nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 373 / 6374 (318690 total records)
Passive Observation Node - Active Operational Overview
60.163.139.198
2026-07-20 14:31:05.894168 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / dell-2023

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 64884bb37bf3
Client Version: SSH-2.0-Go
Engagement Duration: 4.1s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "64884bb37bf3",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:31:05.894168Z",
  "end_time": "2026-07-20T14:31:09.968414Z",
  "duration": "4.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "dell-2023"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:31:03.892111 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gbase

Record ID: fa5654f5fccc
Client Version: SSH-2.0-Go
Engagement Duration: 17.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "fa5654f5fccc",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:31:03.892111Z",
  "end_time": "2026-07-20T14:31:20.883659Z",
  "duration": "17.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gbase",
      "pass": "demo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:30:51.924691 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gl03

Record ID: 5a0dcef45d75
Client Version: SSH-2.0-Go
Engagement Duration: 18.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "5a0dcef45d75",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:30:51.924691Z",
  "end_time": "2026-07-20T14:31:10.478859Z",
  "duration": "18.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gl03",
      "pass": "student123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:30:45.573728 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: app

Record ID: dd72a75f3b82
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "dd72a75f3b82",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:30:45.573728Z",
  "end_time": "2026-07-20T14:30:47.548042Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "app",
      "pass": "Jushi@2023!"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:30:40.250635 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lscpd

Record ID: b5a2d0f1475b
Client Version: SSH-2.0-Go
Engagement Duration: 18.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b5a2d0f1475b",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:30:40.250635Z",
  "end_time": "2026-07-20T14:30:58.910111Z",
  "duration": "18.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "lscpd",
      "pass": "abc123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:30:27.121358 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dell

Record ID: a43a257d1cf2
Client Version: SSH-2.0-Go
Engagement Duration: 4.2s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "a43a257d1cf2",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:30:27.121358Z",
  "end_time": "2026-07-20T14:30:31.334872Z",
  "duration": "4.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "dell",
      "pass": "dell@2021"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:30:26.219432 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a1genevieve

Record ID: 3c605aae7028
Client Version: SSH-2.0-Go
Engagement Duration: 21.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "3c605aae7028",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:30:26.219432Z",
  "end_time": "2026-07-20T14:30:47.852828Z",
  "duration": "21.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "a1genevieve",
      "pass": "vagrant"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:30:11.846856 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dton

Record ID: 0faa39143e04
Client Version: SSH-2.0-Go
Engagement Duration: 26.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "0faa39143e04",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:30:11.846856Z",
  "end_time": "2026-07-20T14:30:38.517586Z",
  "duration": "26.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dton",
      "pass": "fastuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:30:06.948593 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jacob

Record ID: f5dabf914dfb
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "f5dabf914dfb",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:30:06.948593Z",
  "end_time": "2026-07-20T14:30:08.792734Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "jacob",
      "pass": "1234@abc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:29:57.934006 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yangweiqing

Record ID: 3301b9b06eb7
Client Version: SSH-2.0-Go
Engagement Duration: 31.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "3301b9b06eb7",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:57.934006Z",
  "end_time": "2026-07-20T14:30:29.419626Z",
  "duration": "31.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "yangweiqing",
      "pass": "sftpuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:29:50.591146 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jamalihassab

Record ID: 1f4a591790c9
Client Version: SSH-2.0-Go
Engagement Duration: 21.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "1f4a591790c9",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:50.591146Z",
  "end_time": "2026-07-20T14:30:11.983605Z",
  "duration": "21.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jamalihassab",
      "pass": "fivem"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:29:49.807113 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: infocare

Record ID: 8e049da6aede
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "8e049da6aede",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:29:49.807113Z",
  "end_time": "2026-07-20T14:29:51.715260Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "infocare",
      "pass": "1qaz2wsx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:29:38.895612 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: xuzhipeng

Record ID: 41a51a1ebd61
Client Version: SSH-2.0-Go
Engagement Duration: 16.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "41a51a1ebd61",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:38.895612Z",
  "end_time": "2026-07-20T14:29:55.390788Z",
  "duration": "16.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "xuzhipeng",
      "pass": "abcd@1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:29:32.771716 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dell

Record ID: 9149badb0dce
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "9149badb0dce",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:29:32.771716Z",
  "end_time": "2026-07-20T14:29:34.696728Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "dell",
      "pass": "123123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:29:30.256391 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ricardo

Record ID: ed62a597c74d
Client Version: SSH-2.0-Go
Engagement Duration: 11.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "ed62a597c74d",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:30.256391Z",
  "end_time": "2026-07-20T14:29:42.004286Z",
  "duration": "11.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ricardo",
      "pass": "Ab123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:29:17.036887 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kevin

Record ID: 9ddae7be994d
Client Version: SSH-2.0-Go
Engagement Duration: 12.9s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "9ddae7be994d",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:17.036887Z",
  "end_time": "2026-07-20T14:29:29.948837Z",
  "duration": "12.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kevin",
      "pass": "1234qwer"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:29:12.831180 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: redis

Record ID: 7d9185a14455
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "7d9185a14455",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:29:12.831180Z",
  "end_time": "2026-07-20T14:29:15.476205Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "redis",
      "pass": "1qaz@WSX"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
220.154.131.111
2026-07-20 14:29:07.647425 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 832f118b5137
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "832f118b5137",
  "src_ip": "220.154.131.111",
  "start_time": "2026-07-20T14:29:07.647425Z",
  "end_time": "2026-07-20T14:31:07.652351Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
91.92.42.87
2026-07-20 14:29:02.599204 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 5906

Record ID: 5ea2d899cdc2
Client Version: SSH-2.0-Go
Engagement Duration: 19.4s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "5ea2d899cdc2",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:29:02.599204Z",
  "end_time": "2026-07-20T14:29:21.982985Z",
  "duration": "19.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "5906",
      "pass": "mysql@1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:28:54.704185 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: controll

Record ID: a170522d965c
Client Version: SSH-2.0-Go
Engagement Duration: 17.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "a170522d965c",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:28:54.704185Z",
  "end_time": "2026-07-20T14:29:12.036760Z",
  "duration": "17.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "controll",
      "pass": "controll@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:28:53.741911 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: t1

Record ID: 7e70b0dc662f
Client Version: SSH-2.0-Go
Engagement Duration: 20.7s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "7e70b0dc662f",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:28:53.741911Z",
  "end_time": "2026-07-20T14:29:14.474495Z",
  "duration": "20.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "t1",
      "pass": "mysql123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:28:42.199295 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jarjar_binks

Record ID: 70e321d232f4
Client Version: SSH-2.0-Go
Engagement Duration: 16.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "70e321d232f4",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:28:42.199295Z",
  "end_time": "2026-07-20T14:28:58.776457Z",
  "duration": "16.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "jarjar_binks",
      "pass": "ts"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:28:35.840622 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: app

Record ID: 09ebcadddb4b
Client Version: SSH-2.0-Go
Engagement Duration: 2.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "09ebcadddb4b",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:28:35.840622Z",
  "end_time": "2026-07-20T14:28:38.710746Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "app",
      "pass": "Changeme_123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:28:33.685920 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ansadmin

Record ID: e94b854f94a6
Client Version: SSH-2.0-Go
Engagement Duration: 15.6s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "e94b854f94a6",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:28:33.685920Z",
  "end_time": "2026-07-20T14:28:49.330757Z",
  "duration": "15.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ansadmin",
      "pass": "deploy"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:28:18.841781 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: syslog

Record ID: d58f15cbe2a2
Client Version: SSH-2.0-Go
Engagement Duration: 19.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "d58f15cbe2a2",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:28:18.841781Z",
  "end_time": "2026-07-20T14:28:37.908234Z",
  "duration": "19.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "syslog",
      "pass": "bitrix"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:28:18.037466 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: controll

Record ID: 055085e8c678
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "055085e8c678",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:28:18.037466Z",
  "end_time": "2026-07-20T14:28:19.962361Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "controll",
      "pass": "123QWEasd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:28:05.920798 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: SJ12

Record ID: fcffd6a14d6d
Client Version: SSH-2.0-Go
Engagement Duration: 22.0s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "fcffd6a14d6d",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:28:05.920798Z",
  "end_time": "2026-07-20T14:28:27.893998Z",
  "duration": "22.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "SJ12",
      "pass": "ftpuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:28:01.882383 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / ubuntu@2023

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 6e2623901e70
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6e2623901e70",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:28:01.882383Z",
  "end_time": "2026-07-20T14:28:04.864112Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ubuntu@2023"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:27:54.962364 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fatemeh

Record ID: b6efef1c2971
Client Version: SSH-2.0-Go
Engagement Duration: 15.5s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "b6efef1c2971",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:27:54.962364Z",
  "end_time": "2026-07-20T14:28:10.494189Z",
  "duration": "15.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "fatemeh",
      "pass": "toor"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:27:46.099513 UTC
RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1Q2w3e4r

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m
Record ID: 29c1a9e13368
Client Version: SSH-2.0-Go
Engagement Duration: 12.1s
HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499
{
  "id": "29c1a9e13368",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:27:46.099513Z",
  "end_time": "2026-07-20T14:27:58.196366Z",
  "duration": "12.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1Q2w3e4r"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:27:45.266195 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / @lin@1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 3816e02340b4
Client Version: SSH-2.0-Go
Engagement Duration: 1.5s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "3816e02340b4",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:27:45.266195Z",
  "end_time": "2026-07-20T14:27:46.720232Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "@lin@1234"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:27:28.774594 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: postgres / postgres@2020

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 626ea063f929
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "626ea063f929",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:27:28.774594Z",
  "end_time": "2026-07-20T14:27:30.569346Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "postgres@2020"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:27:12.642808 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: controll

Record ID: dfe9be37b6d6
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "dfe9be37b6d6",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:27:12.642808Z",
  "end_time": "2026-07-20T14:27:14.532281Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "controll",
      "pass": "controll@1324"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
91.92.42.87
2026-07-20 14:27:08.573911 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 24ba5f9c3545
Client Version: SSH-2.0-Go
Engagement Duration: 8.0s
HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227
{
  "id": "24ba5f9c3545",
  "src_ip": "91.92.42.87",
  "start_time": "2026-07-20T14:27:08.573911Z",
  "end_time": "2026-07-20T14:27:16.583161Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
60.163.139.198
2026-07-20 14:26:54.829579 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: tempusr

Record ID: 33ca2a066f3a
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "33ca2a066f3a",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:26:54.829579Z",
  "end_time": "2026-07-20T14:26:56.684796Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "tempusr",
      "pass": "dell@2024"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:26:37.892503 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: infocare

Record ID: caf9df7241c6
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "caf9df7241c6",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:26:37.892503Z",
  "end_time": "2026-07-20T14:26:40.457528Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "infocare",
      "pass": "!@#qweASD123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:26:21.655843 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: username

Record ID: ddf69007bbfb
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "ddf69007bbfb",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:26:21.655843Z",
  "end_time": "2026-07-20T14:26:23.594898Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "username",
      "pass": "123@abc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:26:01.172778 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: user / 1qazxsw2

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 69f1aa2e960b
Client Version: SSH-2.0-Go
Engagement Duration: 2.1s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "69f1aa2e960b",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:26:01.172778Z",
  "end_time": "2026-07-20T14:26:03.226653Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "1qazxsw2"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:25:42.630278 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / chuanbo

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: bbb0dc8171a3
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "bbb0dc8171a3",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:25:42.630278Z",
  "end_time": "2026-07-20T14:25:44.538398Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "chuanbo"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:25:23.538386 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: oracle / 123123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 373b5e0cd708
Client Version: SSH-2.0-Go
Engagement Duration: 4.1s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "373b5e0cd708",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:25:23.538386Z",
  "end_time": "2026-07-20T14:25:27.653212Z",
  "duration": "4.1",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "123123"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:25:06.714324 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: app

Record ID: c8faabed21e3
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "c8faabed21e3",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:25:06.714324Z",
  "end_time": "2026-07-20T14:25:08.595935Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "app",
      "pass": "Redhatapp23"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:24:49.403092 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: postgres / Jushi@2024!

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 9fe88f1019e4
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "9fe88f1019e4",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:24:49.403092Z",
  "end_time": "2026-07-20T14:24:50.670213Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "Jushi@2024!"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:24:32.948060 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: middleware

Record ID: c122e5880cb5
Client Version: SSH-2.0-Go
Engagement Duration: 3.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "c122e5880cb5",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:24:32.948060Z",
  "end_time": "2026-07-20T14:24:36.688030Z",
  "duration": "3.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "middleware",
      "pass": "QAZ2wsx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:24:16.436545 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenkins

Record ID: b89c82218fc4
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "b89c82218fc4",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:24:16.436545Z",
  "end_time": "2026-07-20T14:24:18.286915Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "jenkins",
      "pass": "abc!@#123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
47.236.24.102
2026-07-20 14:24:03.576970 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 90

Credential acceptance event recorded. Target authentication: ubuntu / ubuntu1024

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
Record ID: 8ce45c507b53
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 5m 1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "8ce45c507b53",
  "src_ip": "47.236.24.102",
  "start_time": "2026-07-20T14:24:03.576970Z",
  "end_time": "2026-07-20T14:29:04.550999Z",
  "duration": "301.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "ubuntu1024"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 90,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:24:00.742035 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenkins

Record ID: 07de3399e488
Client Version: SSH-2.0-Go
Engagement Duration: 2.5s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "07de3399e488",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:24:00.742035Z",
  "end_time": "2026-07-20T14:24:03.195613Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "jenkins",
      "pass": "admin@12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:23:44.219667 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: infocare

Record ID: 4c8abe03e7ce
Client Version: SSH-2.0-Go
Engagement Duration: 5.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "4c8abe03e7ce",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:23:44.219667Z",
  "end_time": "2026-07-20T14:23:49.473279Z",
  "duration": "5.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "infocare",
      "pass": "11111111"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:23:27.594349 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: username

Record ID: 1befceeb32e6
Client Version: SSH-2.0-Go
Engagement Duration: 2.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "1befceeb32e6",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:23:27.594349Z",
  "end_time": "2026-07-20T14:23:30.014953Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "username",
      "pass": "username"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:23:10.979138 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: postgres / C8USmZ7Yz4Mc

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ echo 'dGVzdA==' | base64 -d 2>/dev/null
Record ID: 1cea0cee8a4c
Client Version: SSH-2.0-Go
Engagement Duration: 1.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "1cea0cee8a4c",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:23:10.979138Z",
  "end_time": "2026-07-20T14:23:12.662975Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "postgres",
    "pass": "C8USmZ7Yz4Mc"
  },
  "commands": [
    "echo 'dGVzdA==' | base64 -d 2>/dev/null"
  ],
  "detailed_commands": [
    {
      "cmd": "echo 'dGVzdA==' | base64 -d 2>/dev/null",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
60.163.139.198
2026-07-20 14:22:54.686830 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: moodle

Record ID: 826bdbed3541
Client Version: SSH-2.0-Go
Engagement Duration: 3.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "826bdbed3541",
  "src_ip": "60.163.139.198",
  "start_time": "2026-07-20T14:22:54.686830Z",
  "end_time": "2026-07-20T14:22:57.640857Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "moodle",
      "pass": "12qwaszx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}