malicious SSH server listening on 127.0.0.1:59985
accepted TCP client peer=('127.0.0.1', 56644)
begin_auth username='user'
password_auth_supported
password_auth_supported
password_auth_supported
validate_password username='user' password='pass'
auth_completed
session_requested accepted
session channel made
subsystem_requested subsystem='sftp'
session_started; SFTP subsystem accepted; scheduling malformed encrypted packet
injecting packet reason=after-sftp-subsystem seq=11 encryption=ChachaEncryption
sent encrypted malformed packet seq=11 clear_packet_length=0xfffffff0 body_len=32 wire_len=52
data_received len=9 first_bytes='\x00\x00\x00\x05\x01\x00\x00\x00\x03'
session connection_lost exc=None
server connection_lost exc=None