Credential acceptance event recorded. Target authentication: test / qwerty1234
{
"id": "5a9e5ef4736e",
"src_ip": "49.124.152.229",
"start_time": "2026-09-04T13:26:52.066445Z",
"end_time": "2026-09-04T13:27:01.152146Z",
"duration": "9.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "qwerty1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / qwerty1234
{
"id": "05a5ff9dce25",
"src_ip": "45.170.50.2",
"start_time": "2026-09-04T13:26:41.529229Z",
"end_time": "2026-09-04T13:26:49.977927Z",
"duration": "8.4",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "qwerty1234"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: yara
{
"id": "109c025b1b61",
"src_ip": "2.57.121.112",
"start_time": "2026-09-04T13:24:03.453417Z",
"end_time": "2026-09-04T13:24:10.025822Z",
"duration": "6.6",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "yara",
"pass": "yara"
},
{
"user": "yara",
"pass": "yara1"
},
{
"user": "yara",
"pass": "yara123"
},
{
"user": "yara",
"pass": "yara1234"
},
{
"user": "yara",
"pass": "yara12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password1234!
{
"id": "5c7dc87fa327",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T13:22:59.740019Z",
"end_time": "2026-09-04T13:23:01.797033Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password1234!"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt
{
"id": "4c85ce7711d6",
"src_ip": "88.255.189.44",
"start_time": "2026-09-04T13:22:11.972249Z",
"end_time": "2026-09-04T13:22:16.480155Z",
"duration": "4.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "ubnt",
"pass": "1qaz2wsx"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "71800d144ec4",
"src_ip": "196.237.241.201",
"start_time": "2026-09-04T13:16:07.806273Z",
"end_time": "2026-09-04T13:16:07.809804Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "abb9d9061fc5",
"src_ip": "196.237.241.201",
"start_time": "2026-09-04T13:15:54.480788Z",
"end_time": "2026-09-04T13:15:54.484282Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: user / 654321
{
"id": "8f679fca871e",
"src_ip": "49.124.153.32",
"start_time": "2026-09-04T13:14:02.300406Z",
"end_time": "2026-09-04T13:14:10.514298Z",
"duration": "8.2",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "654321"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 654321
{
"id": "50bf20a09b47",
"src_ip": "46.59.88.232",
"start_time": "2026-09-04T13:13:54.396827Z",
"end_time": "2026-09-04T13:14:00.677779Z",
"duration": "6.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "654321"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unknown
{
"id": "5ff0a7fffff9",
"src_ip": "121.189.198.60",
"start_time": "2026-09-04T13:12:16.907980Z",
"end_time": "2026-09-04T13:12:20.970917Z",
"duration": "4.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "unknown",
"pass": "qwerty12"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / rememberme
{
"id": "3a82d4c346dd",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T13:11:52.709217Z",
"end_time": "2026-09-04T13:11:54.823978Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "rememberme"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0fcb37ebe83d",
"src_ip": "45.63.4.69",
"start_time": "2026-09-04T13:05:07.485765Z",
"end_time": "2026-09-04T13:05:07.637240Z",
"duration": "0.1",
"version": "SSH-2.0-Go",
"hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "bba417056eee",
"src_ip": "45.148.10.157",
"start_time": "2026-09-04T13:04:05.822123Z",
"end_time": "2026-09-04T13:04:06.600576Z",
"duration": "0.8",
"version": "SSH-2.0-PUTTY",
"hassh": "5bd26477da5440a6187bd3f1b39a429c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / asd123!
{
"id": "a3ed1d60d2aa",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T13:00:40.996627Z",
"end_time": "2026-09-04T13:00:43.083029Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asd123!"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: blank
{
"id": "1527c4c47d31",
"src_ip": "170.233.29.157",
"start_time": "2026-09-04T13:00:15.718155Z",
"end_time": "2026-09-04T13:00:20.278273Z",
"duration": "4.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "blank",
"pass": "p@ssword"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / azertyui
{
"id": "a8277935d689",
"src_ip": "78.66.44.246",
"start_time": "2026-09-04T12:53:31.565449Z",
"end_time": "2026-09-04T12:53:39.209957Z",
"duration": "7.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "azertyui"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / azertyui
{
"id": "ecab6aedd1d1",
"src_ip": "78.66.44.246",
"start_time": "2026-09-04T12:53:24.178830Z",
"end_time": "2026-09-04T12:53:31.017003Z",
"duration": "6.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "azertyui"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / sven
{
"id": "1ca77daeff24",
"src_ip": "2.57.121.25",
"start_time": "2026-09-04T12:52:17.027586Z",
"end_time": "2026-09-04T12:52:23.070972Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "sven"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos
{
"id": "fce58f4d1eb7",
"src_ip": "111.171.125.94",
"start_time": "2026-09-04T12:51:56.857156Z",
"end_time": "2026-09-04T12:52:02.443084Z",
"duration": "5.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "centos",
"pass": "Password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "7167a9c665f3",
"src_ip": "66.132.186.194",
"start_time": "2026-09-04T12:49:40.150379Z",
"end_time": "2026-09-04T12:49:56.337990Z",
"duration": "16.2",
"version": "SSH-2.0-Go",
"hassh": "873a5fb5fedc2d4f8638ebde4abc6cfc",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / !QAZ2wsx#EDC4rfv
{
"id": "b507921e9ae0",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T12:49:34.561348Z",
"end_time": "2026-09-04T12:49:36.613137Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "!QAZ2wsx#EDC4rfv"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 2022
{
"id": "87267b11e9b3",
"src_ip": "45.117.215.55",
"start_time": "2026-09-04T12:45:54.087115Z",
"end_time": "2026-09-04T12:46:00.068752Z",
"duration": "6.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "2022"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "f465fff1f735",
"src_ip": "193.46.255.86",
"start_time": "2026-09-04T12:40:11.114057Z",
"end_time": "2026-09-04T12:40:17.155260Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "eb929e5e4713",
"src_ip": "113.211.213.71",
"start_time": "2026-09-04T12:39:53.981837Z",
"end_time": "2026-09-04T12:39:53.985630Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: blank
{
"id": "578f13446d25",
"src_ip": "183.233.85.194",
"start_time": "2026-09-04T12:39:00.351046Z",
"end_time": "2026-09-04T12:39:06.022254Z",
"duration": "5.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "blank",
"pass": "P@ssword"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / zxcvbnm
{
"id": "ec5c0c1fcae6",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T12:38:31.271591Z",
"end_time": "2026-09-04T12:38:33.303075Z",
"duration": "2.0",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zxcvbnm"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "6c52e4c997e7",
"src_ip": "31.59.89.50",
"start_time": "2026-09-04T12:33:57.963477Z",
"end_time": "2026-09-04T12:34:00.006778Z",
"duration": "2.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "a26c8a4b3953",
"src_ip": "176.53.159.196",
"start_time": "2026-09-04T12:32:19.922819Z",
"end_time": "2026-09-04T12:32:21.151030Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unknown
{
"id": "57adb7d92bd2",
"src_ip": "182.73.164.228",
"start_time": "2026-09-04T12:31:43.788321Z",
"end_time": "2026-09-04T12:31:48.248561Z",
"duration": "4.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "unknown",
"pass": "2222222222"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / abc123$
{
"id": "df8f939554be",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T12:27:08.707637Z",
"end_time": "2026-09-04T12:27:10.763380Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abc123$"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P@ssw0rd123
{
"id": "5ccd2a276827",
"src_ip": "208.96.233.67",
"start_time": "2026-09-04T12:25:31.928729Z",
"end_time": "2026-09-04T12:25:39.730963Z",
"duration": "7.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssw0rd123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P@ssw0rd123
{
"id": "7834b5f3c29c",
"src_ip": "117.248.201.39",
"start_time": "2026-09-04T12:25:22.939705Z",
"end_time": "2026-09-04T12:25:31.507704Z",
"duration": "8.6",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssw0rd123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "770447726bb9",
"src_ip": "222.117.0.253",
"start_time": "2026-09-04T12:18:47.685462Z",
"end_time": "2026-09-04T12:18:53.420472Z",
"duration": "5.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "debian",
"pass": "qwerty"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "677d60d54005",
"src_ip": "68.51.53.90",
"start_time": "2026-09-04T12:17:15.456446Z",
"end_time": "2026-09-04T12:17:15.459711Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 1234@abcd
{
"id": "e24197ccfea4",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T12:15:29.241548Z",
"end_time": "2026-09-04T12:15:31.340675Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234@abcd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / p@ssw0rd
{
"id": "b2fc49121272",
"src_ip": "24.45.235.179",
"start_time": "2026-09-04T12:14:32.278178Z",
"end_time": "2026-09-04T12:14:38.214929Z",
"duration": "5.9",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "p@ssw0rd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / p@ssw0rd
{
"id": "117f692dfc6b",
"src_ip": "188.219.104.210",
"start_time": "2026-09-04T12:14:25.504501Z",
"end_time": "2026-09-04T12:14:31.544422Z",
"duration": "6.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "p@ssw0rd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d3efd7b50f45",
"src_ip": "62.36.19.42",
"start_time": "2026-09-04T12:12:38.827514Z",
"end_time": "2026-09-04T12:14:38.832129Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / juniper123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a5f80121caa7",
"src_ip": "185.93.89.23",
"start_time": "2026-09-04T12:10:54.455211Z",
"end_time": "2026-09-04T12:10:57.455943Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "juniper123"
},
"commands": [
"uname -a;w"
],
"detailed_commands": [
{
"cmd": "uname -a;w",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / p@ssw0rd
{
"id": "f1864221e1da",
"src_ip": "178.178.194.192",
"start_time": "2026-09-04T12:05:16.368550Z",
"end_time": "2026-09-04T12:05:23.919699Z",
"duration": "7.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "p@ssw0rd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: test / p@ssw0rd
{
"id": "5d4f519f5368",
"src_ip": "183.107.76.127",
"start_time": "2026-09-04T12:05:02.641526Z",
"end_time": "2026-09-04T12:05:11.318860Z",
"duration": "8.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "p@ssw0rd"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / qwerty
{
"id": "5ecd35fa8f3a",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T12:04:17.536880Z",
"end_time": "2026-09-04T12:04:19.657271Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwerty"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "652c25067ac3",
"src_ip": "93.185.68.4",
"start_time": "2026-09-04T12:02:36.473482Z",
"end_time": "2026-09-04T12:02:36.476927Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: vivianna
{
"id": "b16a2e821f1f",
"src_ip": "2.57.121.112",
"start_time": "2026-09-04T12:01:45.468086Z",
"end_time": "2026-09-04T12:01:52.045893Z",
"duration": "6.6",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "vivianna",
"pass": "vivianna"
},
{
"user": "vivianna",
"pass": "vivianna1"
},
{
"user": "vivianna",
"pass": "vivianna123"
},
{
"user": "vivianna",
"pass": "vivianna1234"
},
{
"user": "vivianna",
"pass": "vivianna12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "40f902428969",
"src_ip": "109.126.41.234",
"start_time": "2026-09-04T11:57:41.607270Z",
"end_time": "2026-09-04T11:57:45.628314Z",
"duration": "4.0",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "debian",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b6299cf9d0f7",
"src_ip": "93.185.68.4",
"start_time": "2026-09-04T11:57:26.231040Z",
"end_time": "2026-09-04T11:57:26.234427Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / 1234!
{
"id": "686f5ee41f76",
"src_ip": "217.60.255.130",
"start_time": "2026-09-04T11:53:10.039958Z",
"end_time": "2026-09-04T11:53:12.098578Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.10.4",
"hassh": "419da4c91ddbffebead14645bebc93b9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234!"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openhabian
{
"id": "82aa82e356e1",
"src_ip": "14.99.61.248",
"start_time": "2026-09-04T11:51:12.401451Z",
"end_time": "2026-09-04T11:51:17.311642Z",
"duration": "4.9",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "openhabian",
"pass": "openhabian"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / tactical
{
"id": "24e484be3ab2",
"src_ip": "2.57.121.25",
"start_time": "2026-09-04T11:50:10.442851Z",
"end_time": "2026-09-04T11:50:16.461437Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "tactical"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: postgres / 123456
Remote entity achieved interactive shell state. Command sequence (9 executed):
{
"id": "9f9c28bdc17c",
"src_ip": "92.118.39.14",
"start_time": "2026-09-04T11:50:02.680142Z",
"end_time": "2026-09-04T11:50:08.134556Z",
"duration": "5.5",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "postgres",
"pass": "123456"
},
"commands": [
"export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"uname -s -v -n -m 2 > /dev/null",
"/bin/uname -s -v -n -m 2 > /dev/null",
"/usr/bin/uname -s -v -n -m 2 > /dev/null",
"busybox uname -s -v -n -m 2 > /dev/null",
"( [ -f /proc/version ]",
"[ -f /proc/version ]",
"head -1 /proc/version | cut -d -f1",
"[ -f /etc/os-release ]"
],
"detailed_commands": [
{
"cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
"failed": false,
"error": null
},
{
"cmd": "uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
"failed": true,
"error": "Command not found: /usr/bin/uname -s -v -n -m"
},
{
"cmd": "busybox uname -s -v -n -m 2 > /dev/null",
"failed": false,
"error": null
},
{
"cmd": "( [ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "[ -f /proc/version ]",
"failed": false,
"error": null
},
{
"cmd": "head -1 /proc/version | cut -d -f1",
"failed": false,
"error": null
},
{
"cmd": "[ -f /etc/os-release ]",
"failed": false,
"error": null
}
],
"failed_commands": [
"/usr/bin/uname -s -v -n -m"
],
"score": 200,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}