Adversarial Observation Interface

161.118.224.21

2026-10-11 11:47:30.361173 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 38a5a9cc9d74

Client Version: GET /.oci/oci_api_key.pem.bak HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "38a5a9cc9d74",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.361173Z",
  "end_time": "2026-10-11T11:47:30.397126Z",
  "duration": "0.0",
  "version": "GET /.oci/oci_api_key.pem.bak HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.359189 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8dcb44810aa0

Client Version: GET /.oci/config.bak HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "8dcb44810aa0",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.359189Z",
  "end_time": "2026-10-11T11:47:30.394804Z",
  "duration": "0.0",
  "version": "GET /.oci/config.bak HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.357162 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4029c90c7bb8

Client Version: GET /.cursor/mcp.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "4029c90c7bb8",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.357162Z",
  "end_time": "2026-10-11T11:47:30.392335Z",
  "duration": "0.0",
  "version": "GET /.cursor/mcp.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.355021 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b537bdbe60ab

Client Version: GET /.oci/private_key.pem HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "b537bdbe60ab",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.355021Z",
  "end_time": "2026-10-11T11:47:30.389671Z",
  "duration": "0.0",
  "version": "GET /.oci/private_key.pem HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.351977 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a65b57cf543e

Client Version: GET /oci_config HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "a65b57cf543e",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.351977Z",
  "end_time": "2026-10-11T11:47:30.386996Z",
  "duration": "0.0",
  "version": "GET /oci_config HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.349755 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c5dc8c4dbf50

Client Version: GET /oci_config.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "c5dc8c4dbf50",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.349755Z",
  "end_time": "2026-10-11T11:47:30.384256Z",
  "duration": "0.0",
  "version": "GET /oci_config.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.347535 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: aaee3cdc87c6

Client Version: GET /.mcp.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "aaee3cdc87c6",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.347535Z",
  "end_time": "2026-10-11T11:47:30.381434Z",
  "duration": "0.0",
  "version": "GET /.mcp.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.345197 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6f0f73bc8713

Client Version: GET /anythingllm/.env HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "6f0f73bc8713",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.345197Z",
  "end_time": "2026-10-11T11:47:30.378566Z",
  "duration": "0.0",
  "version": "GET /anythingllm/.env HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.342617 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2adb6dcecfba

Client Version: GET /.oci/api_key.pem HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "2adb6dcecfba",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.342617Z",
  "end_time": "2026-10-11T11:47:30.375608Z",
  "duration": "0.0",
  "version": "GET /.oci/api_key.pem HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:30.340244 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cf0215a7cb50

Client Version: GET /flowise/.env HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "cf0215a7cb50",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:30.340244Z",
  "end_time": "2026-10-11T11:47:30.372662Z",
  "duration": "0.0",
  "version": "GET /flowise/.env HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.327679 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 17f9d3d4f174

Client Version: GET /litellm_config.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "17f9d3d4f174",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.327679Z",
  "end_time": "2026-10-11T11:47:28.334197Z",
  "duration": "0.0",
  "version": "GET /litellm_config.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.325158 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 088da1484eb8

Client Version: GET /config/litellm_config.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "088da1484eb8",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.325158Z",
  "end_time": "2026-10-11T11:47:28.331156Z",
  "duration": "0.0",
  "version": "GET /config/litellm_config.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.302379 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cc9bdf011765

Client Version: GET /open-webui/.env HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "cc9bdf011765",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.302379Z",
  "end_time": "2026-10-11T11:47:28.322648Z",
  "duration": "0.0",
  "version": "GET /open-webui/.env HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.299327 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: df2b4d649d3e

Client Version: GET /librechat.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "df2b4d649d3e",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.299327Z",
  "end_time": "2026-10-11T11:47:28.318719Z",
  "duration": "0.0",
  "version": "GET /librechat.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.296538 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 08306fcd8b68

Client Version: GET /dify/.env HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "08306fcd8b68",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.296538Z",
  "end_time": "2026-10-11T11:47:28.314748Z",
  "duration": "0.0",
  "version": "GET /dify/.env HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.293722 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4f13f48f2499

Client Version: GET /litellm_config.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "4f13f48f2499",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.293722Z",
  "end_time": "2026-10-11T11:47:28.310818Z",
  "duration": "0.0",
  "version": "GET /litellm_config.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.290796 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c019e5c00936

Client Version: GET /webui/.env HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "c019e5c00936",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.290796Z",
  "end_time": "2026-10-11T11:47:28.306882Z",
  "duration": "0.0",
  "version": "GET /webui/.env HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.264318 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d73343bdc4c8

Client Version: GET /.github/workflows/deploy.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "d73343bdc4c8",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.264318Z",
  "end_time": "2026-10-11T11:47:28.271813Z",
  "duration": "0.0",
  "version": "GET /.github/workflows/deploy.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:28.261531 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d288949e6295

Client Version: GET /Jenkinsfile HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "d288949e6295",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:28.261531Z",
  "end_time": "2026-10-11T11:47:28.268197Z",
  "duration": "0.0",
  "version": "GET /Jenkinsfile HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.712322 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 78687a41b5b2

Client Version: GET /.gitlab-ci.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "78687a41b5b2",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.712322Z",
  "end_time": "2026-10-11T11:47:27.727693Z",
  "duration": "0.0",
  "version": "GET /.gitlab-ci.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.709386 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3e0eb34c26e5

Client Version: GET /serverless.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "3e0eb34c26e5",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.709386Z",
  "end_time": "2026-10-11T11:47:27.724127Z",
  "duration": "0.0",
  "version": "GET /serverless.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.706449 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 73c6225f7605

Client Version: GET /Dockerfile HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "73c6225f7605",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.706449Z",
  "end_time": "2026-10-11T11:47:27.720273Z",
  "duration": "0.0",
  "version": "GET /Dockerfile HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.703344 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 783173eaac87

Client Version: GET /compose.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "783173eaac87",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.703344Z",
  "end_time": "2026-10-11T11:47:27.716501Z",
  "duration": "0.0",
  "version": "GET /compose.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.684916 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b49d530dc6f6

Client Version: GET /docker-compose.override.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "b49d530dc6f6",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.684916Z",
  "end_time": "2026-10-11T11:47:27.696660Z",
  "duration": "0.0",
  "version": "GET /docker-compose.override.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.682144 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d7f1a263ff2

Client Version: GET /docker-compose.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "7d7f1a263ff2",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.682144Z",
  "end_time": "2026-10-11T11:47:27.692841Z",
  "duration": "0.0",
  "version": "GET /docker-compose.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.679188 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e6afdf63cad4

Client Version: GET /compose.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "e6afdf63cad4",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.679188Z",
  "end_time": "2026-10-11T11:47:27.689039Z",
  "duration": "0.0",
  "version": "GET /compose.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.671895 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0a04519ea401

Client Version: GET /docker-compose.yml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "0a04519ea401",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.671895Z",
  "end_time": "2026-10-11T11:47:27.676384Z",
  "duration": "0.0",
  "version": "GET /docker-compose.yml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:27.656670 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 01b41379837b

Client Version: GET /variables.tf HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "01b41379837b",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:27.656670Z",
  "end_time": "2026-10-11T11:47:27.660308Z",
  "duration": "0.0",
  "version": "GET /variables.tf HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

38.22.169.6

2026-10-11 11:47:26.790426 UTC

SUCCESSFUL LOGIN RECONNAISSANCE COMMANDS RUN SCORE: 100

Credential acceptance event recorded. Target authentication: git / pass

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 434bb311ef22

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "434bb311ef22",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-11T11:47:26.790426Z",
  "end_time": "2026-10-11T11:47:27.449186Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "git",
    "pass": "pass"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "SUCCESSFUL LOGIN",
    "RECONNAISSANCE",
    "COMMANDS RUN"
  ]
}

161.118.224.21

2026-10-11 11:47:23.268906 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 21bcacd64b90

Client Version: GET /terraform.tfstate HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "21bcacd64b90",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.268906Z",
  "end_time": "2026-10-11T11:47:23.271384Z",
  "duration": "0.0",
  "version": "GET /terraform.tfstate HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.265537 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a773ae61218f

Client Version: GET /terraform.tfstate.backup HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "a773ae61218f",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.265537Z",
  "end_time": "2026-10-11T11:47:23.267154Z",
  "duration": "0.0",
  "version": "GET /terraform.tfstate.backup HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.256799 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ed0ee7fe6e60

Client Version: GET /terraform.tfvars.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "ed0ee7fe6e60",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.256799Z",
  "end_time": "2026-10-11T11:47:23.264482Z",
  "duration": "0.0",
  "version": "GET /terraform.tfvars.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.255682 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d16633ed3033

Client Version: GET /providers.tf HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "d16633ed3033",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.255682Z",
  "end_time": "2026-10-11T11:47:23.262970Z",
  "duration": "0.0",
  "version": "GET /providers.tf HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.254604 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c434e91e4a6a

Client Version: GET /.config/gcloud/application_default_credentials.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "c434e91e4a6a",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.254604Z",
  "end_time": "2026-10-11T11:47:23.261492Z",
  "duration": "0.0",
  "version": "GET /.config/gcloud/application_default_credentials.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.253475 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e4e7497de258

Client Version: GET /service-account.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "e4e7497de258",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.253475Z",
  "end_time": "2026-10-11T11:47:23.259975Z",
  "duration": "0.0",
  "version": "GET /service-account.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.252202 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7f5d579b7f89

Client Version: GET /clouds.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "7f5d579b7f89",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.252202Z",
  "end_time": "2026-10-11T11:47:23.258466Z",
  "duration": "0.0",
  "version": "GET /clouds.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.249265 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8a3b5894308a

Client Version: GET /terraform.tfvars HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "8a3b5894308a",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.249265Z",
  "end_time": "2026-10-11T11:47:23.251077Z",
  "duration": "0.0",
  "version": "GET /terraform.tfvars HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:23.246150 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9930100d725f

Client Version: GET /.kube/config HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "9930100d725f",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:23.246150Z",
  "end_time": "2026-10-11T11:47:23.248092Z",
  "duration": "0.0",
  "version": "GET /.kube/config HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.185661 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: dfd8a553341a

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "dfd8a553341a",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.185661Z",
  "end_time": "2026-10-11T11:49:18.223620Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.140972 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0c8d0d8ed1d1

Client Version: GET /.runpod/config.toml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "0c8d0d8ed1d1",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.140972Z",
  "end_time": "2026-10-11T11:47:18.184560Z",
  "duration": "0.0",
  "version": "GET /.runpod/config.toml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.138967 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c76efa8a3a8e

Client Version: GET /.docker/config.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "c76efa8a3a8e",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.138967Z",
  "end_time": "2026-10-11T11:47:18.183018Z",
  "duration": "0.0",
  "version": "GET /.docker/config.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.137002 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6dd171083e12

Client Version: GET /.npmrc HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "6dd171083e12",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.137002Z",
  "end_time": "2026-10-11T11:47:18.181457Z",
  "duration": "0.0",
  "version": "GET /.npmrc HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.134836 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c9a6fce7c18b

Client Version: GET /.config/doctl/config.yaml HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "c9a6fce7c18b",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.134836Z",
  "end_time": "2026-10-11T11:47:18.179918Z",
  "duration": "0.0",
  "version": "GET /.config/doctl/config.yaml HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.132638 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3c8db67df338

Client Version: GET /.config/hub HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "3c8db67df338",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.132638Z",
  "end_time": "2026-10-11T11:47:18.178315Z",
  "duration": "0.0",
  "version": "GET /.config/hub HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.130324 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bfeff093c8cf

Client Version: GET /.oci/oci_api_key.pem HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "bfeff093c8cf",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.130324Z",
  "end_time": "2026-10-11T11:47:18.176698Z",
  "duration": "0.0",
  "version": "GET /.oci/oci_api_key.pem HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.127935 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b760cfed08ec

Client Version: GET /.aws/config HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "b760cfed08ec",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.127935Z",
  "end_time": "2026-10-11T11:47:18.175024Z",
  "duration": "0.0",
  "version": "GET /.aws/config HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.125558 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 717960578ce3

Client Version: GET /auth.json HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "717960578ce3",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.125558Z",
  "end_time": "2026-10-11T11:47:18.173313Z",
  "duration": "0.0",
  "version": "GET /auth.json HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.123141 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bd11413fe5e3

Client Version: GET /.oci/config HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "bd11413fe5e3",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.123141Z",
  "end_time": "2026-10-11T11:47:18.171591Z",
  "duration": "0.0",
  "version": "GET /.oci/config HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.120554 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3245bf35284b

Client Version: GET /.aws/credentials HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "3245bf35284b",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.120554Z",
  "end_time": "2026-10-11T11:47:18.169834Z",
  "duration": "0.0",
  "version": "GET /.aws/credentials HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

161.118.224.21

2026-10-11 11:47:18.118015 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5d7a3c85d527

Client Version: GET /.netrc HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "5d7a3c85d527",
  "src_ip": "161.118.224.21",
  "start_time": "2026-10-11T11:47:18.118015Z",
  "end_time": "2026-10-11T11:47:18.168039Z",
  "duration": "0.0",
  "version": "GET /.netrc HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}