nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 659 / 7329 (366444 total records)
Passive Observation Node - Active Operational Overview
188.166.71.4
2026-07-25 23:22:29.065023 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: damocles-manager

Record ID: f03da014b884
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "f03da014b884",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:22:29.065023Z",
  "end_time": "2026-07-25T23:22:30.926685Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "damocles-manager",
      "pass": "damocles-manager"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:21:35.865719 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: fad6a6a600b2
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "fad6a6a600b2",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:21:35.865719Z",
  "end_time": "2026-07-25T23:21:37.165282Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1234567890"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:19:48.663202 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: damocles

Record ID: ecd601c9802f
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "ecd601c9802f",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:19:48.663202Z",
  "end_time": "2026-07-25T23:19:50.537888Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "damocles",
      "pass": "damocles"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:18:58.388929 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 123456789

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 4cb63c88e8f6
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "4cb63c88e8f6",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:18:58.388929Z",
  "end_time": "2026-07-25T23:18:59.701366Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123456789"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:17:00.315444 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sophon-miner

Record ID: 349f5f50d2c5
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "349f5f50d2c5",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:17:00.315444Z",
  "end_time": "2026-07-25T23:17:02.322401Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sophon-miner",
      "pass": "sophon-miner"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:16:16.417717 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 6830c791362e
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6830c791362e",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:16:16.417717Z",
  "end_time": "2026-07-25T23:16:17.651361Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12345678"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:14:14.480935 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sophon-messager

Record ID: 5d10c422bbff
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "5d10c422bbff",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:14:14.480935Z",
  "end_time": "2026-07-25T23:14:16.317915Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sophon-messager",
      "pass": "sophon-messager"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:13:36.713144 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 1234567

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: d8a1520cc3ff
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "d8a1520cc3ff",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:13:36.713144Z",
  "end_time": "2026-07-25T23:13:37.954648Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1234567"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:11:32.460677 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sophon-gateway

Record ID: d6880a440c90
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "d6880a440c90",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:11:32.460677Z",
  "end_time": "2026-07-25T23:11:34.326743Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sophon-gateway",
      "pass": "sophon-gateway"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:10:46.422127 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 3ab76656aef6
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "3ab76656aef6",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:10:46.422127Z",
  "end_time": "2026-07-25T23:10:47.678781Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123456"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:08:50.685353 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sophon-auth

Record ID: e042db807c1e
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "e042db807c1e",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:08:50.685353Z",
  "end_time": "2026-07-25T23:08:52.554742Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sophon-auth",
      "pass": "sophon-auth"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:08:00.204476 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: e7cf79ea2258
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "e7cf79ea2258",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:08:00.204476Z",
  "end_time": "2026-07-25T23:08:01.576407Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12345"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:06:15.679968 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sophon

Record ID: f5894f2457c2
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "f5894f2457c2",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:06:15.679968Z",
  "end_time": "2026-07-25T23:06:17.589345Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sophon",
      "pass": "sophon"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:05:18.133359 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 2d91128877d3
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "2d91128877d3",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:05:18.133359Z",
  "end_time": "2026-07-25T23:05:19.457810Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:03:30.222135 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yugabyte

Record ID: 9690d4fba1fb
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "9690d4fba1fb",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:03:30.222135Z",
  "end_time": "2026-07-25T23:03:32.138166Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "yugabyte",
      "pass": "yugabyte"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:02:36.778319 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 123123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 2b80b65df2a5
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "2b80b65df2a5",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:02:36.778319Z",
  "end_time": "2026-07-25T23:02:38.168735Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 23:00:48.527400 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lotus-worker

Record ID: d23e6bfe8352
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "d23e6bfe8352",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T23:00:48.527400Z",
  "end_time": "2026-07-25T23:00:50.388123Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lotus-worker",
      "pass": "lotus-worker"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 23:00:01.441869 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: c5e9029c75b8
Client Version: SSH-2.0-Go
Engagement Duration: 2.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "c5e9029c75b8",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T23:00:01.441869Z",
  "end_time": "2026-07-25T23:00:04.217152Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:58:01.407395 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lotus-miner

Record ID: 03770906d5c4
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "03770906d5c4",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:58:01.407395Z",
  "end_time": "2026-07-25T22:58:03.289963Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lotus-miner",
      "pass": "lotus-miner"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:57:19.132376 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 1150221410*

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: a7b139a45c1c
Client Version: SSH-2.0-Go
Engagement Duration: 2.6s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "a7b139a45c1c",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:57:19.132376Z",
  "end_time": "2026-07-25T22:57:21.693396Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1150221410*"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:55:23.125759 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitswap

Record ID: ef0f9914efd9
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "ef0f9914efd9",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:55:23.125759Z",
  "end_time": "2026-07-25T22:55:24.967285Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "bitswap",
      "pass": "bitswap"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:54:36.824754 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 11111111

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 8ade4782fd77
Client Version: SSH-2.0-Go
Engagement Duration: 1.3s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "8ade4782fd77",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:54:36.824754Z",
  "end_time": "2026-07-25T22:54:38.078257Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "11111111"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:52:49.556886 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: booster

Record ID: 19967576cd0c
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "19967576cd0c",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:52:49.556886Z",
  "end_time": "2026-07-25T22:52:51.406133Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "booster",
      "pass": "booster"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:51:51.709673 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 2994b310702a
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "2994b310702a",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:51:51.709673Z",
  "end_time": "2026-07-25T22:51:52.932913Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "1"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:50:14.207224 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: boostd

Record ID: 6601aa96e7b9
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6601aa96e7b9",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:50:14.207224Z",
  "end_time": "2026-07-25T22:50:16.068619Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "boostd",
      "pass": "boostd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
2.57.121.25
2026-07-25 22:49:23.287457 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / maroon

Record ID: e3f6229a18d1
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.1s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "e3f6229a18d1",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-25T22:49:23.287457Z",
  "end_time": "2026-07-25T22:49:29.416509Z",
  "duration": "6.1",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "maroon"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:49:12.041981 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: RPM

Record ID: c02f5ec91225
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "c02f5ec91225",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:49:12.041981Z",
  "end_time": "2026-07-25T22:49:13.911662Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "RPM",
      "pass": "RPM"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
64.89.160.135
2026-07-25 22:49:03.849236 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cae578777524
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "cae578777524",
  "src_ip": "64.89.160.135",
  "start_time": "2026-07-25T22:49:03.849236Z",
  "end_time": "2026-07-25T22:49:04.045691Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
188.166.71.4
2026-07-25 22:47:38.961715 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: boost

Record ID: 3d464c0c83ac
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "3d464c0c83ac",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:47:38.961715Z",
  "end_time": "2026-07-25T22:47:40.906137Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "boost",
      "pass": "boost"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:46:39.323819 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator

Record ID: b30e9ab9d811
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "b30e9ab9d811",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:46:39.323819Z",
  "end_time": "2026-07-25T22:46:41.214724Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "Administrator",
      "pass": "abcd1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:44:52.825783 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: curio

Record ID: 74959eb16ed1
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "74959eb16ed1",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:44:52.825783Z",
  "end_time": "2026-07-25T22:44:54.848518Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "curio",
      "pass": "curio"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:44:00.907292 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator

Record ID: 244a7b09a65b
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "244a7b09a65b",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:44:00.907292Z",
  "end_time": "2026-07-25T22:44:02.884449Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "Administrator",
      "pass": "abcd123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:42:11.856111 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sptool

Record ID: 583f51706866
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "583f51706866",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:42:11.856111Z",
  "end_time": "2026-07-25T22:42:13.771192Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sptool",
      "pass": "sptool"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:41:26.654509 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator

Record ID: b14d9d078cba
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "b14d9d078cba",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:41:26.654509Z",
  "end_time": "2026-07-25T22:41:28.609152Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "Administrator",
      "pass": "abc1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
77.90.185.16
2026-07-25 22:41:20.555703 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d18f01005c6d
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "d18f01005c6d",
  "src_ip": "77.90.185.16",
  "start_time": "2026-07-25T22:41:20.555703Z",
  "end_time": "2026-07-25T22:41:20.745119Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
193.46.255.86
2026-07-25 22:40:42.027234 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / power

Record ID: 63ce0cf3679c
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.1s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "63ce0cf3679c",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-25T22:40:42.027234Z",
  "end_time": "2026-07-25T22:40:48.122930Z",
  "duration": "6.1",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "power"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:39:34.749339 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lotus-shed

Record ID: a331a2a32440
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "a331a2a32440",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:39:34.749339Z",
  "end_time": "2026-07-25T22:39:36.617424Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lotus-shed",
      "pass": "lotus-shed"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:38:37.288007 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator

Record ID: 0216e8add1b5
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "0216e8add1b5",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:38:37.288007Z",
  "end_time": "2026-07-25T22:38:39.138523Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "Administrator",
      "pass": "abc123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:37:00.467807 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lotus-gateway

Record ID: 0e0f1716de70
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "0e0f1716de70",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:37:00.467807Z",
  "end_time": "2026-07-25T22:37:02.445650Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lotus-gateway",
      "pass": "lotus-gateway"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:35:55.492858 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: Administrator

Record ID: 9e1d58dbf409
Client Version: SSH-2.0-Go
Engagement Duration: 2.0s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "9e1d58dbf409",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:35:55.492858Z",
  "end_time": "2026-07-25T22:35:57.477685Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "Administrator",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:34:29.930620 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fuhon

Record ID: 347bdc0b6c75
Client Version: SSH-2.0-Go
Engagement Duration: 1.8s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "347bdc0b6c75",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:34:29.930620Z",
  "end_time": "2026-07-25T22:34:31.781630Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "fuhon",
      "pass": "fuhon"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
68.183.1.2
2026-07-25 22:32:02.117861 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e730e8758eb5
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "e730e8758eb5",
  "src_ip": "68.183.1.2",
  "start_time": "2026-07-25T22:32:02.117861Z",
  "end_time": "2026-07-25T22:32:02.290227Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
188.166.71.4
2026-07-25 22:31:46.963589 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: venus

Record ID: b28682390112
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "b28682390112",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:31:46.963589Z",
  "end_time": "2026-07-25T22:31:48.890701Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "venus",
      "pass": "venus"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
115.140.161.61
2026-07-25 22:30:03.097711 UTC
COMMANDS RUN RECONNAISSANCE ROUTER TARGETING DATA THEFT SUCCESSFUL LOGIN SCORE: 520

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ /ip cloud print
Command not found: /ip cloud print
[obs-node]:~$ ifconfig
[obs-node]:~$ uname -a
[obs-node]:~$ cat /proc/cpuinfo
[obs-node]:~$ ps | grep '[Mm]iner'
[obs-node]:~$ ps -ef | grep '[Mm]iner'
[obs-node]:~$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
[obs-node]:~$ locate D877F783D5D3EF8Cs
[obs-node]:~$ echo Hi | cat -n
Record ID: 3d0a4705b4f5
Client Version: SSH-2.0-libssh2_1.11.1
Engagement Duration: 23.6s
HASSH Fingerprint: f45fb203c31069bb280067b71ed92ccb
{
  "id": "3d0a4705b4f5",
  "src_ip": "115.140.161.61",
  "start_time": "2026-07-25T22:30:03.097711Z",
  "end_time": "2026-07-25T22:30:26.728555Z",
  "duration": "23.6",
  "version": "SSH-2.0-libssh2_1.11.1",
  "hassh": "f45fb203c31069bb280067b71ed92ccb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "/ip cloud print",
    "ifconfig",
    "uname -a",
    "cat /proc/cpuinfo",
    "ps | grep '[Mm]iner'",
    "ps -ef | grep '[Mm]iner'",
    "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
    "locate D877F783D5D3EF8Cs",
    "echo Hi | cat -n"
  ],
  "detailed_commands": [
    {
      "cmd": "/ip cloud print",
      "failed": true,
      "error": "Command not found: /ip cloud print"
    },
    {
      "cmd": "ifconfig",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps -ef | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
      "failed": false,
      "error": null
    },
    {
      "cmd": "locate D877F783D5D3EF8Cs",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo Hi | cat -n",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/ip cloud print"
  ],
  "score": 520,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "ROUTER TARGETING",
    "DATA THEFT",
    "SUCCESSFUL LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:29:05.567002 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: forest

Record ID: 317b295cc34c
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "317b295cc34c",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:29:05.567002Z",
  "end_time": "2026-07-25T22:29:07.431247Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "forest",
      "pass": "forest"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
188.166.71.4
2026-07-25 22:26:23.593390 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lotus

Record ID: 19d0dfe8a98f
Client Version: SSH-2.0-Go
Engagement Duration: 1.9s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "19d0dfe8a98f",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:26:23.593390Z",
  "end_time": "2026-07-25T22:26:25.467838Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "lotus",
      "pass": "lotus"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
205.210.31.107
2026-07-25 22:23:13.608631 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4e495837d6e8
Client Version: SSH-2.0-ZGrab ZGrab SSH Survey
Engagement Duration: 2.9s
HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0
{
  "id": "4e495837d6e8",
  "src_ip": "205.210.31.107",
  "start_time": "2026-07-25T22:23:13.608631Z",
  "end_time": "2026-07-25T22:23:16.499070Z",
  "duration": "2.9",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
188.166.71.4
2026-07-25 22:21:54.194045 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 340c4aa63fd7
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "340c4aa63fd7",
  "src_ip": "188.166.71.4",
  "start_time": "2026-07-25T22:21:54.194045Z",
  "end_time": "2026-07-25T22:21:54.367032Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
220.127.148.6
2026-07-25 22:19:51.100104 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 8d2a260c4f66
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.0s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "8d2a260c4f66",
  "src_ip": "220.127.148.6",
  "start_time": "2026-07-25T22:19:51.100104Z",
  "end_time": "2026-07-25T22:19:52.064846Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
220.127.148.6
2026-07-25 22:19:49.000755 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 1a247d56b59b
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.9s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "1a247d56b59b",
  "src_ip": "220.127.148.6",
  "start_time": "2026-07-25T22:19:49.000755Z",
  "end_time": "2026-07-25T22:19:50.950022Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}