Adversarial Observation Interface

64.226.70.222

2026-09-25 09:57:46.436705 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mikey1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: bd4f7a1099df

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "bd4f7a1099df",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:46.436705Z",
  "end_time": "2026-09-25T09:57:47.910984Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mikey1"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:44.341150 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / misfits

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 65d82791d425

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "65d82791d425",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:44.341150Z",
  "end_time": "2026-09-25T09:57:46.235565Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "misfits"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:42.565503 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / niang

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 33a6788c2a47

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "33a6788c2a47",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:42.565503Z",
  "end_time": "2026-09-25T09:57:44.175776Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "niang"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:42.012970 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openvpn

Record ID: f8423a745975

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f8423a745975",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:42.012970Z",
  "end_time": "2026-09-25T09:57:44.150515Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openvpn",
      "pass": "openvpn"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:40.931681 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / park

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c418711efa5e

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c418711efa5e",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:40.931681Z",
  "end_time": "2026-09-25T09:57:42.418789Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "park"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:39.168864 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / preacher

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 3474be164e41

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "3474be164e41",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:39.168864Z",
  "end_time": "2026-09-25T09:57:40.744794Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "preacher"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:37.612209 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pussyman

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: d4a47a959437

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "d4a47a959437",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:37.612209Z",
  "end_time": "2026-09-25T09:57:39.021144Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pussyman"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:36.272290 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / AHYDDhcp$2025

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 87f942811634

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "87f942811634",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:36.272290Z",
  "end_time": "2026-09-25T09:57:37.685221Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "AHYDDhcp$2025"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:36.233119 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / reds

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: fe9ecc80791c

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "fe9ecc80791c",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:36.233119Z",
  "end_time": "2026-09-25T09:57:37.514560Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "reds"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:34.758138 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / rufus

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 29a600896d87

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "29a600896d87",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:34.758138Z",
  "end_time": "2026-09-25T09:57:36.062394Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "rufus"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:32.746076 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / salasana

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0b58a8c17341

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0b58a8c17341",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:32.746076Z",
  "end_time": "2026-09-25T09:57:34.596986Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "salasana"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:31.024120 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / screen

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: af85b9919e91

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "af85b9919e91",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:31.024120Z",
  "end_time": "2026-09-25T09:57:32.568150Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "screen"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:30.339697 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@55w0rd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 91fdd0a6bace

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "91fdd0a6bace",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:30.339697Z",
  "end_time": "2026-09-25T09:57:32.307399Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@55w0rd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:29.628276 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sheba

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 48dd7fcba807

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "48dd7fcba807",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:29.628276Z",
  "end_time": "2026-09-25T09:57:30.876654Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sheba"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:27.926193 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / shitface

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 390e221dc264

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "390e221dc264",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:27.926193Z",
  "end_time": "2026-09-25T09:57:29.476163Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "shitface"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:26.066401 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / slavik

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 118172dcebb5

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "118172dcebb5",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:26.066401Z",
  "end_time": "2026-09-25T09:57:27.768969Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "slavik"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:25.316812 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix

Record ID: 12cc3c18f0ba

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "12cc3c18f0ba",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:25.316812Z",
  "end_time": "2026-09-25T09:57:27.914402Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bitrix",
      "pass": "bitrix"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:24.310907 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / sonoma

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: aa5a6b97fd92

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "aa5a6b97fd92",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:24.310907Z",
  "end_time": "2026-09-25T09:57:25.893073Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sonoma"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:21.790051 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / syzygy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 9bde312c9ab6

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "9bde312c9ab6",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:21.790051Z",
  "end_time": "2026-09-25T09:57:24.129985Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "syzygy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:20.365644 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / theater

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c11470993fe4

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c11470993fe4",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:20.365644Z",
  "end_time": "2026-09-25T09:57:21.658237Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "theater"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:20.168321 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Yun@wocloud.szkj

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a952a2c10750

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a952a2c10750",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:20.168321Z",
  "end_time": "2026-09-25T09:57:21.822809Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Yun@wocloud.szkj"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:18.887137 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / triple

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: f07a26aafc58

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "f07a26aafc58",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:18.887137Z",
  "end_time": "2026-09-25T09:57:20.206869Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "triple"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:17.161660 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / zaraza

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 464497786517

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "464497786517",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:17.161660Z",
  "end_time": "2026-09-25T09:57:18.740924Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zaraza"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:15.539719 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / zhuo

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ec2828336d8b

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ec2828336d8b",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:15.539719Z",
  "end_time": "2026-09-25T09:57:17.002016Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zhuo"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:14.484617 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / qQ123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 608349607321

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "608349607321",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:14.484617Z",
  "end_time": "2026-09-25T09:57:16.141541Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qQ123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:13.883245 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02011980

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 21756ae512fe

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "21756ae512fe",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:13.883245Z",
  "end_time": "2026-09-25T09:57:15.382555Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02011980"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:12.167247 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02071984

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: d0ded5d7e738

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "d0ded5d7e738",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:12.167247Z",
  "end_time": "2026-09-25T09:57:13.718459Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02071984"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:10.484760 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 02081985

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 0c5433a6f8b0

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "0c5433a6f8b0",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:10.484760Z",
  "end_time": "2026-09-25T09:57:12.018215Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "02081985"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:08.936304 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ansible

Record ID: 6955697b27b3

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6955697b27b3",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:08.936304Z",
  "end_time": "2026-09-25T09:57:11.556082Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ansible",
      "pass": "ansible"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:08.825872 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 09876543

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: ad936010cc81

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "ad936010cc81",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:08.825872Z",
  "end_time": "2026-09-25T09:57:10.310654Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "09876543"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:06.621408 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12365

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 6246bfbf69e1

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "6246bfbf69e1",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:06.621408Z",
  "end_time": "2026-09-25T09:57:08.666553Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12365"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:04.983175 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 2469

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a20eacdaa7ef

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a20eacdaa7ef",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:04.983175Z",
  "end_time": "2026-09-25T09:57:06.457285Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "2469"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:57:03.823429 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: customer

Record ID: 1ca8fd0bb525

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1ca8fd0bb525",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:57:03.823429Z",
  "end_time": "2026-09-25T09:57:05.747632Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "customer",
      "pass": "customer"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:03.257910 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / abnormal

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c6c037be0541

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c6c037be0541",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:03.257910Z",
  "end_time": "2026-09-25T09:57:04.836140Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abnormal"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:57:01.518767 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / alisha

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 74ce2fc6d78f

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "74ce2fc6d78f",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:57:01.518767Z",
  "end_time": "2026-09-25T09:57:03.110216Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "alisha"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:59.901006 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / chippy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: f2578c97e96a

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "f2578c97e96a",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:59.901006Z",
  "end_time": "2026-09-25T09:57:01.363691Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "chippy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:56:58.741981 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: esuser

Record ID: 3a5083b34253

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3a5083b34253",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:56:58.741981Z",
  "end_time": "2026-09-25T09:57:00.767052Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "esuser",
      "pass": "esuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:58.168928 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / crusher

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a54988538cef

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a54988538cef",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:58.168928Z",
  "end_time": "2026-09-25T09:56:59.753735Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "crusher"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:56.481230 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / dipshit

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c1928a669603

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c1928a669603",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:56.481230Z",
  "end_time": "2026-09-25T09:56:58.005811Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "dipshit"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:54.878260 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ebony

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 5253c7a4ea71

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "5253c7a4ea71",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:54.878260Z",
  "end_time": "2026-09-25T09:56:56.318158Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ebony"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:56:53.681070 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234ab

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: dd7b3e6b094a

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "dd7b3e6b094a",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:56:53.681070Z",
  "end_time": "2026-09-25T09:56:55.657434Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234ab"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:52.542318 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / fight

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 3155f3266895

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "3155f3266895",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:52.542318Z",
  "end_time": "2026-09-25T09:56:54.649905Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "fight"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:50.635869 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hack

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 078c02b52d82

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "078c02b52d82",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:50.635869Z",
  "end_time": "2026-09-25T09:56:52.335530Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hack"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:49.021568 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / ipswich

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a1eb5c4f5d49

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a1eb5c4f5d49",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:49.021568Z",
  "end_time": "2026-09-25T09:56:50.490800Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ipswich"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:56:48.259416 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / test@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3f60e59830f3

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3f60e59830f3",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:56:48.259416Z",
  "end_time": "2026-09-25T09:56:50.488862Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "test@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:46.914065 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / jayhawks

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 1c6c69c4e9fb

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "1c6c69c4e9fb",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:46.914065Z",
  "end_time": "2026-09-25T09:56:48.850265Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jayhawks"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:45.145755 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / kilroy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: a63c2364eab6

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "a63c2364eab6",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:45.145755Z",
  "end_time": "2026-09-25T09:56:46.761995Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "kilroy"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:43.173034 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mancity

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: c262cae4f99e

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "c262cae4f99e",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:43.173034Z",
  "end_time": "2026-09-25T09:56:44.993326Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mancity"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.102

2026-09-25 09:56:42.953163 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bot

Record ID: 7e1f20e8f905

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7e1f20e8f905",
  "src_ip": "109.160.32.102",
  "start_time": "2026-09-25T09:56:42.953163Z",
  "end_time": "2026-09-25T09:56:45.419730Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bot",
      "pass": "bot"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

64.226.70.222

2026-09-25 09:56:41.531730 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / mantis

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo -e "\x6F\x6B"

Record ID: 47b5e147a9eb

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 01ca35584ad5a1b66cf6a9846b5b2821

{
  "id": "47b5e147a9eb",
  "src_ip": "64.226.70.222",
  "start_time": "2026-09-25T09:56:41.531730Z",
  "end_time": "2026-09-25T09:56:43.006401Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "01ca35584ad5a1b66cf6a9846b5b2821",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mantis"
  },
  "commands": [
    "echo -e \"\\x6F\\x6B\""
  ],
  "detailed_commands": [
    {
      "cmd": "echo -e \"\\x6F\\x6B\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}