Adversarial Observation Interface

64.226.70.222

2026-09-25 09:49:54.289492 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ib6ub9

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: cba84ccfd56a

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "cba84ccfd56a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:54.289492Z",
  "end_time": "2026-09-25T09:49:55.803544Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ib6ub9"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:52.805161 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / illinois

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 626c9e3d50b2

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "626c9e3d50b2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:52.805161Z",
  "end_time": "2026-09-25T09:49:54.138053Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "illinois"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:51.180104 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jockey

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: fc93ea75165c

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "fc93ea75165c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:51.180104Z",
  "end_time": "2026-09-25T09:49:52.656597Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jockey"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:50.325220 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: media

Record ID: 250e352aafb3

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "250e352aafb3",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:50.325220Z",
  "end_time": "2026-09-25T09:49:52.564293Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "media",
      "pass": "rock"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:49.640849 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / keegan

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 845598d83304

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "845598d83304",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:49.640849Z",
  "end_time": "2026-09-25T09:49:51.030199Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "keegan"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:47.213571 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / kissing

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 474958b1f13e

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "474958b1f13e",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:47.213571Z",
  "end_time": "2026-09-25T09:49:49.459899Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "kissing"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:45.696206 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / lynn

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1b89f83a9b9a

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1b89f83a9b9a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:45.696206Z",
  "end_time": "2026-09-25T09:49:47.060929Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "lynn"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:45.017564 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: 04168031c944

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "04168031c944",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:45.017564Z",
  "end_time": "2026-09-25T09:49:47.108939Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:43.989253 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / meng

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c20fe988f341

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c20fe988f341",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:43.989253Z",
  "end_time": "2026-09-25T09:49:45.547849Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "meng"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:42.016233 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / michae

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 3a802bb1dd18

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "3a802bb1dd18",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:42.016233Z",
  "end_time": "2026-09-25T09:49:43.782022Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "michae"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:40.643262 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mollydog

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 63adc3d9cf70

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "63adc3d9cf70",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:40.643262Z",
  "end_time": "2026-09-25T09:49:41.869039Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mollydog"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:39.263801 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: user / 12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e18372778fc7

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e18372778fc7",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:39.263801Z",
  "end_time": "2026-09-25T09:49:40.816301Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "12345"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:39.123676 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / monte

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 6e26f6cbc9db

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "6e26f6cbc9db",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:39.123676Z",
  "end_time": "2026-09-25T09:49:40.494320Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "monte"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:36.528582 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / niao

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 8eba95b1b778

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "8eba95b1b778",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:36.528582Z",
  "end_time": "2026-09-25T09:49:38.965326Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "niao"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:34.795830 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pippin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0b29febd55ec

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0b29febd55ec",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:34.795830Z",
  "end_time": "2026-09-25T09:49:36.332668Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pippin"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:33.819294 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nominatim

Record ID: 3b799c50af44

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3b799c50af44",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:33.819294Z",
  "end_time": "2026-09-25T09:49:35.853057Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nominatim",
      "pass": "nominatim123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:33.221158 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pothead

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 792ef3111fae

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "792ef3111fae",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:33.221158Z",
  "end_time": "2026-09-25T09:49:34.644023Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pothead"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:31.377373 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pussey

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: aa72802ff3f8

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "aa72802ff3f8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:31.377373Z",
  "end_time": "2026-09-25T09:49:33.073393Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pussey"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

96.62.71.5

2026-09-25 09:49:31.005885 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SFTP_CHECK

Record ID: 127104b97484

Client Version: SSH-2.0-Go

Engagement Duration: 0.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "127104b97484",
  "src_ip": "96.62.71.5",
  "start_time": "2026-09-25T09:49:31.005885Z",
  "end_time": "2026-09-25T09:49:31.158833Z",
  "duration": "0.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "echo SFTP_CHECK"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SFTP_CHECK",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

96.62.71.5

2026-09-25 09:49:30.975901 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a484918834c9

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "a484918834c9",
  "src_ip": "96.62.71.5",
  "start_time": "2026-09-25T09:49:30.975901Z",
  "end_time": "2026-09-25T09:49:30.993730Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

96.62.71.5

2026-09-25 09:49:30.974886 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9e046a2c178c

Client Version: SSH-2.0-Go_rawssh_1.0

Engagement Duration: 0.0s

HASSH Fingerprint: 6c6da52307978db65609fa3c6e720e4c

{
  "id": "9e046a2c178c",
  "src_ip": "96.62.71.5",
  "start_time": "2026-09-25T09:49:30.974886Z",
  "end_time": "2026-09-25T09:49:31.025028Z",
  "duration": "0.0",
  "version": "SSH-2.0-Go_rawssh_1.0",
  "hassh": "6c6da52307978db65609fa3c6e720e4c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

64.226.70.222

2026-09-25 09:49:29.203376 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / qqqqqqq

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b1a67133dfb0

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b1a67133dfb0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:29.203376Z",
  "end_time": "2026-09-25T09:49:31.189482Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qqqqqqq"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:28.157411 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gayan

Record ID: b0b1c9f611f0

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b0b1c9f611f0",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:28.157411Z",
  "end_time": "2026-09-25T09:49:30.448162Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gayan",
      "pass": "gayan123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:27.597310 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / rolling

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: f84f09cee90c

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "f84f09cee90c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:27.597310Z",
  "end_time": "2026-09-25T09:49:29.020058Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "rolling"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:26.081158 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sander

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 05d785feba07

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "05d785feba07",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:26.081158Z",
  "end_time": "2026-09-25T09:49:27.447622Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sander"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:23.699761 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / shei

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 885d207bb02c

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "885d207bb02c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:23.699761Z",
  "end_time": "2026-09-25T09:49:25.895797Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "shei"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:22.357471 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / stanford

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: da721f5e2be5

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "da721f5e2be5",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:22.357471Z",
  "end_time": "2026-09-25T09:49:23.551860Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "stanford"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:22.058592 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Aa112211

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 13a22a416a02

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "13a22a416a02",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:22.058592Z",
  "end_time": "2026-09-25T09:49:23.685670Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa112211"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:20.823020 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / templar

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 44672570f88c

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "44672570f88c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:20.823020Z",
  "end_time": "2026-09-25T09:49:22.210878Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "templar"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:18.602500 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / xxxpass

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 6f01f2b887d3

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "6f01f2b887d3",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:18.602500Z",
  "end_time": "2026-09-25T09:49:20.675157Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "xxxpass"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:16.499021 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser

Record ID: 2c5cd367269b

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2c5cd367269b",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:16.499021Z",
  "end_time": "2026-09-25T09:49:18.972594Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "rdpuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:15.930570 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02031984

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 01e121c3232b

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "01e121c3232b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:15.930570Z",
  "end_time": "2026-09-25T09:49:18.418678Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02031984"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:13.835812 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / adam12

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1dd53d3ebcc9

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1dd53d3ebcc9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:13.835812Z",
  "end_time": "2026-09-25T09:49:15.752940Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "adam12"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:11.752166 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ashlee

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a6ae75a3fce4

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a6ae75a3fce4",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:11.752166Z",
  "end_time": "2026-09-25T09:49:13.605574Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ashlee"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:11.133497 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wjw

Record ID: 9a8325fb0ec2

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9a8325fb0ec2",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:11.133497Z",
  "end_time": "2026-09-25T09:49:13.607257Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "wjw",
      "pass": "wjw2019"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:09.964695 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / beautifu

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: afcb7282eab9

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "afcb7282eab9",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:09.964695Z",
  "end_time": "2026-09-25T09:49:11.574423Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "beautifu"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:08.277529 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / buffy1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 323ea0f508a5

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "323ea0f508a5",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:08.277529Z",
  "end_time": "2026-09-25T09:49:09.808508Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "buffy1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:05.948063 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ceng

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: fa1375206948

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "fa1375206948",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:05.948063Z",
  "end_time": "2026-09-25T09:49:08.128725Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ceng"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:05.814977 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: paas

Record ID: 3ced6f000341

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3ced6f000341",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:05.814977Z",
  "end_time": "2026-09-25T09:49:08.000295Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "paas",
      "pass": "Huawei12"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:04.246132 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / checkers

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: b78cee6c762a

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "b78cee6c762a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:04.246132Z",
  "end_time": "2026-09-25T09:49:05.783159Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "checkers"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:02.198056 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / flexible

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: e269080bad03

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "e269080bad03",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:02.198056Z",
  "end_time": "2026-09-25T09:49:04.098990Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "flexible"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:49:00.951573 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vyos

Record ID: 533a4c468278

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "533a4c468278",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:49:00.951573Z",
  "end_time": "2026-09-25T09:49:02.874564Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "vyos",
      "pass": "vyos"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:49:00.009548 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fuzzy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1e34d0a386b0

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1e34d0a386b0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:49:00.009548Z",
  "end_time": "2026-09-25T09:49:01.945027Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fuzzy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:48:58.380892 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fytxrf

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ed4165b42b46

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ed4165b42b46",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:58.380892Z",
  "end_time": "2026-09-25T09:48:59.838274Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fytxrf"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:48:56.455323 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gawker

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ea8a030b44e0

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ea8a030b44e0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:56.455323Z",
  "end_time": "2026-09-25T09:48:58.209153Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gawker"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:48:55.150597 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 56779acb3693

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "56779acb3693",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:55.150597Z",
  "end_time": "2026-09-25T09:48:56.806262Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

195.88.120.62

2026-09-25 09:48:53.964381 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 65d119ad5f95

Client Version: Unknown

Engagement Duration: 2.9s

{
  "id": "65d119ad5f95",
  "src_ip": "195.88.120.62",
  "start_time": "2026-09-25T09:48:53.964381Z",
  "end_time": "2026-09-25T09:48:56.825655Z",
  "duration": "2.9",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

64.226.70.222

2026-09-25 09:48:53.347565 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gobucks

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 57a7430bd7b8

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "57a7430bd7b8",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:53.347565Z",
  "end_time": "2026-09-25T09:48:56.258085Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gobucks"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:48:50.948536 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hardcock

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c10ce30d68f2

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c10ce30d68f2",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:48:50.948536Z",
  "end_time": "2026-09-25T09:48:53.174895Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hardcock"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:48:49.822525 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3991e1f1e05a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3991e1f1e05a",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:48:49.822525Z",
  "end_time": "2026-09-25T09:48:51.607474Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}