Adversarial Observation Interface

64.226.70.222

2026-09-25 04:50:20.559961 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / TIGROU

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 5084e3ea1c51

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "5084e3ea1c51",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:20.559961Z",
  "end_time": "2026-09-25T04:50:22.177050Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "TIGROU"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:18.902565 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / agnes1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 87310a7d2ffc

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "87310a7d2ffc",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:18.902565Z",
  "end_time": "2026-09-25T04:50:20.411880Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "agnes1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:50:18.410429 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 76543211

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 938a3bee6aaf

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "938a3bee6aaf",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:50:18.410429Z",
  "end_time": "2026-09-25T04:50:19.765577Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "76543211"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:17.172542 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / akira1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ea1d62d2a4cf

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ea1d62d2a4cf",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:17.172542Z",
  "end_time": "2026-09-25T04:50:18.754474Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "akira1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:14.427541 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / akissi

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b1ae879a8ece

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b1ae879a8ece",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:14.427541Z",
  "end_time": "2026-09-25T04:50:16.958582Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "akissi"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:50:13.457941 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix

Record ID: 591320a0c231

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "591320a0c231",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:50:13.457941Z",
  "end_time": "2026-09-25T04:50:15.411082Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bitrix",
      "pass": "bitrix"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:12.718949 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ambrine

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: f8db585f7cde

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "f8db585f7cde",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:12.718949Z",
  "end_time": "2026-09-25T04:50:14.258341Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ambrine"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:10.336311 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / anaana

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 33f2c6c56cd2

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "33f2c6c56cd2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:10.336311Z",
  "end_time": "2026-09-25T04:50:12.571310Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "anaana"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:50:09.066933 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123123aaa

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a3e79d452662

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a3e79d452662",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:50:09.066933Z",
  "end_time": "2026-09-25T04:50:10.412134Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123123aaa"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:08.360303 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ankara

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b73800d37cb1

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b73800d37cb1",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:08.360303Z",
  "end_time": "2026-09-25T04:50:10.130148Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ankara"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:06.718244 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / anselme

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 4071c7a963bf

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "4071c7a963bf",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:06.718244Z",
  "end_time": "2026-09-25T04:50:08.212850Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "anselme"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:05.013278 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / austerlitz

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 207f9bd45e46

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "207f9bd45e46",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:05.013278Z",
  "end_time": "2026-09-25T04:50:06.529182Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "austerlitz"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:50:04.165156 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nginx

Record ID: 6ef209635204

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6ef209635204",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:50:04.165156Z",
  "end_time": "2026-09-25T04:50:06.175081Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nginx",
      "pass": "toor"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:02.344198 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azerty35

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 48614f075c8d

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "48614f075c8d",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:02.344198Z",
  "end_time": "2026-09-25T04:50:04.811509Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azerty35"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:50:00.004161 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azerty84

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b81e763efd53

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b81e763efd53",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:50:00.004161Z",
  "end_time": "2026-09-25T04:50:02.163179Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azerty84"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:59.691275 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 0

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b589ecf337c9

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b589ecf337c9",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:59.691275Z",
  "end_time": "2026-09-25T04:50:00.899949Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "0"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:58.314394 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azerty974

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c6319d354de9

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c6319d354de9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:58.314394Z",
  "end_time": "2026-09-25T04:49:59.857181Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azerty974"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:56.542525 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azi

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 264c7a8ca343

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "264c7a8ca343",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:56.542525Z",
  "end_time": "2026-09-25T04:49:58.069318Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azi"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:54.968092 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / adgjmptw

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 507bc3be3e50

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "507bc3be3e50",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:54.968092Z",
  "end_time": "2026-09-25T04:49:56.691983Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "adgjmptw"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:54.721518 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bamba

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 215fff1ad12f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "215fff1ad12f",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:54.721518Z",
  "end_time": "2026-09-25T04:49:56.522808Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bamba"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:52.394029 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bassem

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0c68b7091abd

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0c68b7091abd",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:52.394029Z",
  "end_time": "2026-09-25T04:49:54.546384Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bassem"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:50.358248 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bavaria

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 91289d93a504

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "91289d93a504",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:50.358248Z",
  "end_time": "2026-09-25T04:49:52.199287Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bavaria"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:50.222137 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: appuser

Record ID: 5b69f43dcd97

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5b69f43dcd97",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:50.222137Z",
  "end_time": "2026-09-25T04:49:52.353132Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "appuser",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:48.841082 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bbbbbbbb

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 12fb8184b446

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "12fb8184b446",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:48.841082Z",
  "end_time": "2026-09-25T04:49:50.151632Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bbbbbbbb"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:47.209033 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bechir

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: dc64180ab630

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "dc64180ab630",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:47.209033Z",
  "end_time": "2026-09-25T04:49:48.693275Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bechir"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:45.424075 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser

Record ID: 560589804019

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "560589804019",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:45.424075Z",
  "end_time": "2026-09-25T04:49:47.725454Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "rdpuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:45.292974 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / belmondo

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 7706dea29752

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "7706dea29752",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:45.292974Z",
  "end_time": "2026-09-25T04:49:46.939624Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "belmondo"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:43.642843 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bentley

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 93a44003da31

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "93a44003da31",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:43.642843Z",
  "end_time": "2026-09-25T04:49:45.142403Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bentley"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:41.826771 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bhabykoh1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 95a299d70278

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "95a299d70278",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:41.826771Z",
  "end_time": "2026-09-25T04:49:43.493276Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bhabykoh1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:41.034068 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sam

Record ID: be34ca49c124

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "be34ca49c124",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:41.034068Z",
  "end_time": "2026-09-25T04:49:43.121050Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sam",
      "pass": "sam"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:40.018098 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bikini

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 2dc35d9ccbaf

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "2dc35d9ccbaf",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:40.018098Z",
  "end_time": "2026-09-25T04:49:41.669952Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bikini"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:38.080543 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bismiallah

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0238195ec09f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0238195ec09f",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:38.080543Z",
  "end_time": "2026-09-25T04:49:39.861436Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bismiallah"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:36.530302 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / blanc

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: de12473ec810

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "de12473ec810",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:36.530302Z",
  "end_time": "2026-09-25T04:49:37.914192Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "blanc"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:35.964850 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: test / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e9de0181081b

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e9de0181081b",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:35.964850Z",
  "end_time": "2026-09-25T04:49:37.397403Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "123456789"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:34.910422 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / boby

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b034233d237b

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b034233d237b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:34.910422Z",
  "end_time": "2026-09-25T04:49:36.383191Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "boby"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:32.690301 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bolton

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b275f38ce7e2

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b275f38ce7e2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:32.690301Z",
  "end_time": "2026-09-25T04:49:34.687462Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bolton"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:31.283585 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / As123321

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 92c8427a2533

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "92c8427a2533",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:31.283585Z",
  "end_time": "2026-09-25T04:49:32.774245Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "As123321"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:30.567059 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bonjour2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 815354065855

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "815354065855",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:30.567059Z",
  "end_time": "2026-09-25T04:49:32.473496Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bonjour2"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:28.674197 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / boobies

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 07040a40dcd4

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "07040a40dcd4",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:28.674197Z",
  "end_time": "2026-09-25T04:49:30.412211Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "boobies"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:26.770800 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: joel

Record ID: 4257b0f4daf4

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4257b0f4daf4",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:26.770800Z",
  "end_time": "2026-09-25T04:49:28.946616Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "joel",
      "pass": "joel"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:26.680650 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / brabus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: df0d943f7dd9

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "df0d943f7dd9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:26.680650Z",
  "end_time": "2026-09-25T04:49:28.501669Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "brabus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:24.829663 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / breizh29

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1fbddce0112a

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1fbddce0112a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:24.829663Z",
  "end_time": "2026-09-25T04:49:26.506319Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "breizh29"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:23.298907 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / cambrai

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 020d8a93e927

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "020d8a93e927",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:23.298907Z",
  "end_time": "2026-09-25T04:49:24.681478Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "cambrai"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:22.000290 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openclaw

Record ID: 790c99926f16

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "790c99926f16",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:22.000290Z",
  "end_time": "2026-09-25T04:49:23.869981Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openclaw",
      "pass": "openclaw"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:21.258917 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / camilia

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: e49b62fa94cc

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "e49b62fa94cc",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:21.258917Z",
  "end_time": "2026-09-25T04:49:23.136951Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "camilia"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:19.569077 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / camille2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 7c46b7952672

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "7c46b7952672",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:19.569077Z",
  "end_time": "2026-09-25T04:49:21.109348Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "camille2"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:17.854124 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / caraibe

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a70071472839

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a70071472839",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:17.854124Z",
  "end_time": "2026-09-25T04:49:19.421332Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "caraibe"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.110

2026-09-25 04:49:17.305095 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 111111

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b4c699f03949

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b4c699f03949",
  "src_ip": "109.160.32.110",
  "start_time": "2026-09-25T04:49:17.305095Z",
  "end_time": "2026-09-25T04:49:19.042244Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "111111"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:15.722270 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / carlin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 076df9948a70

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "076df9948a70",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:15.722270Z",
  "end_time": "2026-09-25T04:49:17.696973Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "carlin"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 04:49:14.101859 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / catdog

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 4875bcfd38f8

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "4875bcfd38f8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T04:49:14.101859Z",
  "end_time": "2026-09-25T04:49:15.573477Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "catdog"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}