Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: administrator
{
"id": "79c2e43c6f0e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.043572Z",
"end_time": "2026-08-15T02:43:11.500841Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "administrator",
"pass": "Amx1234!"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 7ujMko0admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3d487e8e8c7d",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.040005Z",
"end_time": "2026-08-15T02:43:10.766171Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "7ujMko0admin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / sipwise
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "fa2de99429c4",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:10.036299Z",
"end_time": "2026-08-15T02:43:10.734102Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "sipwise"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apc
{
"id": "078a782b0ea8",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.274586Z",
"end_time": "2026-08-15T02:43:09.804519Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "apc",
"pass": "apc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / openvpnas
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7ec9bde4331e",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.271175Z",
"end_time": "2026-08-15T02:43:09.082314Z",
"duration": "0.8",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "openvpnas"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: device
{
"id": "fd7b89d55d3f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.267756Z",
"end_time": "2026-08-15T02:43:09.735203Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "device",
"pass": "apc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / plex
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "886a4605e365",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.264402Z",
"end_time": "2026-08-15T02:43:08.954006Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "plex"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / fai
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3e8545d07860",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:08.260767Z",
"end_time": "2026-08-15T02:43:08.983954Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "fai"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b4747d2ed792",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.071498Z",
"end_time": "2026-08-15T02:45:00.086064Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: acitoolkit
{
"id": "4148b39630cb",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.067956Z",
"end_time": "2026-08-15T02:43:01.523015Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "acitoolkit",
"pass": "acitoolkit"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / roottoor
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d62fd66a6839",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.064513Z",
"end_time": "2026-08-15T02:43:00.791339Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "roottoor"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / dottie
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1887ccd08fe7",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.060920Z",
"end_time": "2026-08-15T02:43:00.760552Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "dottie"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elk_user
{
"id": "27556c4559dc",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:43:00.057160Z",
"end_time": "2026-08-15T02:43:01.487121Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "elk_user",
"pass": "forensics"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / arcsight
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d63cae7c5af8",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.347821Z",
"end_time": "2026-08-15T02:42:59.301096Z",
"duration": "1.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "arcsight"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / password
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "42bc4841ecba",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.344408Z",
"end_time": "2026-08-15T02:42:59.275997Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "password"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / xoa
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1f13b1ac3ef4",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.340781Z",
"end_time": "2026-08-15T02:42:59.276836Z",
"duration": "0.9",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "xoa"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator
{
"id": "3dd784d27220",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.337106Z",
"end_time": "2026-08-15T02:42:59.762319Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "Administrator",
"pass": "Vision2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hacker
{
"id": "acc701bdd171",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:58.333492Z",
"end_time": "2026-08-15T02:42:59.804025Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "hacker",
"pass": "compass"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "c2d0ef681780",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.126489Z",
"end_time": "2026-08-15T02:44:50.158234Z",
"duration": "120.0",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: misp
{
"id": "25bccff07595",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.123224Z",
"end_time": "2026-08-15T02:42:51.580059Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "misp",
"pass": "Password1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "6a0552a76abc",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.119910Z",
"end_time": "2026-08-15T02:42:51.583637Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "default",
"pass": "default"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftp
{
"id": "2828d3461eb3",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.116529Z",
"end_time": "2026-08-15T02:42:51.540406Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "ftp",
"pass": "video"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: netscreen
{
"id": "dba6e8e7df33",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:50.112842Z",
"end_time": "2026-08-15T02:42:51.562276Z",
"duration": "1.4",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "netscreen",
"pass": "netscreen"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "154c69044618",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.398447Z",
"end_time": "2026-08-15T02:42:49.865683Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "pi",
"pass": "raspberry"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / password
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4512c16d9ab2",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.394880Z",
"end_time": "2026-08-15T02:42:49.143258Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "password"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / calvin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "639670f50411",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.391244Z",
"end_time": "2026-08-15T02:42:49.112522Z",
"duration": "0.7",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "calvin"
},
"commands": [
"echo SSH_TEST_OK"
],
"detailed_commands": [
{
"cmd": "echo SSH_TEST_OK",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: public
{
"id": "4d5278a68ad6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.387586Z",
"end_time": "2026-08-15T02:42:49.854741Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "public",
"pass": "publicpass"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myshake
{
"id": "c7fad14bb9c6",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:48.383798Z",
"end_time": "2026-08-15T02:42:49.838918Z",
"duration": "1.5",
"version": "SSH-2.0-ssh2js1.17.0",
"hassh": "1ecd42383b6cd16084a022b0286d41ce",
"attempts": [
{
"user": "myshake",
"pass": "shakeme"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "3db8b008a46f",
"src_ip": "104.9.169.131",
"start_time": "2026-08-15T02:42:47.890778Z",
"end_time": "2026-08-15T02:42:47.894148Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "c556d061a1db",
"src_ip": "176.53.159.196",
"start_time": "2026-08-15T02:41:40.476329Z",
"end_time": "2026-08-15T02:41:41.924129Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "092d9dce77b1",
"src_ip": "190.105.214.164",
"start_time": "2026-08-15T02:29:56.950878Z",
"end_time": "2026-08-15T02:29:56.954194Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "668b6df3f3b8",
"src_ip": "190.105.214.164",
"start_time": "2026-08-15T02:29:36.560002Z",
"end_time": "2026-08-15T02:29:36.563407Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ea4dd8898bc8",
"src_ip": "38.65.147.203",
"start_time": "2026-08-15T02:29:01.857613Z",
"end_time": "2026-08-15T02:29:01.861143Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1ab180b0d573",
"src_ip": "148.222.129.29",
"start_time": "2026-08-15T02:27:47.940675Z",
"end_time": "2026-08-15T02:27:47.944112Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "aa524aa0edd3",
"src_ip": "148.222.129.29",
"start_time": "2026-08-15T02:27:38.156389Z",
"end_time": "2026-08-15T02:27:38.159794Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0173c1338f16",
"src_ip": "38.65.147.203",
"start_time": "2026-08-15T02:26:57.799676Z",
"end_time": "2026-08-15T02:26:57.802696Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 123456789
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c6e8177a1761",
"src_ip": "45.142.193.164",
"start_time": "2026-08-15T02:20:51.798428Z",
"end_time": "2026-08-15T02:21:37.434814Z",
"duration": "45.6",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123456789"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "cfb6ce152007",
"src_ip": "192.168.0.1",
"start_time": "2026-08-15T02:08:13.485125Z",
"end_time": "2026-08-15T02:08:13.496640Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "698cde5f6186",
"src_ip": "45.160.12.201",
"start_time": "2026-08-15T02:07:04.703864Z",
"end_time": "2026-08-15T02:07:04.707229Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b11922fe3b41",
"src_ip": "45.160.12.201",
"start_time": "2026-08-15T02:06:33.685975Z",
"end_time": "2026-08-15T02:06:33.689642Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: keyona
{
"id": "dd7478b1eb4d",
"src_ip": "2.57.121.112",
"start_time": "2026-08-15T02:02:43.177398Z",
"end_time": "2026-08-15T02:02:49.699149Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "keyona",
"pass": "keyona"
},
{
"user": "keyona",
"pass": "keyona1"
},
{
"user": "keyona",
"pass": "keyona123"
},
{
"user": "keyona",
"pass": "keyona1234"
},
{
"user": "keyona",
"pass": "keyona12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 12345678
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6b647e00bfcc",
"src_ip": "45.142.193.164",
"start_time": "2026-08-15T01:58:14.339482Z",
"end_time": "2026-08-15T01:59:00.870630Z",
"duration": "46.5",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "12345678"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b9525f537724",
"src_ip": "181.199.144.75",
"start_time": "2026-08-15T01:56:00.065695Z",
"end_time": "2026-08-15T01:56:00.069232Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / sargent
{
"id": "e3d85707fa5a",
"src_ip": "2.57.121.25",
"start_time": "2026-08-15T01:54:35.499481Z",
"end_time": "2026-08-15T01:54:41.566541Z",
"duration": "6.1",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "sargent"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "053ed191b3b8",
"src_ip": "195.178.110.137",
"start_time": "2026-08-15T01:53:38.194981Z",
"end_time": "2026-08-15T01:53:39.322543Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "af8a003c6cfb",
"src_ip": "79.80.122.221",
"start_time": "2026-08-15T01:44:24.951774Z",
"end_time": "2026-08-15T01:44:24.955286Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9e9d709f54a7",
"src_ip": "79.80.122.221",
"start_time": "2026-08-15T01:43:48.946272Z",
"end_time": "2026-08-15T01:43:48.949593Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "6ce0a8b807ed",
"src_ip": "64.62.156.66",
"start_time": "2026-08-15T01:42:16.590651Z",
"end_time": "2026-08-15T01:42:16.596738Z",
"duration": "0.0",
"version": "\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x89B\\x99\\xd5[\\xe9\\xc1\\xb7\u007f\u0011\\x97\\xadcI\\x93\\x99\\xa0\\xf1K?\\x8c\u0011\\xd9n\\xe3\\x8dGu\\xa80\\xbf7\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 1234567
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d302d85b6369",
"src_ip": "45.142.193.164",
"start_time": "2026-08-15T01:35:40.817202Z",
"end_time": "2026-08-15T01:36:26.773050Z",
"duration": "46.0",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234567"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "162d7cb11b65",
"src_ip": "195.178.110.137",
"start_time": "2026-08-15T01:35:20.050175Z",
"end_time": "2026-08-15T01:35:20.366399Z",
"duration": "0.3",
"version": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}