Adversarial Observation Interface

195.178.110.26

2026-10-14 20:21:38.173806 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / ftpuser

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 16472753f5ed

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "16472753f5ed",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:21:38.173806Z",
  "end_time": "2026-10-14T20:21:39.280554Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "ftpuser"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 20:19:23.843716 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fun

Record ID: 7be188246776

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "7be188246776",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:19:23.843716Z",
  "end_time": "2026-10-14T20:19:25.593621Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "fun",
      "pass": "fun"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:17:12.400434 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenkins

Record ID: 9b4170aca999

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9b4170aca999",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:17:12.400434Z",
  "end_time": "2026-10-14T20:17:14.144474Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "jenkins",
      "pass": "jenkins"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:15:05.089646 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: user / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 16b2327d506b

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "16b2327d506b",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:15:05.089646Z",
  "end_time": "2026-10-14T20:15:06.196810Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "123456"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 20:12:50.222697 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: user / 1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 0b368744bdac

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0b368744bdac",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:12:50.222697Z",
  "end_time": "2026-10-14T20:12:51.327644Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "1"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

2.57.121.112

2026-10-14 20:11:51.168103 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: aerial

Record ID: e52620527b3c

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "e52620527b3c",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-14T20:11:51.168103Z",
  "end_time": "2026-10-14T20:11:57.689493Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "aerial",
      "pass": "aerial"
    },
    {
      "user": "aerial",
      "pass": "aerial1"
    },
    {
      "user": "aerial",
      "pass": "aerial123"
    },
    {
      "user": "aerial",
      "pass": "aerial1234"
    },
    {
      "user": "aerial",
      "pass": "aerial12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

164.30.17.82

2026-10-14 20:10:58.452341 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 0017

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo xsec

Record ID: 11ae5f23826c

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6

{
  "id": "11ae5f23826c",
  "src_ip": "164.30.17.82",
  "start_time": "2026-10-14T20:10:58.452341Z",
  "end_time": "2026-10-14T20:10:59.629219Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "0017"
  },
  "commands": [
    "echo xsec"
  ],
  "detailed_commands": [
    {
      "cmd": "echo xsec",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

195.178.110.26

2026-10-14 20:10:35.816758 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ha-azureadmin

Record ID: ae50ea30287a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "ae50ea30287a",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:10:35.816758Z",
  "end_time": "2026-10-14T20:10:37.592622Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ha-azureadmin",
      "pass": "ha-azureadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:08:24.849066 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vyatta

Record ID: fc5e1b1cfd4a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "fc5e1b1cfd4a",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:08:24.849066Z",
  "end_time": "2026-10-14T20:08:26.613488Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "vyatta",
      "pass": "vyatta"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:06:08.513863 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vyos

Record ID: 82a45f1594f2

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "82a45f1594f2",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:06:08.513863Z",
  "end_time": "2026-10-14T20:06:10.261327Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "vyos",
      "pass": "vyos"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:03:59.743467 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: oneadmin

Record ID: ca0360737f09

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "ca0360737f09",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:03:59.743467Z",
  "end_time": "2026-10-14T20:04:01.488299Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "oneadmin",
      "pass": "opennebula"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 20:01:52.710566 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: validator

Record ID: 3567e4b9bb8a

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3567e4b9bb8a",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T20:01:52.710566Z",
  "end_time": "2026-10-14T20:01:54.462070Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "validator",
      "pass": "solana"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.198.224.119

2026-10-14 19:59:41.315051 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 140

Credential acceptance event recorded. Target authentication: root / oelinux123

Remote entity achieved interactive shell state. Command sequence (7 executed):

[obs-node]:~$ xyzabc987_no_such_command

Command not found: xyzabc987_no_such_command

[obs-node]:~$ echo -e '\147\141\171\146\147\164'

[obs-node]:~$ X_ABC=val987; echo $X_ABC

[obs-node]:~$ which wget curl 2>/dev/null || command -v wget curl 2>/dev/null

Command not found: command -v wget curl

[obs-node]:~$ cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'

[obs-node]:~$ cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal

[obs-node]:~$ hostname

Record ID: 6b6d23506a8e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 17.8s

HASSH Fingerprint: 3335afa7a75e84f8348f05c623c5ecf9

{
  "id": "6b6d23506a8e",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:41.315051Z",
  "end_time": "2026-10-14T19:59:59.089032Z",
  "duration": "17.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "3335afa7a75e84f8348f05c623c5ecf9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "oelinux123"
  },
  "commands": [
    "xyzabc987_no_such_command",
    "echo -e '\\147\\141\\171\\146\\147\\164'",
    "X_ABC=val987; echo $X_ABC",
    "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
    "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
    "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "xyzabc987_no_such_command",
      "failed": true,
      "error": "Command not found: xyzabc987_no_such_command "
    },
    {
      "cmd": "echo -e '\\147\\141\\171\\146\\147\\164'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "X_ABC=val987; echo $X_ABC",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
      "failed": true,
      "error": "Command not found: command -v wget curl"
    },
    {
      "cmd": "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
      "failed": false,
      "error": null
    },
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "xyzabc987_no_such_command ",
    "command -v wget curl"
  ],
  "score": 140,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

45.198.224.119

2026-10-14 19:59:41.173909 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a76408a84f15

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "a76408a84f15",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:41.173909Z",
  "end_time": "2026-10-14T19:59:41.247531Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.26

2026-10-14 19:59:39.819654 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 1q2w3e4r

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 2405ba17b484

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "2405ba17b484",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:59:39.819654Z",
  "end_time": "2026-10-14T19:59:40.924999Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "1q2w3e4r"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

45.198.224.119

2026-10-14 19:59:23.983611 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 140

Credential acceptance event recorded. Target authentication: root / toor

Remote entity achieved interactive shell state. Command sequence (7 executed):

[obs-node]:~$ xyzabc987_no_such_command

Command not found: xyzabc987_no_such_command

[obs-node]:~$ echo -e '\147\141\171\146\147\164'

[obs-node]:~$ X_ABC=val987; echo $X_ABC

[obs-node]:~$ which wget curl 2>/dev/null || command -v wget curl 2>/dev/null

Command not found: command -v wget curl

[obs-node]:~$ cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'

[obs-node]:~$ cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal

[obs-node]:~$ hostname

Record ID: 72afc5a17524

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 17.1s

HASSH Fingerprint: 3335afa7a75e84f8348f05c623c5ecf9

{
  "id": "72afc5a17524",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:23.983611Z",
  "end_time": "2026-10-14T19:59:41.107970Z",
  "duration": "17.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "3335afa7a75e84f8348f05c623c5ecf9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "toor"
  },
  "commands": [
    "xyzabc987_no_such_command",
    "echo -e '\\147\\141\\171\\146\\147\\164'",
    "X_ABC=val987; echo $X_ABC",
    "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
    "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
    "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "xyzabc987_no_such_command",
      "failed": true,
      "error": "Command not found: xyzabc987_no_such_command "
    },
    {
      "cmd": "echo -e '\\147\\141\\171\\146\\147\\164'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "X_ABC=val987; echo $X_ABC",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
      "failed": true,
      "error": "Command not found: command -v wget curl"
    },
    {
      "cmd": "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
      "failed": false,
      "error": null
    },
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "xyzabc987_no_such_command ",
    "command -v wget curl"
  ],
  "score": 140,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

45.198.224.119

2026-10-14 19:59:23.845254 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 309242e6cb11

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "309242e6cb11",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:23.845254Z",
  "end_time": "2026-10-14T19:59:23.915446Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

45.198.224.119

2026-10-14 19:59:22.238518 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubnt

Record ID: e1a3c17be716

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: 3335afa7a75e84f8348f05c623c5ecf9

{
  "id": "e1a3c17be716",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:22.238518Z",
  "end_time": "2026-10-14T19:59:23.777674Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "3335afa7a75e84f8348f05c623c5ecf9",
  "attempts": [
    {
      "user": "ubnt",
      "pass": "ubnt"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.198.224.119

2026-10-14 19:59:22.101844 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 324c61ab1cd9

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "324c61ab1cd9",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:22.101844Z",
  "end_time": "2026-10-14T19:59:22.171544Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

45.198.224.119

2026-10-14 19:59:04.276517 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 140

Credential acceptance event recorded. Target authentication: admin / admin

Remote entity achieved interactive shell state. Command sequence (7 executed):

[obs-node]:~$ xyzabc987_no_such_command

Command not found: xyzabc987_no_such_command

[obs-node]:~$ echo -e '\147\141\171\146\147\164'

[obs-node]:~$ X_ABC=val987; echo $X_ABC

[obs-node]:~$ which wget curl 2>/dev/null || command -v wget curl 2>/dev/null

Command not found: command -v wget curl

[obs-node]:~$ cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'

[obs-node]:~$ cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal

[obs-node]:~$ hostname

Record ID: 3415b187c8b9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 17.8s

HASSH Fingerprint: 3335afa7a75e84f8348f05c623c5ecf9

{
  "id": "3415b187c8b9",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:04.276517Z",
  "end_time": "2026-10-14T19:59:22.041482Z",
  "duration": "17.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "3335afa7a75e84f8348f05c623c5ecf9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin"
  },
  "commands": [
    "xyzabc987_no_such_command",
    "echo -e '\\147\\141\\171\\146\\147\\164'",
    "X_ABC=val987; echo $X_ABC",
    "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
    "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
    "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "xyzabc987_no_such_command",
      "failed": true,
      "error": "Command not found: xyzabc987_no_such_command "
    },
    {
      "cmd": "echo -e '\\147\\141\\171\\146\\147\\164'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "X_ABC=val987; echo $X_ABC",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
      "failed": true,
      "error": "Command not found: command -v wget curl"
    },
    {
      "cmd": "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
      "failed": false,
      "error": null
    },
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "xyzabc987_no_such_command ",
    "command -v wget curl"
  ],
  "score": 140,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

45.198.224.119

2026-10-14 19:59:04.136857 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b7095a030bd5

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "b7095a030bd5",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:59:04.136857Z",
  "end_time": "2026-10-14T19:59:04.208125Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

45.198.224.119

2026-10-14 19:58:46.113987 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 140

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (7 executed):

[obs-node]:~$ xyzabc987_no_such_command

Command not found: xyzabc987_no_such_command

[obs-node]:~$ echo -e '\147\141\171\146\147\164'

[obs-node]:~$ X_ABC=val987; echo $X_ABC

[obs-node]:~$ which wget curl 2>/dev/null || command -v wget curl 2>/dev/null

Command not found: command -v wget curl

[obs-node]:~$ cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'

[obs-node]:~$ cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal

[obs-node]:~$ hostname

Record ID: f29fd9822345

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 18.0s

HASSH Fingerprint: 3335afa7a75e84f8348f05c623c5ecf9

{
  "id": "f29fd9822345",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:58:46.113987Z",
  "end_time": "2026-10-14T19:59:04.066712Z",
  "duration": "18.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "3335afa7a75e84f8348f05c623c5ecf9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "xyzabc987_no_such_command",
    "echo -e '\\147\\141\\171\\146\\147\\164'",
    "X_ABC=val987; echo $X_ABC",
    "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
    "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
    "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "xyzabc987_no_such_command",
      "failed": true,
      "error": "Command not found: xyzabc987_no_such_command "
    },
    {
      "cmd": "echo -e '\\147\\141\\171\\146\\147\\164'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "X_ABC=val987; echo $X_ABC",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which wget curl 2>/dev/null || command -v wget curl 2>/dev/null",
      "failed": true,
      "error": "Command not found: command -v wget curl"
    },
    {
      "cmd": "cat /proc/cpuinfo 2>/dev/null | grep -m1 -iE 'model name|Processor|Hardware'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/meminfo 2>/dev/null | grep -m1 MemTotal",
      "failed": false,
      "error": null
    },
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "xyzabc987_no_such_command ",
    "command -v wget curl"
  ],
  "score": 140,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

45.198.224.119

2026-10-14 19:58:45.974106 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c13399aeb86f

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "c13399aeb86f",
  "src_ip": "45.198.224.119",
  "start_time": "2026-10-14T19:58:45.974106Z",
  "end_time": "2026-10-14T19:58:46.046190Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.26

2026-10-14 19:57:31.274655 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / qwer1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 68caf3040e56

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "68caf3040e56",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:57:31.274655Z",
  "end_time": "2026-10-14T19:57:32.390620Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "qwer1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:55:21.858439 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / 1234qwer

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 0225eb97c932

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0225eb97c932",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:55:21.858439Z",
  "end_time": "2026-10-14T19:55:22.977667Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "1234qwer"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:53:06.179753 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: 09ffc85c4703

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "09ffc85c4703",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:53:06.179753Z",
  "end_time": "2026-10-14T19:53:07.924527Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "4321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:50:57.320409 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: f39d69564f9d

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f39d69564f9d",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:50:57.320409Z",
  "end_time": "2026-10-14T19:50:59.067070Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:48:50.299468 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: 47087348b3b5

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "47087348b3b5",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:48:50.299468Z",
  "end_time": "2026-10-14T19:48:52.085758Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "sol321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

193.32.162.5

2026-10-14 19:48:21.195742 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / Ahfdfudsfhudhufuhfisdofihsdiopfspdf*#$8

Record ID: 3e6c2a0e44b0

Client Version: SSH-2.0-Go

Engagement Duration: 0.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3e6c2a0e44b0",
  "src_ip": "193.32.162.5",
  "start_time": "2026-10-14T19:48:21.195742Z",
  "end_time": "2026-10-14T19:48:22.052063Z",
  "duration": "0.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Ahfdfudsfhudhufuhfisdofihsdiopfspdf*#$8"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:46:39.043827 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: node / node

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 9c4e8c89ce2f

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9c4e8c89ce2f",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:46:39.043827Z",
  "end_time": "2026-10-14T19:46:40.151691Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "node",
    "pass": "node"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:44:32.817445 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: validator

Record ID: ad22a424a66b

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "ad22a424a66b",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:44:32.817445Z",
  "end_time": "2026-10-14T19:44:34.577780Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "validator",
      "pass": "validator"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:42:26.124369 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: teamspeak

Record ID: eed691ff248d

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "eed691ff248d",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:42:26.124369Z",
  "end_time": "2026-10-14T19:42:27.869188Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "teamspeak",
      "pass": "teamspeak"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:40:12.762572 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ts3

Record ID: 9659b9e36869

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9659b9e36869",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:40:12.762572Z",
  "end_time": "2026-10-14T19:40:14.507995Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ts3",
      "pass": "ts3"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:38:03.511104 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234567890qwertyuiop

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 774a144f99e1

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "774a144f99e1",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:38:03.511104Z",
  "end_time": "2026-10-14T19:38:04.659592Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234567890qwertyuiop"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

164.30.17.82

2026-10-14 19:37:28.341701 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 0016

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo xsec

Record ID: 684b090f000d

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6

{
  "id": "684b090f000d",
  "src_ip": "164.30.17.82",
  "start_time": "2026-10-14T19:37:28.341701Z",
  "end_time": "2026-10-14T19:37:29.529442Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "0016"
  },
  "commands": [
    "echo xsec"
  ],
  "detailed_commands": [
    {
      "cmd": "echo xsec",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

66.132.195.111

2026-10-14 19:37:16.808601 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 117025f810de

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 52c99fce46b6758a467102ce5bd1c565

{
  "id": "117025f810de",
  "src_ip": "66.132.195.111",
  "start_time": "2026-10-14T19:37:16.808601Z",
  "end_time": "2026-10-14T19:37:17.956649Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "52c99fce46b6758a467102ce5bd1c565",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

157.20.239.97

2026-10-14 19:35:56.540931 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9c407180bdb5

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "9c407180bdb5",
  "src_ip": "157.20.239.97",
  "start_time": "2026-10-14T19:35:56.540931Z",
  "end_time": "2026-10-14T19:35:56.543072Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.26

2026-10-14 19:35:51.655034 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@ss!@#123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 772dc02f494e

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "772dc02f494e",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:35:51.655034Z",
  "end_time": "2026-10-14T19:35:52.760913Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@ss!@#123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

2.57.121.25

2026-10-14 19:34:23.475383 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 28051976

Record ID: ab5c7c350577

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "ab5c7c350577",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-14T19:34:23.475383Z",
  "end_time": "2026-10-14T19:34:29.484360Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "28051976"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

157.20.239.97

2026-10-14 19:33:59.703580 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2e5128e5ea0e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "2e5128e5ea0e",
  "src_ip": "157.20.239.97",
  "start_time": "2026-10-14T19:33:59.703580Z",
  "end_time": "2026-10-14T19:33:59.706834Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.26

2026-10-14 19:33:37.012249 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ts3

Record ID: e477b2a04fbb

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "e477b2a04fbb",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:33:37.012249Z",
  "end_time": "2026-10-14T19:33:38.756271Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ts3",
      "pass": "111111"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:31:32.009345 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: admin / Welcome@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: cb0bde6b152a

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "cb0bde6b152a",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:31:32.009345Z",
  "end_time": "2026-10-14T19:31:33.114305Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Welcome@123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:29:26.510437 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / 4rfv3edc

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 55f41ebfac41

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "55f41ebfac41",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:29:26.510437Z",
  "end_time": "2026-10-14T19:29:27.620216Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "4rfv3edc"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:27:18.137638 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: admin / sql2008

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 59682ffc62b6

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "59682ffc62b6",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:27:18.137638Z",
  "end_time": "2026-10-14T19:27:19.240860Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "sql2008"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

195.178.110.26

2026-10-14 19:25:15.777471 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin1234!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 0ecaa54be5e9

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0ecaa54be5e9",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:25:15.777471Z",
  "end_time": "2026-10-14T19:25:16.923392Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin1234!"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

103.185.224.207

2026-10-14 19:25:01.181577 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 077fa768e2e6

Client Version: Unknown

Engagement Duration: 4.8s

{
  "id": "077fa768e2e6",
  "src_ip": "103.185.224.207",
  "start_time": "2026-10-14T19:25:01.181577Z",
  "end_time": "2026-10-14T19:25:06.011496Z",
  "duration": "4.8",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

103.185.224.207

2026-10-14 19:24:50.079270 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bc88f2bcb8fe

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "bc88f2bcb8fe",
  "src_ip": "103.185.224.207",
  "start_time": "2026-10-14T19:24:50.079270Z",
  "end_time": "2026-10-14T19:24:50.082411Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-10-14 19:24:49.820940 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 1176a97f7553

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "1176a97f7553",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-14T19:24:49.820940Z",
  "end_time": "2026-10-14T19:24:50.984102Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

195.178.110.26

2026-10-14 19:23:06.879035 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / mj7,k8.l9

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 3e6a69f1b1bb

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "3e6a69f1b1bb",
  "src_ip": "195.178.110.26",
  "start_time": "2026-10-14T19:23:06.879035Z",
  "end_time": "2026-10-14T19:23:07.988622Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "mj7,k8.l9"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE"
  ]
}

192.168.0.1

2026-10-14 19:21:35.715834 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 26382ac28409

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "26382ac28409",
  "src_ip": "192.168.0.1",
  "start_time": "2026-10-14T19:21:35.715834Z",
  "end_time": "2026-10-14T19:21:35.728038Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}