Adversarial Observation Interface

66.132.224.88

2026-08-23 06:05:51.880885 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6235db100720

Client Version: SSH-2.0-Go

Engagement Duration: 15.6s

HASSH Fingerprint: 873a5fb5fedc2d4f8638ebde4abc6cfc

{
  "id": "6235db100720",
  "src_ip": "66.132.224.88",
  "start_time": "2026-08-23T06:05:51.880885Z",
  "end_time": "2026-08-23T06:06:07.478085Z",
  "duration": "15.6",
  "version": "SSH-2.0-Go",
  "hassh": "873a5fb5fedc2d4f8638ebde4abc6cfc",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

220.90.220.204

2026-08-23 06:00:05.188145 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN DATA THEFT ROUTER TARGETING SCORE: 520

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ /ip cloud print

Command not found: /ip cloud print

[obs-node]:~$ ifconfig

[obs-node]:~$ uname -a

[obs-node]:~$ cat /proc/cpuinfo

[obs-node]:~$ ps | grep '[Mm]iner'

[obs-node]:~$ ps -ef | grep '[Mm]iner'

[obs-node]:~$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*

[obs-node]:~$ locate D877F783D5D3EF8Cs

[obs-node]:~$ echo Hi | cat -n

Record ID: 724667687b19

Client Version: SSH-2.0-libssh2_1.11.1

Engagement Duration: 39.2s

HASSH Fingerprint: f45fb203c31069bb280067b71ed92ccb

{
  "id": "724667687b19",
  "src_ip": "220.90.220.204",
  "start_time": "2026-08-23T06:00:05.188145Z",
  "end_time": "2026-08-23T06:00:44.415943Z",
  "duration": "39.2",
  "version": "SSH-2.0-libssh2_1.11.1",
  "hassh": "f45fb203c31069bb280067b71ed92ccb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "/ip cloud print",
    "ifconfig",
    "uname -a",
    "cat /proc/cpuinfo",
    "ps | grep '[Mm]iner'",
    "ps -ef | grep '[Mm]iner'",
    "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
    "locate D877F783D5D3EF8Cs",
    "echo Hi | cat -n"
  ],
  "detailed_commands": [
    {
      "cmd": "/ip cloud print",
      "failed": true,
      "error": "Command not found: /ip cloud print"
    },
    {
      "cmd": "ifconfig",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps -ef | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
      "failed": false,
      "error": null
    },
    {
      "cmd": "locate D877F783D5D3EF8Cs",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo Hi | cat -n",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/ip cloud print"
  ],
  "score": 520,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "DATA THEFT",
    "ROUTER TARGETING"
  ]
}

217.60.255.130

2026-08-23 05:59:27.966518 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 123qweasdzxc

Record ID: 1c49e9be5142

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.0s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "1c49e9be5142",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:59:27.966518Z",
  "end_time": "2026-08-23T05:59:29.989566Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123qweasdzxc"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:59:23.930391 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 12345678a

Record ID: f85a8002e39d

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "f85a8002e39d",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:59:23.930391Z",
  "end_time": "2026-08-23T05:59:25.990391Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "12345678a"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

176.53.159.196

2026-08-23 05:55:35.884506 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: b661c267d6b8

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "b661c267d6b8",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-23T05:55:35.884506Z",
  "end_time": "2026-08-23T05:55:37.055201Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:49:57.294522 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / !Q2w3e4r5t6y

Record ID: 6baabf7de924

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "6baabf7de924",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:49:57.294522Z",
  "end_time": "2026-08-23T05:49:59.422432Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "!Q2w3e4r5t6y"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:49:53.551663 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / vps123456

Record ID: bebe4da41ad3

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "bebe4da41ad3",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:49:53.551663Z",
  "end_time": "2026-08-23T05:49:55.693503Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "vps123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:40:33.527529 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / xx123!

Record ID: 4dc5573a2b0a

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "4dc5573a2b0a",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:40:33.527529Z",
  "end_time": "2026-08-23T05:40:35.585547Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "xx123!"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:40:29.469551 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / Microsoft@2025

Record ID: d9eb0a6748d3

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "d9eb0a6748d3",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:40:29.469551Z",
  "end_time": "2026-08-23T05:40:31.539618Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Microsoft@2025"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-08-23 05:39:44.168838 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: postgres / postgres

Record ID: 882b47f5bd6e

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "882b47f5bd6e",
  "src_ip": "193.46.255.86",
  "start_time": "2026-08-23T05:39:44.168838Z",
  "end_time": "2026-08-23T05:39:50.176832Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "postgres"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:31:05.820447 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / open1234

Record ID: 1e0f0b4f5c3f

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.0s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "1e0f0b4f5c3f",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:31:05.820447Z",
  "end_time": "2026-08-23T05:31:07.871066Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "open1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:31:01.602328 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / Superuser

Record ID: 1bbff0ed3dfc

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "1bbff0ed3dfc",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:31:01.602328Z",
  "end_time": "2026-08-23T05:31:03.684764Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Superuser"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:21:36.724708 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / aaa.123456

Record ID: 3c4747283f6d

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "3c4747283f6d",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:21:36.724708Z",
  "end_time": "2026-08-23T05:21:38.826538Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aaa.123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:21:32.986897 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / Bismillah123

Record ID: 605038353e33

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.0s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "605038353e33",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:21:32.986897Z",
  "end_time": "2026-08-23T05:21:35.010882Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Bismillah123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

182.10.99.164

2026-08-23 05:15:39.173232 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fc95e97f1c0b

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "fc95e97f1c0b",
  "src_ip": "182.10.99.164",
  "start_time": "2026-08-23T05:15:39.173232Z",
  "end_time": "2026-08-23T05:15:39.176592Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

217.60.255.130

2026-08-23 05:12:08.359225 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / aaaaaaaa

Record ID: f2e812aecae6

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "f2e812aecae6",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:12:08.359225Z",
  "end_time": "2026-08-23T05:12:10.422678Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aaaaaaaa"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:12:04.677539 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / QWERTY!@#

Record ID: 45893887eaa7

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "45893887eaa7",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:12:04.677539Z",
  "end_time": "2026-08-23T05:12:06.730456Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "QWERTY!@#"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.122.53

2026-08-23 05:11:09.521689 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hummingbot1

Record ID: 5e23c71127b3

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "5e23c71127b3",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T05:11:09.521689Z",
  "end_time": "2026-08-23T05:11:11.365562Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "hummingbot1",
      "pass": "hummingbot1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.53

2026-08-23 05:08:15.104002 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: broker

Record ID: 87408497d51c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "87408497d51c",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T05:08:15.104002Z",
  "end_time": "2026-08-23T05:08:16.945524Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "broker",
      "pass": "broker"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

154.223.17.178

2026-08-23 05:05:29.725331 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 6f0b0fe297c6

Client Version: SSH-2.0-libssh2_1.10.1_DEV

Engagement Duration: 3.1s

HASSH Fingerprint: 19a8bc97d71fe02f6899cd96937a5202

{
  "id": "6f0b0fe297c6",
  "src_ip": "154.223.17.178",
  "start_time": "2026-08-23T05:05:29.725331Z",
  "end_time": "2026-08-23T05:05:32.862478Z",
  "duration": "3.1",
  "version": "SSH-2.0-libssh2_1.10.1_DEV",
  "hassh": "19a8bc97d71fe02f6899cd96937a5202",
  "attempts": [
    {
      "user": "nobody",
      "pass": "nobody"
    },
    {
      "user": "tomcat",
      "pass": "tomcat"
    }
  ],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.122.53

2026-08-23 05:05:21.136644 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ibkr

Record ID: 74ce92a125fa

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "74ce92a125fa",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T05:05:21.136644Z",
  "end_time": "2026-08-23T05:05:22.978195Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ibkr",
      "pass": "ibkr"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:02:38.173203 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 12345@12345

Record ID: 44f6090ef049

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "44f6090ef049",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:02:38.173203Z",
  "end_time": "2026-08-23T05:02:40.245651Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345@12345"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 05:02:34.527995 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / ADMIN@123

Record ID: c4c15bcde6d4

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "c4c15bcde6d4",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T05:02:34.527995Z",
  "end_time": "2026-08-23T05:02:36.662446Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ADMIN@123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.122.53

2026-08-23 05:02:32.930310 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mqtt

Record ID: 0e0c532c1eb9

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0e0c532c1eb9",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T05:02:32.930310Z",
  "end_time": "2026-08-23T05:02:34.771078Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "mqtt",
      "pass": "mqtt"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.112

2026-08-23 05:01:44.873958 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: rashaun

Record ID: 5e5e962cc5d3

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "5e5e962cc5d3",
  "src_ip": "2.57.121.112",
  "start_time": "2026-08-23T05:01:44.873958Z",
  "end_time": "2026-08-23T05:01:51.388644Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "rashaun",
      "pass": "rashaun"
    },
    {
      "user": "rashaun",
      "pass": "rashaun1"
    },
    {
      "user": "rashaun",
      "pass": "rashaun123"
    },
    {
      "user": "rashaun",
      "pass": "rashaun1234"
    },
    {
      "user": "rashaun",
      "pass": "rashaun12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.53

2026-08-23 04:59:42.877455 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ceph

Record ID: 3f1297e76342

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3f1297e76342",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:59:42.877455Z",
  "end_time": "2026-08-23T04:59:44.717831Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ceph",
      "pass": "ceph"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.137

2026-08-23 04:57:51.968654 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 5699c673fc72

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba

{
  "id": "5699c673fc72",
  "src_ip": "195.178.110.137",
  "start_time": "2026-08-23T04:57:51.968654Z",
  "end_time": "2026-08-23T04:57:53.196949Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.122.53

2026-08-23 04:56:58.925811 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cadmin

Record ID: 9a229a9c00d0

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9a229a9c00d0",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:56:58.925811Z",
  "end_time": "2026-08-23T04:57:00.766640Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "cadmin",
      "pass": "cadmin123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.53

2026-08-23 04:54:07.353383 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cadmin

Record ID: 73c60f7908dc

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "73c60f7908dc",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:54:07.353383Z",
  "end_time": "2026-08-23T04:54:09.194134Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "cadmin",
      "pass": "cadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

104.199.100.7

2026-08-23 04:53:37.204194 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 39727f953b97

Client Version: SSH-2.0-Nmap_SSH2_Enum_Algos

Engagement Duration: 0.2s

HASSH Fingerprint: a20aced7c9824fd804f59e68dd801ad3

{
  "id": "39727f953b97",
  "src_ip": "104.199.100.7",
  "start_time": "2026-08-23T04:53:37.204194Z",
  "end_time": "2026-08-23T04:53:37.397524Z",
  "duration": "0.2",
  "version": "SSH-2.0-Nmap_SSH2_Enum_Algos",
  "hassh": "a20aced7c9824fd804f59e68dd801ad3",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

104.199.100.7

2026-08-23 04:53:18.552581 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d6860e6e0303

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "d6860e6e0303",
  "src_ip": "104.199.100.7",
  "start_time": "2026-08-23T04:53:18.552581Z",
  "end_time": "2026-08-23T04:53:18.694037Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

217.60.255.130

2026-08-23 04:53:09.880121 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / A1q2w3e4r

Record ID: 202ae75fb49a

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "202ae75fb49a",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T04:53:09.880121Z",
  "end_time": "2026-08-23T04:53:11.937477Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "A1q2w3e4r"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 04:53:06.217837 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 2wsx#EDC

Record ID: 3b6445d88e9d

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "3b6445d88e9d",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T04:53:06.217837Z",
  "end_time": "2026-08-23T04:53:08.349451Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "2wsx#EDC"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.0.7.14

2026-08-23 04:52:40.933894 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 70b72df66b18

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "70b72df66b18",
  "src_ip": "102.0.7.14",
  "start_time": "2026-08-23T04:52:40.933894Z",
  "end_time": "2026-08-23T04:52:40.936982Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.195.244.210

2026-08-23 04:52:32.789932 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin

Record ID: e8da53cb34db

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: dde267e50f82fcc16a7e1e7b59b8af71

{
  "id": "e8da53cb34db",
  "src_ip": "35.195.244.210",
  "start_time": "2026-08-23T04:52:32.789932Z",
  "end_time": "2026-08-23T04:52:33.513830Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "dde267e50f82fcc16a7e1e7b59b8af71",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

35.195.244.210

2026-08-23 04:52:32.371788 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b4f84e2a40e4

Client Version: SSH-2.0-Fingerprintx-SSH2

Engagement Duration: 4.2s

HASSH Fingerprint: 4e066189c3bbeec38c99b1855113733a

{
  "id": "b4f84e2a40e4",
  "src_ip": "35.195.244.210",
  "start_time": "2026-08-23T04:52:32.371788Z",
  "end_time": "2026-08-23T04:52:36.574767Z",
  "duration": "4.2",
  "version": "SSH-2.0-Fingerprintx-SSH2",
  "hassh": "4e066189c3bbeec38c99b1855113733a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

102.0.7.14

2026-08-23 04:52:17.741784 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f2173df8e848

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "f2173df8e848",
  "src_ip": "102.0.7.14",
  "start_time": "2026-08-23T04:52:17.741784Z",
  "end_time": "2026-08-23T04:52:17.742786Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.122.53

2026-08-23 04:51:17.319180 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / root@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: f6d4c7842a4e

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f6d4c7842a4e",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:51:17.319180Z",
  "end_time": "2026-08-23T04:51:18.728390Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root@123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

2.57.122.53

2026-08-23 04:48:21.677919 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / test@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 63dca9c34b3d

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "63dca9c34b3d",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:48:21.677919Z",
  "end_time": "2026-08-23T04:48:22.919912Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "test@123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.33.14.5

2026-08-23 04:45:40.476399 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 138e98e11583

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "138e98e11583",
  "src_ip": "45.33.14.5",
  "start_time": "2026-08-23T04:45:40.476399Z",
  "end_time": "2026-08-23T04:45:40.678502Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.122.53

2026-08-23 04:45:32.969103 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / admin@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: d5dd4d4bd217

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "d5dd4d4bd217",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:45:32.969103Z",
  "end_time": "2026-08-23T04:45:34.206554Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "admin@123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

148.227.74.213

2026-08-23 04:44:40.018694 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8a3485e69adf

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "8a3485e69adf",
  "src_ip": "148.227.74.213",
  "start_time": "2026-08-23T04:44:40.018694Z",
  "end_time": "2026-08-23T04:44:40.022123Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

217.60.255.130

2026-08-23 04:43:41.539446 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / abc1234.

Record ID: e534c3c25603

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "e534c3c25603",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T04:43:41.539446Z",
  "end_time": "2026-08-23T04:43:43.666578Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abc1234."
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

217.60.255.130

2026-08-23 04:43:37.954602 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / P@@ssw0rd

Record ID: 4478eeb5d513

Client Version: SSH-2.0-libssh_0.10.4

Engagement Duration: 2.1s

HASSH Fingerprint: 419da4c91ddbffebead14645bebc93b9

{
  "id": "4478eeb5d513",
  "src_ip": "217.60.255.130",
  "start_time": "2026-08-23T04:43:37.954602Z",
  "end_time": "2026-08-23T04:43:40.026308Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.10.4",
  "hassh": "419da4c91ddbffebead14645bebc93b9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "P@@ssw0rd"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

148.227.74.213

2026-08-23 04:43:30.220702 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b3661a1a1d24

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "b3661a1a1d24",
  "src_ip": "148.227.74.213",
  "start_time": "2026-08-23T04:43:30.220702Z",
  "end_time": "2026-08-23T04:43:30.223990Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.122.53

2026-08-23 04:42:50.231948 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lthpc

Record ID: fc2b5c32ec7e

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "fc2b5c32ec7e",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:42:50.231948Z",
  "end_time": "2026-08-23T04:42:52.074620Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lthpc",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.137

2026-08-23 04:40:21.778331 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: da0d7804cd51

Client Version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6

Engagement Duration: 0.3s

{
  "id": "da0d7804cd51",
  "src_ip": "195.178.110.137",
  "start_time": "2026-08-23T04:40:21.778331Z",
  "end_time": "2026-08-23T04:40:22.103311Z",
  "duration": "0.3",
  "version": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.122.53

2026-08-23 04:40:06.378213 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lthpc

Record ID: 6d93939934aa

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "6d93939934aa",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:40:06.378213Z",
  "end_time": "2026-08-23T04:40:08.216988Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lthpc",
      "pass": "lthpc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.53

2026-08-23 04:37:22.435348 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lthpc

Record ID: c3a5279f8fb1

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c3a5279f8fb1",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:37:22.435348Z",
  "end_time": "2026-08-23T04:37:24.275301Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lthpc",
      "pass": "Lt111111"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.53

2026-08-23 04:34:26.484767 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Lt111111

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 476813dd47fd

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "476813dd47fd",
  "src_ip": "2.57.122.53",
  "start_time": "2026-08-23T04:34:26.484767Z",
  "end_time": "2026-08-23T04:34:27.773196Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Lt111111"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}