Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: osbash
{
"id": "0929233d4d63",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:44:07.218971Z",
"end_time": "2026-08-15T02:44:08.685969Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "osbash",
"pass": "osbash"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "3cab75ef4399",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:59.020553Z",
"end_time": "2026-08-15T02:45:59.034607Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / cxlinux
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3368c87c3c9f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:59.016852Z",
"end_time": "2026-08-15T02:43:59.756911Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "cxlinux"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sconsole
{
"id": "5c2bbd5309c6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:59.013393Z",
"end_time": "2026-08-15T02:44:00.464324Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "sconsole",
"pass": "12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / symbol
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "05edc0bb6b13",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:59.009868Z",
"end_time": "2026-08-15T02:43:59.756088Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "symbol"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / Zte521
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4b9498286a9e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:59.005994Z",
"end_time": "2026-08-15T02:43:59.722926Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Zte521"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: enisa
{
"id": "fa5c2f7e8e58",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:57.299301Z",
"end_time": "2026-08-15T02:43:58.774522Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "enisa",
"pass": "enisa"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / nosoup4u
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "efc9754456f9",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:57.295865Z",
"end_time": "2026-08-15T02:43:58.219078Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nosoup4u"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / osboxes.org
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f0ed1088946b",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:57.292508Z",
"end_time": "2026-08-15T02:43:58.250579Z",
"duration": "1.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "osboxes.org"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openhabian
{
"id": "7f474ac0410b",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:57.289116Z",
"end_time": "2026-08-15T02:43:58.758341Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "openhabian",
"pass": "openhabian"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: m202
{
"id": "6bddf82d1ef2",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:57.285151Z",
"end_time": "2026-08-15T02:43:58.714756Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "m202",
"pass": "m202"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9b079449f8fa",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:49.087090Z",
"end_time": "2026-08-15T02:45:49.100794Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: stackato
{
"id": "96b389e233a9",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:49.083454Z",
"end_time": "2026-08-15T02:43:50.538581Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "stackato",
"pass": "stackato"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cloudera
{
"id": "826d2a6075dd",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:49.079943Z",
"end_time": "2026-08-15T02:43:50.534818Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "cloudera",
"pass": "cloudera"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / indigo
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a6538adae3d8",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:49.076451Z",
"end_time": "2026-08-15T02:43:49.797733Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "indigo"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "5b1fc50a3e9c",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:49.072782Z",
"end_time": "2026-08-15T02:43:50.497047Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "debian",
"pass": "debian"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: NetLinx
{
"id": "25868d6254d1",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:47.356960Z",
"end_time": "2026-08-15T02:43:48.823650Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "NetLinx",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / unitrends1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a7baf0d7d23e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:47.353873Z",
"end_time": "2026-08-15T02:43:48.110214Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "unitrends1"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / libreelec
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "89c9ffb8aff1",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:47.350812Z",
"end_time": "2026-08-15T02:43:48.111115Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "libreelec"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cirros
{
"id": "e3f293797fef",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:47.347703Z",
"end_time": "2026-08-15T02:43:48.840880Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "cirros",
"pass": "cubswin:)"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / vagrant
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0abe06982e2a",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:47.344218Z",
"end_time": "2026-08-15T02:43:48.077501Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "vagrant"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "578d2b14001b",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:39.145896Z",
"end_time": "2026-08-15T02:45:39.153969Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / freenas
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d71635892052",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:39.142295Z",
"end_time": "2026-08-15T02:43:39.933075Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "freenas"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / sixaola
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6d7961dae448",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:39.138939Z",
"end_time": "2026-08-15T02:43:39.932130Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sixaola"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / default
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "de154db73517",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:39.135640Z",
"end_time": "2026-08-15T02:43:39.899297Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "default"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "b9dd2cd0c5bd",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:39.132012Z",
"end_time": "2026-08-15T02:43:40.558607Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "ubnt",
"pass": "ubnt"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / timeserver
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "bf7289bc61ed",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:37.445857Z",
"end_time": "2026-08-15T02:43:38.171665Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "timeserver"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sans
{
"id": "c32909ad99e6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:37.444512Z",
"end_time": "2026-08-15T02:43:38.889063Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "sans",
"pass": "training"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / debian
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8960cfd47021",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:37.443151Z",
"end_time": "2026-08-15T02:43:38.138705Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "debian"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / wazuh
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "844bb5a52ee1",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:37.441776Z",
"end_time": "2026-08-15T02:43:38.172621Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "wazuh"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nao
{
"id": "7d5448a20432",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:37.440207Z",
"end_time": "2026-08-15T02:43:38.875248Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "nao",
"pass": "nao"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 1234567890
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8e86d78cb321",
"src_ip": "45.142.193.164",
"start_time": "2026-08-15T02:43:35.712664Z",
"end_time": "2026-08-15T02:44:22.698945Z",
"duration": "47.0",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234567890"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8777d3673848",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:29.223290Z",
"end_time": "2026-08-15T02:45:29.235015Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / reverse
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "69bfd20fb4d0",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:29.222161Z",
"end_time": "2026-08-15T02:43:30.119523Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "reverse"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / linux
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2d2ddb0fc2d0",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:29.221025Z",
"end_time": "2026-08-15T02:43:30.118692Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "linux"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / leostream
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "babd885631be",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:29.219798Z",
"end_time": "2026-08-15T02:43:30.117838Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "leostream"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / D13HH[
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "46d4089acc96",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:29.218580Z",
"end_time": "2026-08-15T02:43:30.083801Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "D13HH["
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / uClinux
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "36545d2e402b",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.189187Z",
"end_time": "2026-08-15T02:43:28.979515Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "uClinux"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / 5up
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f7501adf57ef",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.185896Z",
"end_time": "2026-08-15T02:43:28.981149Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "5up"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / openelec
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c7bfc0eb4d05",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.182526Z",
"end_time": "2026-08-15T02:43:28.980341Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "openelec"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / stxadmin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8f2ec655831f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.179173Z",
"end_time": "2026-08-15T02:43:28.978700Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "stxadmin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / ceadmin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3324663d6163",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.175755Z",
"end_time": "2026-08-15T02:43:28.943717Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ceadmin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a8230cea07c0",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.970968Z",
"end_time": "2026-08-15T02:45:19.974949Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / pfsense
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "82365c25ac52",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.968768Z",
"end_time": "2026-08-15T02:43:20.707761Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "pfsense"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: amx
{
"id": "04f657cd1346",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.966519Z",
"end_time": "2026-08-15T02:43:21.398071Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "amx",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / NM1$88
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f928e87e1d4d",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.964054Z",
"end_time": "2026-08-15T02:43:20.691923Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "NM1$88"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: demo
{
"id": "6e128b5def57",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.958200Z",
"end_time": "2026-08-15T02:43:21.369625Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "demo",
"pass": "fai"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / user
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9abc8e89a014",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.253427Z",
"end_time": "2026-08-15T02:43:19.165951Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "user"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / toor
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7f17463048d2",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.250045Z",
"end_time": "2026-08-15T02:43:19.165145Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "toor"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / ManagementConsole2015
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4033633b8e39",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.246736Z",
"end_time": "2026-08-15T02:43:19.164317Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "ManagementConsole2015"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}