Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jack
{
"id": "2f9bce09f075",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:41:09.472735Z",
"end_time": "2026-08-19T23:41:11.266656Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "jack",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / linux
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e7b0fddd0ee7",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:41:04.131794Z",
"end_time": "2026-08-19T23:41:05.535230Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "linux"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / q1w2e3r4
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "558e8ee35869",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:58.374836Z",
"end_time": "2026-08-19T23:40:59.688924Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "q1w2e3r4"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fivem
{
"id": "a6e69994500a",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:53.128579Z",
"end_time": "2026-08-19T23:40:55.079710Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fivem",
"pass": "fivem"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: labuser
{
"id": "1e587ab11668",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:47.368330Z",
"end_time": "2026-08-19T23:40:49.327087Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "labuser",
"pass": "labuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Pass1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c7fd5fbe303a",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:42.050687Z",
"end_time": "2026-08-19T23:40:43.399530Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Pass1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "5e2c6ea51735",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:36.758413Z",
"end_time": "2026-08-19T23:40:38.609569Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser
{
"id": "5077cfc6e271",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:31.099335Z",
"end_time": "2026-08-19T23:40:33.332635Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "testuser",
"pass": "test"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2c997a41b89a",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:25.575251Z",
"end_time": "2026-08-19T23:40:26.970495Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 111111
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b2333388a56a",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:19.643684Z",
"end_time": "2026-08-19T23:40:21.000141Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "111111"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vncuser
{
"id": "1824fa7dc5b9",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:14.597054Z",
"end_time": "2026-08-19T23:40:16.623938Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "vncuser",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / rootroot
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7fe9de40c158",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:09.436645Z",
"end_time": "2026-08-19T23:40:11.060023Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "rootroot"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "8766a239fb7c",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:40:03.750237Z",
"end_time": "2026-08-19T23:40:05.689759Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "1234567890"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 111
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "32533f5f9a0f",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:39:58.302593Z",
"end_time": "2026-08-19T23:39:59.707619Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "111"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / qwe123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "69fc469e64df",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:39:52.352295Z",
"end_time": "2026-08-19T23:39:53.952496Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwe123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rocky
{
"id": "3635148cb70d",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:39:46.432256Z",
"end_time": "2026-08-19T23:39:48.567688Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rocky",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2b5e70b9ec8a",
"src_ip": "191.7.113.212",
"start_time": "2026-08-19T23:39:16.744887Z",
"end_time": "2026-08-19T23:39:16.747905Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "244e4919b180",
"src_ip": "77.239.124.248",
"start_time": "2026-08-19T23:39:12.455084Z",
"end_time": "2026-08-19T23:39:20.454206Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "084386fa7ae5039bcf6f07298a05a227",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 00000
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0388e66ad0e1",
"src_ip": "49.248.197.50",
"start_time": "2026-08-19T23:36:44.592219Z",
"end_time": "2026-08-19T23:36:48.231818Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "00000"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "03d98b8b8081",
"src_ip": "202.125.67.89",
"start_time": "2026-08-19T23:31:25.308220Z",
"end_time": "2026-08-19T23:31:25.311664Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "168df168cada",
"src_ip": "202.125.67.89",
"start_time": "2026-08-19T23:30:58.677954Z",
"end_time": "2026-08-19T23:30:58.681331Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Root@123
{
"id": "4e835e4d2cbc",
"src_ip": "217.60.255.130",
"start_time": "2026-08-19T23:30:51.097334Z",
"end_time": "2026-08-19T23:30:53.153189Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Root@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: service
{
"id": "ac6867a21745",
"src_ip": "193.46.255.86",
"start_time": "2026-08-19T23:20:08.741868Z",
"end_time": "2026-08-19T23:20:12.930101Z",
"duration": "4.2",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "service",
"pass": "service"
},
{
"user": "service",
"pass": "abcd1234"
},
{
"user": "service",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1868e9f5de63",
"src_ip": "41.193.88.131",
"start_time": "2026-08-19T23:20:01.299507Z",
"end_time": "2026-08-19T23:20:01.302987Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f05588997dd6",
"src_ip": "41.193.88.131",
"start_time": "2026-08-19T23:19:42.905748Z",
"end_time": "2026-08-19T23:19:42.909152Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 0000
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "db84ec6d059b",
"src_ip": "116.74.164.106",
"start_time": "2026-08-19T23:17:19.801677Z",
"end_time": "2026-08-19T23:17:21.726288Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "0000"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: admin
{
"id": "5e3d091d0252",
"src_ip": "139.19.117.130",
"start_time": "2026-08-19T23:17:03.268284Z",
"end_time": "2026-08-19T23:17:13.267498Z",
"duration": "10.0",
"version": "SSH-2.0-Go",
"hassh": "f1e5e9d24e5e345e8745613bde22d532",
"attempts": [
{
"user": "admin",
"pass": null
},
{
"user": "admin",
"pass": null
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / kisan
{
"id": "eb1d6978389d",
"src_ip": "23.175.50.52",
"start_time": "2026-08-19T23:12:38.053737Z",
"end_time": "2026-08-19T23:13:00.513579Z",
"duration": "22.5",
"version": "SSH-2.0-PuTTY_Release_0.70",
"hassh": "0425c279610910d2d9aef3b285e59b86",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "kisan"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f0a630eaa739",
"src_ip": "74.244.5.235",
"start_time": "2026-08-19T23:11:12.589133Z",
"end_time": "2026-08-19T23:11:12.593270Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "5a0a519a11e6",
"src_ip": "78.174.112.52",
"start_time": "2026-08-19T23:06:12.211973Z",
"end_time": "2026-08-19T23:06:12.215429Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Root123
{
"id": "0df8a3b9fb35",
"src_ip": "217.60.255.130",
"start_time": "2026-08-19T23:05:50.881311Z",
"end_time": "2026-08-19T23:05:53.073813Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Root123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / kisan
{
"id": "7ed4cac8e850",
"src_ip": "23.175.50.52",
"start_time": "2026-08-19T22:50:15.938470Z",
"end_time": "2026-08-19T22:50:17.269690Z",
"duration": "1.3",
"version": "SSH-2.0-PuTTY_Release_0.70",
"hassh": "0425c279610910d2d9aef3b285e59b86",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "kisan"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 00
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4662eb6b0f71",
"src_ip": "116.74.164.106",
"start_time": "2026-08-19T22:43:57.035203Z",
"end_time": "2026-08-19T22:43:58.881828Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "00"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f81b55b80a0f",
"src_ip": "93.170.162.51",
"start_time": "2026-08-19T22:43:55.440895Z",
"end_time": "2026-08-19T22:43:55.444254Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: sylvester
{
"id": "fc0a339094ea",
"src_ip": "2.57.121.112",
"start_time": "2026-08-19T22:43:19.655724Z",
"end_time": "2026-08-19T22:43:26.175768Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "sylvester",
"pass": "sylvester"
},
{
"user": "sylvester",
"pass": "sylvester1"
},
{
"user": "sylvester",
"pass": "sylvester123"
},
{
"user": "sylvester",
"pass": "sylvester1234"
},
{
"user": "sylvester",
"pass": "sylvester12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Root
{
"id": "c0de5adc1f27",
"src_ip": "217.60.255.130",
"start_time": "2026-08-19T22:39:38.815198Z",
"end_time": "2026-08-19T22:39:40.927571Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Root "
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "0966a74d1616",
"src_ip": "176.53.159.196",
"start_time": "2026-08-19T22:34:08.694844Z",
"end_time": "2026-08-19T22:34:09.863606Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "7f31d4ab0241",
"src_ip": "190.139.113.59",
"start_time": "2026-08-19T22:23:47.250530Z",
"end_time": "2026-08-19T22:23:47.253886Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0b814a5fc32b",
"src_ip": "190.139.113.59",
"start_time": "2026-08-19T22:22:13.551211Z",
"end_time": "2026-08-19T22:22:13.554527Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f8671ee542d7",
"src_ip": "179.37.50.20",
"start_time": "2026-08-19T22:18:20.892276Z",
"end_time": "2026-08-19T22:18:20.895558Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "3235d03f08b0",
"src_ip": "179.37.50.20",
"start_time": "2026-08-19T22:17:28.943002Z",
"end_time": "2026-08-19T22:17:28.946068Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: admin
{
"id": "66682c64495d",
"src_ip": "139.19.117.130",
"start_time": "2026-08-19T22:17:03.578192Z",
"end_time": "2026-08-19T22:17:13.577514Z",
"duration": "10.0",
"version": "SSH-2.0-Go",
"hassh": "f1e5e9d24e5e345e8745613bde22d532",
"attempts": [
{
"user": "admin",
"pass": null
},
{
"user": "admin",
"pass": null
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "af290efe8a89",
"src_ip": "192.168.0.1",
"start_time": "2026-08-19T22:14:55.843310Z",
"end_time": "2026-08-19T22:14:55.854468Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / root123
{
"id": "aea8cbad16af",
"src_ip": "217.60.255.130",
"start_time": "2026-08-19T22:12:42.606457Z",
"end_time": "2026-08-19T22:12:45.848425Z",
"duration": "3.2",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "dde56ed91ff6",
"src_ip": "147.185.132.76",
"start_time": "2026-08-19T22:09:53.173028Z",
"end_time": "2026-08-19T22:09:56.262137Z",
"duration": "3.1",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / ubuntu
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d3f4dbedbbcc",
"src_ip": "43.153.114.203",
"start_time": "2026-08-19T22:06:28.122116Z",
"end_time": "2026-08-19T22:06:51.533881Z",
"duration": "23.4",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ubuntu"
},
"commands": [
"chmod +x ./.6335344173072655702/sshd;nohup ./.6335344173072655702/sshd 191.252.210.242 77.239.125.227 27.0.135.12 45.118.144.36 218.98.97.7 154.211.13.102 188.248.254.9 31.77.145.89 165.232.148.95 192.140.185.8 138.99.79.29 106.13.167.239 177.70.2.194 45.126.120.53 223.243.162.130 202.134.23.229 122.193.64.145 106.75.166.71 158.51.96.38 2.189.130.67 188.166.211.175 96.44.161.98 124.174.58.106 172.245.43.228 111.67.19.59 103.139.101.114 42.4.62.108 161.129.211.63 106.13.57.206 205.185.126.219 203.154.14.8 217.18.94.226 121.228.250.70 112.53.123.177 65.181.92.228 101.36.228.201 219.248.115.178 45.234.176.26 203.186.60.250 129.212.239.56 140.206.107.98 203.189.196.168 170.84.39.236 106.75.216.134 103.219.32.239 103.166.226.235 114.218.57.21 51.195.223.189 177.74.153.10 180.108.46.6 3.92.224.153 &"
],
"detailed_commands": [
{
"cmd": "chmod +x ./.6335344173072655702/sshd;nohup ./.6335344173072655702/sshd 191.252.210.242 77.239.125.227 27.0.135.12 45.118.144.36 218.98.97.7 154.211.13.102 188.248.254.9 31.77.145.89 165.232.148.95 192.140.185.8 138.99.79.29 106.13.167.239 177.70.2.194 45.126.120.53 223.243.162.130 202.134.23.229 122.193.64.145 106.75.166.71 158.51.96.38 2.189.130.67 188.166.211.175 96.44.161.98 124.174.58.106 172.245.43.228 111.67.19.59 103.139.101.114 42.4.62.108 161.129.211.63 106.13.57.206 205.185.126.219 203.154.14.8 217.18.94.226 121.228.250.70 112.53.123.177 65.181.92.228 101.36.228.201 219.248.115.178 45.234.176.26 203.186.60.250 129.212.239.56 140.206.107.98 203.189.196.168 170.84.39.236 106.75.216.134 103.219.32.239 103.166.226.235 114.218.57.21 51.195.223.189 177.74.153.10 180.108.46.6 3.92.224.153 &",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / qweasdzxc123
{
"id": "50f360dc8d3f",
"src_ip": "193.46.255.86",
"start_time": "2026-08-19T22:03:32.957739Z",
"end_time": "2026-08-19T22:03:38.976588Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qweasdzxc123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a316cdd67ddd",
"src_ip": "223.181.77.193",
"start_time": "2026-08-19T21:53:10.216319Z",
"end_time": "2026-08-19T21:53:10.219674Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d247bb33a046",
"src_ip": "223.181.77.193",
"start_time": "2026-08-19T21:52:51.662132Z",
"end_time": "2026-08-19T21:52:51.665473Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "bf5cfe11a974",
"src_ip": "176.53.159.196",
"start_time": "2026-08-19T21:52:10.296458Z",
"end_time": "2026-08-19T21:52:11.473346Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}