Adversarial Observation Interface

109.160.32.86

2026-09-15 04:51:22.112252 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newuser

Record ID: 5adcc1954dca

Client Version: SSH-2.0-Go

Engagement Duration: 13.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5adcc1954dca",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:51:22.112252Z",
  "end_time": "2026-09-15T04:51:35.457767Z",
  "duration": "13.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "newuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:51:07.041499 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newuser

Record ID: 54bf43e0d5e7

Client Version: SSH-2.0-Go

Engagement Duration: 15.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "54bf43e0d5e7",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:51:07.041499Z",
  "end_time": "2026-09-15T04:51:22.324681Z",
  "duration": "15.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "newuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:50:56.597829 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 50eecf0cdeec

Client Version: SSH-2.0-Go

Engagement Duration: 21.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "50eecf0cdeec",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:50:56.597829Z",
  "end_time": "2026-09-15T04:51:17.561660Z",
  "duration": "21.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:50:44.030925 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 533047964fba

Client Version: SSH-2.0-Go

Engagement Duration: 21.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "533047964fba",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:50:44.030925Z",
  "end_time": "2026-09-15T04:51:05.769459Z",
  "duration": "21.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:50:31.455827 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer

Record ID: c8ded5b22e50

Client Version: SSH-2.0-Go

Engagement Duration: 17.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c8ded5b22e50",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:50:31.455827Z",
  "end_time": "2026-09-15T04:50:48.744073Z",
  "duration": "17.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "deployer",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:50:18.965929 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / bookworm

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 284320bf968c

Client Version: SSH-2.0-Go

Engagement Duration: 18.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "284320bf968c",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:50:18.965929Z",
  "end_time": "2026-09-15T04:50:37.848907Z",
  "duration": "18.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bookworm"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:50:04.737978 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: 10d5a508f9b6

Client Version: SSH-2.0-Go

Engagement Duration: 16.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "10d5a508f9b6",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:50:04.737978Z",
  "end_time": "2026-09-15T04:50:21.603112Z",
  "duration": "16.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "operator",
      "pass": "operator9"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:49:52.025777 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / redhat

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9131366a88a9

Client Version: SSH-2.0-Go

Engagement Duration: 24.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9131366a88a9",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:49:52.025777Z",
  "end_time": "2026-09-15T04:50:16.256666Z",
  "duration": "24.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "redhat"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:49:37.157953 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / redhat

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 15b18be5258d

Client Version: SSH-2.0-Go

Engagement Duration: 20.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "15b18be5258d",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:49:37.157953Z",
  "end_time": "2026-09-15T04:49:57.229555Z",
  "duration": "20.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "redhat"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:49:25.061776 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader

Record ID: 791bdebe9c6b

Client Version: SSH-2.0-Go

Engagement Duration: 19.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "791bdebe9c6b",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:49:25.061776Z",
  "end_time": "2026-09-15T04:49:44.831556Z",
  "duration": "19.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "trader",
      "pass": "trader"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:49:14.189846 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader

Record ID: ee6972809ff7

Client Version: SSH-2.0-Go

Engagement Duration: 18.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ee6972809ff7",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:49:14.189846Z",
  "end_time": "2026-09-15T04:49:32.824957Z",
  "duration": "18.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "trader",
      "pass": "trader"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:48:57.484727 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mapingyuan

Record ID: fcfb2309a19b

Client Version: SSH-2.0-Go

Engagement Duration: 23.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "fcfb2309a19b",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:48:57.484727Z",
  "end_time": "2026-09-15T04:49:21.105102Z",
  "duration": "23.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "mapingyuan",
      "pass": "qwe123!@"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:48:41.788414 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / cyril

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1f834849c0ae

Client Version: SSH-2.0-Go

Engagement Duration: 35.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1f834849c0ae",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:48:41.788414Z",
  "end_time": "2026-09-15T04:49:17.702083Z",
  "duration": "35.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cyril"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:48:35.205111 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / passwd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a560365f85b1

Client Version: SSH-2.0-Go

Engagement Duration: 36.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a560365f85b1",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:48:35.205111Z",
  "end_time": "2026-09-15T04:49:11.736236Z",
  "duration": "36.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "passwd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

198.235.24.83

2026-09-15 04:48:26.779861 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 068b959a8737

Client Version: SSH-2.0-ZGrab ZGrab SSH Survey

Engagement Duration: 3.0s

HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0

{
  "id": "068b959a8737",
  "src_ip": "198.235.24.83",
  "start_time": "2026-09-15T04:48:26.779861Z",
  "end_time": "2026-09-15T04:48:29.769868Z",
  "duration": "3.0",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.86

2026-09-15 04:48:22.383285 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / passwd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1a1939839146

Client Version: SSH-2.0-Go

Engagement Duration: 34.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1a1939839146",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:48:22.383285Z",
  "end_time": "2026-09-15T04:48:56.555797Z",
  "duration": "34.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "passwd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:48:11.345895 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / changeme

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 846d81942ccb

Client Version: SSH-2.0-Go

Engagement Duration: 26.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "846d81942ccb",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:48:11.345895Z",
  "end_time": "2026-09-15T04:48:38.179404Z",
  "duration": "26.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "changeme"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:47:58.001240 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / changeme

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 7bad0e1c8322

Client Version: SSH-2.0-Go

Engagement Duration: 23.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7bad0e1c8322",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:47:58.001240Z",
  "end_time": "2026-09-15T04:48:21.836131Z",
  "duration": "23.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "changeme"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:47:46.657577 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 147258

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9d90feef2b04

Client Version: SSH-2.0-Go

Engagement Duration: 27.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9d90feef2b04",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:47:46.657577Z",
  "end_time": "2026-09-15T04:48:14.258434Z",
  "duration": "27.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "147258"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:47:35.681264 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 147258

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2bc9fb26d9bf

Client Version: SSH-2.0-Go

Engagement Duration: 20.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2bc9fb26d9bf",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:47:35.681264Z",
  "end_time": "2026-09-15T04:47:55.817116Z",
  "duration": "20.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "147258"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:47:25.704771 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / root123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3bb77db77263

Client Version: SSH-2.0-Go

Engagement Duration: 14.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3bb77db77263",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:47:25.704771Z",
  "end_time": "2026-09-15T04:47:40.381717Z",
  "duration": "14.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "root123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:47:09.946675 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / root123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 8b2b96fe5e83

Client Version: SSH-2.0-Go

Engagement Duration: 21.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8b2b96fe5e83",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:47:09.946675Z",
  "end_time": "2026-09-15T04:47:31.472188Z",
  "duration": "21.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "root123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:58.624119 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pepe

Record ID: 6595a2b4b7c3

Client Version: SSH-2.0-Go

Engagement Duration: 19.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6595a2b4b7c3",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:58.624119Z",
  "end_time": "2026-09-15T04:47:18.416536Z",
  "duration": "19.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pepe",
      "pass": "pepe"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:48.999931 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 12341234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6fd621c3a97b

Client Version: SSH-2.0-Go

Engagement Duration: 22.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6fd621c3a97b",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:48.999931Z",
  "end_time": "2026-09-15T04:47:11.239028Z",
  "duration": "22.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12341234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:36.894041 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 12341234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2a18d98fb78f

Client Version: SSH-2.0-Go

Engagement Duration: 19.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2a18d98fb78f",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:36.894041Z",
  "end_time": "2026-09-15T04:46:55.849904Z",
  "duration": "19.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12341234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:26.550121 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / MAGICROOTPASSWORD

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: d053dff64825

Client Version: SSH-2.0-Go

Engagement Duration: 15.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d053dff64825",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:26.550121Z",
  "end_time": "2026-09-15T04:46:41.966426Z",
  "duration": "15.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "MAGICROOTPASSWORD"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:16.128561 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / koolshare

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 7b03e8359f48

Client Version: SSH-2.0-Go

Engagement Duration: 10.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7b03e8359f48",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:16.128561Z",
  "end_time": "2026-09-15T04:46:26.848973Z",
  "duration": "10.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "koolshare"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:46:01.131324 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openclaw

Record ID: 23211c7969f0

Client Version: SSH-2.0-Go

Engagement Duration: 12.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "23211c7969f0",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:46:01.131324Z",
  "end_time": "2026-09-15T04:46:14.075965Z",
  "duration": "12.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openclaw",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:45:47.663164 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openclaw

Record ID: 1f191736ad06

Client Version: SSH-2.0-Go

Engagement Duration: 20.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1f191736ad06",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:45:47.663164Z",
  "end_time": "2026-09-15T04:46:07.841763Z",
  "duration": "20.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openclaw",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:45:35.220991 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 1234qwer

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 318396500c06

Client Version: SSH-2.0-Go

Engagement Duration: 29.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "318396500c06",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:45:35.220991Z",
  "end_time": "2026-09-15T04:46:04.323440Z",
  "duration": "29.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "1234qwer"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:45:22.477664 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 1234qwer

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5ede31311242

Client Version: SSH-2.0-Go

Engagement Duration: 27.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5ede31311242",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:45:22.477664Z",
  "end_time": "2026-09-15T04:45:49.976110Z",
  "duration": "27.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "1234qwer"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.130

2026-09-15 04:45:21.055255 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3ce236e919b6

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "3ce236e919b6",
  "src_ip": "77.239.124.130",
  "start_time": "2026-09-15T04:45:21.055255Z",
  "end_time": "2026-09-15T04:45:21.300671Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.86

2026-09-15 04:45:13.369674 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 88888888

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5ca984fd9973

Client Version: SSH-2.0-Go

Engagement Duration: 21.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5ca984fd9973",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:45:13.369674Z",
  "end_time": "2026-09-15T04:45:35.310317Z",
  "duration": "21.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "88888888"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:45:02.180708 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 88888888

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 953eaeacec1f

Client Version: SSH-2.0-Go

Engagement Duration: 11.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "953eaeacec1f",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:45:02.180708Z",
  "end_time": "2026-09-15T04:45:14.124283Z",
  "duration": "11.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "88888888"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:44:39.534995 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 68df32b03d94

Client Version: SSH-2.0-Go

Engagement Duration: 23.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "68df32b03d94",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:44:39.534995Z",
  "end_time": "2026-09-15T04:45:02.642348Z",
  "duration": "23.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "12345678"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:44:16.597727 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: postgres / postgres123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 7ed99554b57f

Client Version: SSH-2.0-Go

Engagement Duration: 42.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7ed99554b57f",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:44:16.597727Z",
  "end_time": "2026-09-15T04:44:59.244975Z",
  "duration": "42.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "postgres123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:44:10.440229 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nginx

Record ID: bb24e3d3bf6e

Client Version: SSH-2.0-Go

Engagement Duration: 40.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bb24e3d3bf6e",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:44:10.440229Z",
  "end_time": "2026-09-15T04:44:51.344314Z",
  "duration": "40.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nginx",
      "pass": "nginx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:44:02.919449 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nginx

Record ID: cdada8f94607

Client Version: SSH-2.0-Go

Engagement Duration: 38.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "cdada8f94607",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:44:02.919449Z",
  "end_time": "2026-09-15T04:44:41.845818Z",
  "duration": "38.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nginx",
      "pass": "nginx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:43:39.794606 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / root123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: d792386c8c56

Client Version: SSH-2.0-Go

Engagement Duration: 50.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d792386c8c56",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:43:39.794606Z",
  "end_time": "2026-09-15T04:44:30.616972Z",
  "duration": "50.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:43:21.170283 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / root123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: f421071adc7b

Client Version: SSH-2.0-Go

Engagement Duration: 52.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f421071adc7b",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:43:21.170283Z",
  "end_time": "2026-09-15T04:44:13.129525Z",
  "duration": "52.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:43:13.023977 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / zaq123zaq

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: cf88b632b14a

Client Version: SSH-2.0-Go

Engagement Duration: 54.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "cf88b632b14a",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:43:13.023977Z",
  "end_time": "2026-09-15T04:44:07.728509Z",
  "duration": "54.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zaq123zaq"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:43:04.890975 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9125790b156b

Client Version: SSH-2.0-Go

Engagement Duration: 57.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9125790b156b",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:43:04.890975Z",
  "end_time": "2026-09-15T04:44:02.228500Z",
  "duration": "57.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:42:57.418853 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1688ed5860bb

Client Version: SSH-2.0-Go

Engagement Duration: 50.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1688ed5860bb",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:42:57.418853Z",
  "end_time": "2026-09-15T04:43:47.589137Z",
  "duration": "50.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:42:25.176035 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / ubuntu@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 65fa2b675fd3

Client Version: SSH-2.0-Go

Engagement Duration: 26.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "65fa2b675fd3",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:42:25.176035Z",
  "end_time": "2026-09-15T04:42:51.862611Z",
  "duration": "26.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ubuntu@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:42:16.758135 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / ubuntu@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: be946e04d1cd

Client Version: SSH-2.0-Go

Engagement Duration: 33.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "be946e04d1cd",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:42:16.758135Z",
  "end_time": "2026-09-15T04:42:50.297517Z",
  "duration": "33.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ubuntu@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:41:55.196942 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 111290

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: c815c1a5ac31

Client Version: SSH-2.0-Go

Engagement Duration: 54.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c815c1a5ac31",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:41:55.196942Z",
  "end_time": "2026-09-15T04:42:49.822927Z",
  "duration": "54.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "111290"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:41:48.794115 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 110

Credential acceptance event recorded. Target authentication: root / qwerty12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 4bb38a9655de

Client Version: SSH-2.0-Go

Engagement Duration: 1m 10s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4bb38a9655de",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:41:48.794115Z",
  "end_time": "2026-09-15T04:42:58.962702Z",
  "duration": "70.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwerty12345"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 110,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:41:41.818316 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 110

Credential acceptance event recorded. Target authentication: root / qwerty12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: c44210852339

Client Version: SSH-2.0-Go

Engagement Duration: 1m 20s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c44210852339",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:41:41.818316Z",
  "end_time": "2026-09-15T04:43:01.865967Z",
  "duration": "80.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwerty12345"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 110,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:41:21.214857 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: factorio

Record ID: 3274e5c9aa1e

Client Version: SSH-2.0-Go

Engagement Duration: 56.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3274e5c9aa1e",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:41:21.214857Z",
  "end_time": "2026-09-15T04:42:18.163301Z",
  "duration": "56.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "factorio",
      "pass": "factorio"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.86

2026-09-15 04:41:14.194572 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: devops

Record ID: b82f63849c48

Client Version: SSH-2.0-Go

Engagement Duration: 53.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b82f63849c48",
  "src_ip": "109.160.32.86",
  "start_time": "2026-09-15T04:41:14.194572Z",
  "end_time": "2026-09-15T04:42:07.451852Z",
  "duration": "53.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "devops",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}