40.31",
"start_time": "2026-08-04T00:31:29.548310Z",
"end_time": "2026-08-04T00:31:29.698720Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "8331da24eca2",
"src_ip": "77.90.185.203",
"start_time": "2026-08-04T00:30:12.816492Z",
"end_time": "2026-08-04T00:30:14.666310Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "nonproductions"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "daa26e9957e5",
"src_ip": "77.90.185.203",
"start_time": "2026-08-04T00:30:12.483393Z",
"end_time": "2026-08-04T00:30:12.651806Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / riviera
{
"id": "97b33afdf0a0",
"src_ip": "2.57.121.25",
"start_time": "2026-08-04T00:23:40.147880Z",
"end_time": "2026-08-04T00:23:46.308010Z",
"duration": "6.2",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "riviera"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: tanner
{
"id": "0bf9436aa659",
"src_ip": "2.57.121.112",
"start_time": "2026-08-04T00:19:10.095094Z",
"end_time": "2026-08-04T00:19:16.659436Z",
"duration": "6.6",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "tanner",
"pass": "tanner"
},
{
"user": "tanner",
"pass": "tanner1"
},
{
"user": "tanner",
"pass": "tanner123"
},
{
"user": "tanner",
"pass": "tanner1234"
},
{
"user": "tanner",
"pass": "tanner12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "aa3977140bea",
"src_ip": "199.45.154.74",
"start_time": "2026-08-04T00:02:58.751703Z",
"end_time": "2026-08-04T00:03:13.751788Z",
"duration": "15.0",
"version": "SSH-2.0-Go",
"hassh": "873a5fb5fedc2d4f8638ebde4abc6cfc",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / __hp_probe_pass_xyzzy_definitely_not_real__
{
"id": "478cc2655a11",
"src_ip": "185.212.171.150",
"start_time": "2026-08-03T23:57:59.969050Z",
"end_time": "2026-08-03T23:58:00.966819Z",
"duration": "1.0",
"version": "SSH-2.0-paramiko_3.5.1",
"hassh": "a2de0f306611e0957be704f5b0e35a82",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "__hp_probe_pass_xyzzy_definitely_not_real__"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "721fc6acb378",
"src_ip": "185.212.171.150",
"start_time": "2026-08-03T23:57:58.940498Z",
"end_time": "2026-08-03T23:57:59.931138Z",
"duration": "1.0",
"version": "SSH-2.0-paramiko_3.5.1",
"hassh": "a2de0f306611e0957be704f5b0e35a82",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}