Credential acceptance event recorded. Target authentication: root / cs@123
{
"id": "3abb23b047fc",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:22:27.636864Z",
"end_time": "2026-09-01T05:22:29.758741Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "cs@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / root123
Remote entity achieved interactive shell state. Command sequence (9 executed):
{
"id": "b2857bc0df9a",
"src_ip": "80.94.92.234",
"start_time": "2026-09-01T05:21:39.339906Z",
"end_time": "2026-09-01T05:21:43.390846Z",
"duration": "4.0",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root123"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test3
{
"id": "ab53af6cbad4",
"src_ip": "80.94.92.234",
"start_time": "2026-09-01T05:20:08.972221Z",
"end_time": "2026-09-01T05:20:11.810323Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [
{
"user": "test3",
"pass": "test3"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / Allah@1405
{
"id": "d95bb77a5491",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:19:58.577294Z",
"end_time": "2026-09-01T05:20:00.657748Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "Allah@1405"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test2
{
"id": "35e97f241c17",
"src_ip": "80.94.92.234",
"start_time": "2026-09-01T05:18:31.939498Z",
"end_time": "2026-09-01T05:18:37.265036Z",
"duration": "5.3",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [
{
"user": "test2",
"pass": "test2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test1
{
"id": "1e5bcce126c0",
"src_ip": "80.94.92.234",
"start_time": "2026-09-01T05:16:53.400719Z",
"end_time": "2026-09-01T05:16:59.293495Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [
{
"user": "test1",
"pass": "test1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "900c6fd76991",
"src_ip": "185.99.160.93",
"start_time": "2026-09-01T05:14:59.233771Z",
"end_time": "2026-09-01T05:14:59.243608Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0b5a38711882",
"src_ip": "80.94.92.234",
"start_time": "2026-09-01T05:14:50.325742Z",
"end_time": "2026-09-01T05:14:50.492195Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: daniel
{
"id": "726e93d08417",
"src_ip": "193.46.255.86",
"start_time": "2026-09-01T05:14:34.594576Z",
"end_time": "2026-09-01T05:14:38.771757Z",
"duration": "4.2",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "daniel",
"pass": "daniel"
},
{
"user": "daniel",
"pass": "1234"
},
{
"user": "daniel",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0aa38561bc93",
"src_ip": "185.99.160.93",
"start_time": "2026-09-01T05:14:18.279798Z",
"end_time": "2026-09-01T05:14:18.283239Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0b3f5cf5b366",
"src_ip": "85.109.170.199",
"start_time": "2026-09-01T05:13:32.272963Z",
"end_time": "2026-09-01T05:13:32.276615Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b527bf1e4d17",
"src_ip": "85.109.170.199",
"start_time": "2026-09-01T05:12:13.207225Z",
"end_time": "2026-09-01T05:12:13.210393Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Qwertyuiop@123
{
"id": "025fb4fc73c1",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:11:51.207996Z",
"end_time": "2026-09-01T05:11:53.215827Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qwertyuiop@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin01
{
"id": "cd857959b5e2",
"src_ip": "218.4.156.254",
"start_time": "2026-09-01T05:10:58.101729Z",
"end_time": "2026-09-01T05:11:08.310637Z",
"duration": "10.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin01"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin01
{
"id": "bbd03b94daa3",
"src_ip": "46.59.88.232",
"start_time": "2026-09-01T05:10:50.663451Z",
"end_time": "2026-09-01T05:10:56.625121Z",
"duration": "6.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin01"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / qwe!@#123
{
"id": "d608bc70d19b",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:10:26.731069Z",
"end_time": "2026-09-01T05:10:28.869072Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "qwe!@#123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9f6de2a2f74f",
"src_ip": "218.15.224.102",
"start_time": "2026-09-01T05:08:18.445252Z",
"end_time": "2026-09-01T05:08:24.868679Z",
"duration": "6.4",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / MODEMadmin
{
"id": "0f05f856e40e",
"src_ip": "66.45.144.201",
"start_time": "2026-09-01T05:04:36.649787Z",
"end_time": "2026-09-01T05:04:43.695021Z",
"duration": "7.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "MODEMadmin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / MODEMadmin
{
"id": "01453e1de95f",
"src_ip": "176.103.15.144",
"start_time": "2026-09-01T05:04:29.293780Z",
"end_time": "2026-09-01T05:04:36.078121Z",
"duration": "6.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "MODEMadmin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 88888
{
"id": "c3b5b18f21af",
"src_ip": "60.214.127.246",
"start_time": "2026-09-01T05:02:54.399029Z",
"end_time": "2026-09-01T05:03:02.370306Z",
"duration": "8.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "88888"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 88888
{
"id": "53a4b45ced1b",
"src_ip": "222.92.61.242",
"start_time": "2026-09-01T05:02:42.724465Z",
"end_time": "2026-09-01T05:02:53.649432Z",
"duration": "10.9",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "88888"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Shivam@123
{
"id": "a7af752a9edd",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:01:08.568285Z",
"end_time": "2026-09-01T05:01:10.697160Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Shivam@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / 123456@a
{
"id": "a904216369d5",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T05:01:04.061784Z",
"end_time": "2026-09-01T05:01:06.199333Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "123456@a"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a2c1463f7183",
"src_ip": "102.215.169.173",
"start_time": "2026-09-01T05:00:32.774583Z",
"end_time": "2026-09-01T05:00:32.777922Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a923dbfd68e0",
"src_ip": "102.215.169.173",
"start_time": "2026-09-01T04:58:43.693848Z",
"end_time": "2026-09-01T04:58:43.697187Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: ubuntu / printer1@123
{
"id": "bbcd9332c6ee",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:51:29.311108Z",
"end_time": "2026-09-01T04:51:31.391447Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "printer1@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor
{
"id": "5e9e0af34d2d",
"src_ip": "65.181.79.60",
"start_time": "2026-09-01T04:50:33.726896Z",
"end_time": "2026-09-01T04:50:38.500948Z",
"duration": "4.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "supervisor",
"pass": "supervisor1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / olive@123
{
"id": "816cb71a12db",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:50:20.153426Z",
"end_time": "2026-09-01T04:50:22.167470Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "olive@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: blank
{
"id": "d5b6f146b38b",
"src_ip": "117.216.33.31",
"start_time": "2026-09-01T04:48:38.086468Z",
"end_time": "2026-09-01T04:48:43.013486Z",
"duration": "4.9",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "blank",
"pass": "blank123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ecc49a04c2eb",
"src_ip": "181.45.196.40",
"start_time": "2026-09-01T04:43:59.223293Z",
"end_time": "2026-09-01T04:43:59.226478Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / P@ssword123
{
"id": "82041809af70",
"src_ip": "209.14.89.110",
"start_time": "2026-09-01T04:43:56.122820Z",
"end_time": "2026-09-01T04:44:03.426790Z",
"duration": "7.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "P@ssword123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / P@ssword123
{
"id": "02419b0b67ee",
"src_ip": "191.210.73.33",
"start_time": "2026-09-01T04:43:47.250451Z",
"end_time": "2026-09-01T04:43:55.305135Z",
"duration": "8.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "P@ssword123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adminpldt
{
"id": "3d7e57419164",
"src_ip": "124.160.255.53",
"start_time": "2026-09-01T04:42:06.586556Z",
"end_time": "2026-09-01T04:42:11.734556Z",
"duration": "5.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "adminpldt",
"pass": "1234567890"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / Mahan123
{
"id": "0ac1f9159a52",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:41:55.446039Z",
"end_time": "2026-09-01T04:41:57.526453Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "Mahan123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / square@123
{
"id": "eb1e0f602d57",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:39:31.653050Z",
"end_time": "2026-09-01T04:39:33.684447Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "square@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "bb5e4f7f9370",
"src_ip": "181.45.196.40",
"start_time": "2026-09-01T04:37:08.851769Z",
"end_time": "2026-09-01T04:37:08.855174Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: root
{
"id": "04a8fdb6ae7c",
"src_ip": "139.19.117.130",
"start_time": "2026-09-01T04:34:29.797541Z",
"end_time": "2026-09-01T04:34:39.796570Z",
"duration": "10.0",
"version": "SSH-2.0-Go",
"hassh": "f1e5e9d24e5e345e8745613bde22d532",
"attempts": [
{
"user": "root",
"pass": null
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / Password4321
{
"id": "68a82aeec925",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:32:30.473146Z",
"end_time": "2026-09-01T04:32:32.523226Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "Password4321"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "14f652755ab6",
"src_ip": "205.210.31.201",
"start_time": "2026-09-01T04:31:47.093705Z",
"end_time": "2026-09-01T04:31:49.862180Z",
"duration": "2.8",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "776afbae2e1e",
"src_ip": "218.149.179.112",
"start_time": "2026-09-01T04:30:28.358804Z",
"end_time": "2026-09-01T04:30:33.414288Z",
"duration": "5.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Pan@123
{
"id": "ab9472d70e4a",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:28:53.968054Z",
"end_time": "2026-09-01T04:28:56.077790Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Pan@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 656565
{
"id": "fa8a8f5aa650",
"src_ip": "213.66.197.199",
"start_time": "2026-09-01T04:28:15.506246Z",
"end_time": "2026-09-01T04:28:22.598969Z",
"duration": "7.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "656565"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 656565
{
"id": "d42bb88c0879",
"src_ip": "120.238.23.168",
"start_time": "2026-09-01T04:28:05.498834Z",
"end_time": "2026-09-01T04:28:14.987073Z",
"duration": "9.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "656565"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "8db4fbb69748",
"src_ip": "50.223.176.171",
"start_time": "2026-09-01T04:23:07.458689Z",
"end_time": "2026-09-01T04:23:15.841741Z",
"duration": "8.4",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "ubnt",
"pass": "ubnt2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / @Admin1234
{
"id": "6c63125bbca2",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:23:01.953094Z",
"end_time": "2026-09-01T04:23:03.985440Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "@Admin1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: blank
{
"id": "7ff075d8d4ff",
"src_ip": "64.181.172.46",
"start_time": "2026-09-01T04:21:23.079720Z",
"end_time": "2026-09-01T04:21:27.700047Z",
"duration": "4.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "blank",
"pass": "blank7"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Oracle@2025
{
"id": "b5e4b13c4c75",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:18:06.785963Z",
"end_time": "2026-09-01T04:18:08.987445Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Oracle@2025"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "75465efe9417",
"src_ip": "88.255.41.28",
"start_time": "2026-09-01T04:16:03.335601Z",
"end_time": "2026-09-01T04:16:03.339044Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2330b7a120b6",
"src_ip": "85.185.103.231",
"start_time": "2026-09-01T04:14:42.224093Z",
"end_time": "2026-09-01T04:16:42.267848Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: ubuntu / Chakavak@123
{
"id": "b0ce44051fd6",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T04:13:23.596405Z",
"end_time": "2026-09-01T04:13:25.730896Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "Chakavak@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}