Credential acceptance event recorded. Target authentication: root / uClinux
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "36545d2e402b",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.189187Z",
"end_time": "2026-08-15T02:43:28.979515Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "uClinux"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / 5up
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f7501adf57ef",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.185896Z",
"end_time": "2026-08-15T02:43:28.981149Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "5up"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / openelec
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c7bfc0eb4d05",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.182526Z",
"end_time": "2026-08-15T02:43:28.980341Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "openelec"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / stxadmin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8f2ec655831f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.179173Z",
"end_time": "2026-08-15T02:43:28.978700Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "stxadmin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / ceadmin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3324663d6163",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:28.175755Z",
"end_time": "2026-08-15T02:43:28.943717Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ceadmin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a8230cea07c0",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.970968Z",
"end_time": "2026-08-15T02:45:19.974949Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / pfsense
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "82365c25ac52",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.968768Z",
"end_time": "2026-08-15T02:43:20.707761Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "pfsense"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: amx
{
"id": "04f657cd1346",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.966519Z",
"end_time": "2026-08-15T02:43:21.398071Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "amx",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / NM1$88
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f928e87e1d4d",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.964054Z",
"end_time": "2026-08-15T02:43:20.691923Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "NM1$88"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: demo
{
"id": "6e128b5def57",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:19.958200Z",
"end_time": "2026-08-15T02:43:21.369625Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "demo",
"pass": "fai"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / user
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9abc8e89a014",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.253427Z",
"end_time": "2026-08-15T02:43:19.165951Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "user"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / toor
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7f17463048d2",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.250045Z",
"end_time": "2026-08-15T02:43:19.165145Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "toor"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / ManagementConsole2015
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4033633b8e39",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.246736Z",
"end_time": "2026-08-15T02:43:19.164317Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "ManagementConsole2015"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hunter
{
"id": "73116c0f76fe",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.243469Z",
"end_time": "2026-08-15T02:43:19.715986Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "hunter",
"pass": "hunter"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / dasdec1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "28abc51f8f9f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:18.239785Z",
"end_time": "2026-08-15T02:43:19.129786Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "dasdec1"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "fc3f68326e3f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.050508Z",
"end_time": "2026-08-15T02:45:10.064995Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos
{
"id": "5bcb049f0667",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.046982Z",
"end_time": "2026-08-15T02:43:11.503955Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "centos",
"pass": "reverse"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: administrator
{
"id": "79c2e43c6f0e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.043572Z",
"end_time": "2026-08-15T02:43:11.500841Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "administrator",
"pass": "Amx1234!"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 7ujMko0admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3d487e8e8c7d",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.040005Z",
"end_time": "2026-08-15T02:43:10.766171Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "7ujMko0admin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / sipwise
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "fa2de99429c4",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.036299Z",
"end_time": "2026-08-15T02:43:10.734102Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sipwise"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apc
{
"id": "078a782b0ea8",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.274586Z",
"end_time": "2026-08-15T02:43:09.804519Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "apc",
"pass": "apc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / openvpnas
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7ec9bde4331e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.271175Z",
"end_time": "2026-08-15T02:43:09.082314Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "openvpnas"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: device
{
"id": "fd7b89d55d3f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.267756Z",
"end_time": "2026-08-15T02:43:09.735203Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "device",
"pass": "apc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / plex
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "886a4605e365",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.264402Z",
"end_time": "2026-08-15T02:43:08.954006Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "plex"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / fai
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3e8545d07860",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.260767Z",
"end_time": "2026-08-15T02:43:08.983954Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "fai"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b4747d2ed792",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.071498Z",
"end_time": "2026-08-15T02:45:00.086064Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: acitoolkit
{
"id": "4148b39630cb",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.067956Z",
"end_time": "2026-08-15T02:43:01.523015Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "acitoolkit",
"pass": "acitoolkit"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / roottoor
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d62fd66a6839",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.064513Z",
"end_time": "2026-08-15T02:43:00.791339Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "roottoor"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / dottie
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1887ccd08fe7",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.060920Z",
"end_time": "2026-08-15T02:43:00.760552Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "dottie"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elk_user
{
"id": "27556c4559dc",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.057160Z",
"end_time": "2026-08-15T02:43:01.487121Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "elk_user",
"pass": "forensics"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / arcsight
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d63cae7c5af8",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.347821Z",
"end_time": "2026-08-15T02:42:59.301096Z",
"duration": "1.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "arcsight"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / password
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "42bc4841ecba",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.344408Z",
"end_time": "2026-08-15T02:42:59.275997Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "password"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / xoa
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1f13b1ac3ef4",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.340781Z",
"end_time": "2026-08-15T02:42:59.276836Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "xoa"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator
{
"id": "3dd784d27220",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.337106Z",
"end_time": "2026-08-15T02:42:59.762319Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "Administrator",
"pass": "Vision2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hacker
{
"id": "acc701bdd171",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.333492Z",
"end_time": "2026-08-15T02:42:59.804025Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "hacker",
"pass": "compass"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "c2d0ef681780",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.126489Z",
"end_time": "2026-08-15T02:44:50.158234Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: misp
{
"id": "25bccff07595",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.123224Z",
"end_time": "2026-08-15T02:42:51.580059Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "misp",
"pass": "Password1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "6a0552a76abc",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.119910Z",
"end_time": "2026-08-15T02:42:51.583637Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "default",
"pass": "default"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftp
{
"id": "2828d3461eb3",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.116529Z",
"end_time": "2026-08-15T02:42:51.540406Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "ftp",
"pass": "video"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: netscreen
{
"id": "dba6e8e7df33",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.112842Z",
"end_time": "2026-08-15T02:42:51.562276Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "netscreen",
"pass": "netscreen"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "154c69044618",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.398447Z",
"end_time": "2026-08-15T02:42:49.865683Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "pi",
"pass": "raspberry"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / password
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4512c16d9ab2",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.394880Z",
"end_time": "2026-08-15T02:42:49.143258Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "password"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / calvin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "639670f50411",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.391244Z",
"end_time": "2026-08-15T02:42:49.112522Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "calvin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: public
{
"id": "4d5278a68ad6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.387586Z",
"end_time": "2026-08-15T02:42:49.854741Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "public",
"pass": "publicpass"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myshake
{
"id": "c7fad14bb9c6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.383798Z",
"end_time": "2026-08-15T02:42:49.838918Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "myshake",
"pass": "shakeme"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "3db8b008a46f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:47.890778Z",
"end_time": "2026-08-15T02:42:47.894148Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "c556d061a1db",
"src_ip": "176.53.159.196",
"start_time": "2026-08-15T02:41:40.476329Z",
"end_time": "2026-08-15T02:41:41.924129Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "092d9dce77b1",
"src_ip": "190.105.214.164",
"start_time": "2026-08-15T02:29:56.950878Z",
"end_time": "2026-08-15T02:29:56.954194Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "668b6df3f3b8",
"src_ip": "190.105.214.164",
"start_time": "2026-08-15T02:29:36.560002Z",
"end_time": "2026-08-15T02:29:36.563407Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ea4dd8898bc8",
"src_ip": "38.65.147.203",
"start_time": "2026-08-15T02:29:01.857613Z",
"end_time": "2026-08-15T02:29:01.861143Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}