nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 3192 / 16000 (799966 total records)
Passive Observation Node - Active Operational Overview
118.89.88.153
2026-10-10 23:23:42.243396 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fe5ae3bf477b
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "fe5ae3bf477b",
  "src_ip": "118.89.88.153",
  "start_time": "2026-10-10T23:23:42.243396Z",
  "end_time": "2026-10-10T23:25:42.260011Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
42.81.126.27
2026-10-10 23:23:15.784668 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f091f1e5bf13
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "f091f1e5bf13",
  "src_ip": "42.81.126.27",
  "start_time": "2026-10-10T23:23:15.784668Z",
  "end_time": "2026-10-10T23:25:15.799342Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
80.94.92.179
2026-10-10 23:23:03.637144 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 200

Credential acceptance event recorded. Target authentication: root / 123456

Remote entity achieved interactive shell state. Command sequence (9 executed):

[obs-node]:~$ export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '"' ) || echo ""); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q "lm" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 8" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q "CPU architecture: 7" /proc/cpuinfo && echo armv7l ) || echo ""); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c "^processor" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E "^model name" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E "^Hardware" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; printf 'execute_err='; out=$(bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf "#!/bin/bash\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case "$out" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf "#!/bin/sh\necho \"xxxxxx\"\n" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' "$out" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\n' 2>/dev/null || busybox tr -d '\n' 2>/dev/null || cat ); printf '\n'; echo '===DONE===' ) 2>&1 ); echo "UNAME:$uname"; echo "ARCH:$arch"; echo "UPTIME:$uptime"; echo "CPUS:$cpus"; echo "CPU_MODEL:$cpu_model"; echo "GPU:$gpu_info"; echo "LAST:$last_output"; echo "FILTER:$filter_output"
[obs-node]:~$ uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /bin/uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ /usr/bin/uname -s -v -n -m 2 > /dev/null
Command not found: /usr/bin/uname -s -v -n -m
[obs-node]:~$ busybox uname -s -v -n -m 2 > /dev/null
[obs-node]:~$ ( [ -f /proc/version ]
[obs-node]:~$ [ -f /proc/version ]
[obs-node]:~$ head -1 /proc/version | cut -d -f1
[obs-node]:~$ [ -f /etc/os-release ]
Record ID: 7ff9d6865328
Client Version: SSH-2.0-Go
Engagement Duration: 9.5s
HASSH Fingerprint: 2ec37a7cc8daf20b10e1ad6221061ca5
{
  "id": "7ff9d6865328",
  "src_ip": "80.94.92.179",
  "start_time": "2026-10-10T23:23:03.637144Z",
  "end_time": "2026-10-10T23:23:13.187611Z",
  "duration": "9.5",
  "version": "SSH-2.0-Go",
  "hassh": "2ec37a7cc8daf20b10e1ad6221061ca5",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "123456"
  },
  "commands": [
    "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
    "uname -s -v -n -m 2 > /dev/null",
    "/bin/uname -s -v -n -m 2 > /dev/null",
    "/usr/bin/uname -s -v -n -m 2 > /dev/null",
    "busybox uname -s -v -n -m 2 > /dev/null",
    "( [ -f /proc/version ]",
    "[ -f /proc/version ]",
    "head -1 /proc/version | cut -d -f1",
    "[ -f /etc/os-release ]"
  ],
  "detailed_commands": [
    {
      "cmd": "export PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:$PATH; uname=$(uname -s -v -n -m 2>/dev/null || /bin/uname -s -v -n -m 2>/dev/null || /usr/bin/uname -s -v -n -m 2>/dev/null || busybox uname -s -v -n -m 2>/dev/null || ( [ -f /proc/version ] && head -1 /proc/version | cut -d' ' -f1 ) || ( [ -f /etc/os-release ] && grep '^ID=' /etc/os-release | cut -d= -f2 | tr -d '\"' ) || echo \"\"); arch=$(uname -m 2>/dev/null || /bin/uname -m 2>/dev/null || /usr/bin/uname -m 2>/dev/null || busybox uname -m 2>/dev/null || ( [ -f /proc/cpuinfo ] && grep -q \"lm\" /proc/cpuinfo && echo x86_64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 8\" /proc/cpuinfo && echo aarch64 ) || ( [ -f /proc/cpuinfo ] && grep -q \"CPU architecture: 7\" /proc/cpuinfo && echo armv7l ) || echo \"\"); uptime=$(cat /proc/uptime 2>/dev/null || busybox cat /proc/uptime 2>/dev/null); cpus=$(nproc 2>/dev/null || /usr/bin/nproc 2>/dev/null || busybox nproc 2>/dev/null || grep -c \"^processor\" /proc/cpuinfo 2>/dev/null); cpu_model=$( { lscpu 2>/dev/null | awk -F: '/Model name/ {print $2}'; grep -m1 -E \"^model name\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; grep -m1 -E \"^Hardware\" /proc/cpuinfo 2>/dev/null | cut -d: -f2-; cat /proc/device-tree/model 2>/dev/null; } | sed '/^$/d; /unknown/d; s/^[[:space:]]*//; s/[[:space:]]*$//; s/ AArch64 Processor$//; s/ Processor$//; s/ CPU$//' | head -1 ); gpu_info=$( (lspci 2>/dev/null | grep -i vga; lspci 2>/dev/null | grep -i nvidia; busybox lspci 2>/dev/null | grep -i vga; busybox lspci 2>/dev/null | grep -i nvidia) 2>/dev/null ); last_output=$(last 2>/dev/null); filter_output=$( ( export LANG=C LC_ALL=C; echo '===SHELL_BEHAVIOR==='; printf 'path_err='; ( ./xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'cmd_err='; ( xxxxxx 2>&1 || true ) | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; printf 'execute_err='; out=$(bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(/usr/bin/bash -c 'printf \"#!/bin/bash\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); case \"$out\" in *xxxxxx*) ;; *) out=$(busybox sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1 || sh -c 'printf \"#!/bin/sh\\necho \\\"xxxxxx\\\"\\n\" > filter && chmod +x filter && ./filter && rm -rf filter' 2>&1); esac; esac; esac; printf '%s' \"$out\" | ( head -c 250 2>/dev/null || busybox head -c 250 2>/dev/null || dd bs=250 count=1 2>/dev/null ) | ( tr -d '\\n' 2>/dev/null || busybox tr -d '\\n' 2>/dev/null || cat ); printf '\\n'; echo '===DONE===' ) 2>&1 ); echo \"UNAME:$uname\"; echo \"ARCH:$arch\"; echo \"UPTIME:$uptime\"; echo \"CPUS:$cpus\"; echo \"CPU_MODEL:$cpu_model\"; echo \"GPU:$gpu_info\"; echo \"LAST:$last_output\"; echo \"FILTER:$filter_output\"",
      "failed": false,
      "error": null
    },
    {
      "cmd": "uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "/usr/bin/uname -s -v -n -m 2 > /dev/null",
      "failed": true,
      "error": "Command not found: /usr/bin/uname -s -v -n -m"
    },
    {
      "cmd": "busybox uname -s -v -n -m 2 > /dev/null",
      "failed": false,
      "error": null
    },
    {
      "cmd": "( [ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /proc/version ]",
      "failed": false,
      "error": null
    },
    {
      "cmd": "head -1 /proc/version | cut -d -f1",
      "failed": false,
      "error": null
    },
    {
      "cmd": "[ -f /etc/os-release ]",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "/usr/bin/uname -s -v -n -m"
  ],
  "score": 200,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
80.94.92.179
2026-10-10 23:20:56.807825 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9994271cb274
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "9994271cb274",
  "src_ip": "80.94.92.179",
  "start_time": "2026-10-10T23:20:56.807825Z",
  "end_time": "2026-10-10T23:20:56.974997Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
102.220.161.79
2026-10-10 23:18:58.606934 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: kamgareyman

Record ID: f9e2d4f9119b
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "f9e2d4f9119b",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T23:18:58.606934Z",
  "end_time": "2026-10-10T23:19:00.507778Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "kamgareyman",
      "pass": "3132333435"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
192.168.0.1
2026-10-10 23:16:42.156021 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1351b1fa9fb3
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "1351b1fa9fb3",
  "src_ip": "192.168.0.1",
  "start_time": "2026-10-10T23:16:42.156021Z",
  "end_time": "2026-10-10T23:16:42.167546Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
45.156.87.189
2026-10-10 23:15:33.864840 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: shutdown

Record ID: 3007df654942
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "3007df654942",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T23:15:33.864840Z",
  "end_time": "2026-10-10T23:15:35.654165Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "shutdown",
      "pass": "chenchen"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
2.57.121.25
2026-10-10 23:14:03.718514 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / riviera

Record ID: e6987a6fd066
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "e6987a6fd066",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-10T23:14:03.718514Z",
  "end_time": "2026-10-10T23:14:09.724848Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "riviera"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
103.239.173.3
2026-10-10 23:09:59.119835 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e2ffbf6111b1
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "e2ffbf6111b1",
  "src_ip": "103.239.173.3",
  "start_time": "2026-10-10T23:09:59.119835Z",
  "end_time": "2026-10-10T23:09:59.123227Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
45.156.87.189
2026-10-10 23:09:09.536385 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / catherine

Record ID: 33b7e72cbda5
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 7.6s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "33b7e72cbda5",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T23:09:09.536385Z",
  "end_time": "2026-10-10T23:09:17.098445Z",
  "duration": "7.6",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "catherine"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
103.239.173.1
2026-10-10 23:08:03.987934 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: af89cd47c8af
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "af89cd47c8af",
  "src_ip": "103.239.173.1",
  "start_time": "2026-10-10T23:08:03.987934Z",
  "end_time": "2026-10-10T23:08:03.991086Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
130.12.182.122
2026-10-10 23:08:02.348408 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / Aa123456789@

Record ID: e21ee5aac133
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.4s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "e21ee5aac133",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T23:08:02.348408Z",
  "end_time": "2026-10-10T23:08:03.740124Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa123456789@"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
38.22.169.6
2026-10-10 23:07:36.516491 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / 11111

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 14bd4943ee45
Client Version: SSH-2.0-Go
Engagement Duration: 0.6s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "14bd4943ee45",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T23:07:36.516491Z",
  "end_time": "2026-10-10T23:07:37.138825Z",
  "duration": "0.6",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "11111"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
102.220.161.79
2026-10-10 23:06:29.444676 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mark

Record ID: e4d6efa5a177
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "e4d6efa5a177",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T23:06:29.444676Z",
  "end_time": "2026-10-10T23:06:31.356164Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "mark",
      "pass": "P@ssw0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
60.171.57.163
2026-10-10 23:03:37.381904 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4c5b1758acaf
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "4c5b1758acaf",
  "src_ip": "60.171.57.163",
  "start_time": "2026-10-10T23:03:37.381904Z",
  "end_time": "2026-10-10T23:05:37.387104Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
60.171.57.163
2026-10-10 23:03:37.018739 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c6cc6db876d5
Client Version: Unknown
Engagement Duration: 0.2s
{
  "id": "c6cc6db876d5",
  "src_ip": "60.171.57.163",
  "start_time": "2026-10-10T23:03:37.018739Z",
  "end_time": "2026-10-10T23:03:37.235617Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
130.12.182.122
2026-10-10 23:03:03.110897 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: s7helene

Record ID: 895c81687dd0
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "895c81687dd0",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T23:03:03.110897Z",
  "end_time": "2026-10-10T23:03:05.020259Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "s7helene",
      "pass": "private"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
130.12.182.122
2026-10-10 22:59:23.204822 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: orangepi

Record ID: ae473e70dfb7
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "ae473e70dfb7",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T22:59:23.204822Z",
  "end_time": "2026-10-10T22:59:25.119676Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "orangepi",
      "pass": "orangepi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
45.156.87.189
2026-10-10 22:57:23.675485 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: lnxsaidareddy

Record ID: df7aab13d847
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "df7aab13d847",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T22:57:23.675485Z",
  "end_time": "2026-10-10T22:57:25.514499Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "lnxsaidareddy",
      "pass": "nifi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
102.220.161.79
2026-10-10 22:56:21.087995 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mehran

Record ID: d5d22441e1f7
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "d5d22441e1f7",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T22:56:21.087995Z",
  "end_time": "2026-10-10T22:56:22.985793Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "mehran",
      "pass": "q1w2e3r4"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
130.12.182.122
2026-10-10 22:52:17.140962 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: precio01

Record ID: 8fa95633a8ad
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "8fa95633a8ad",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T22:52:17.140962Z",
  "end_time": "2026-10-10T22:52:19.052433Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "precio01",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
45.156.87.189
2026-10-10 22:52:00.278775 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / badboy

Record ID: 9a66d548b934
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.1s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "9a66d548b934",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T22:52:00.278775Z",
  "end_time": "2026-10-10T22:52:01.425991Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "badboy"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
38.22.169.6
2026-10-10 22:51:38.475789 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / qwerty13456

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: bdae98ccfb9e
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "bdae98ccfb9e",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T22:51:38.475789Z",
  "end_time": "2026-10-10T22:51:39.184192Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "qwerty13456"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
88.230.197.133
2026-10-10 22:51:07.644978 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6601cbf8261b
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "6601cbf8261b",
  "src_ip": "88.230.197.133",
  "start_time": "2026-10-10T22:51:07.644978Z",
  "end_time": "2026-10-10T22:51:07.648401Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
176.53.159.196
2026-10-10 22:50:00.191288 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 0fe902b7fb1c
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "0fe902b7fb1c",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-10T22:50:00.191288Z",
  "end_time": "2026-10-10T22:50:01.364407Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
102.220.161.79
2026-10-10 22:44:38.161216 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: king

Record ID: b6e88e2c5f97
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "b6e88e2c5f97",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T22:44:38.161216Z",
  "end_time": "2026-10-10T22:44:40.066251Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "king",
      "pass": "hummingbot"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
45.156.87.189
2026-10-10 22:41:21.889583 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user30

Record ID: 913bcb415223
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "913bcb415223",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T22:41:21.889583Z",
  "end_time": "2026-10-10T22:41:23.690099Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "user30",
      "pass": "zhouh"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
130.12.182.122
2026-10-10 22:40:22.256177 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / Password05

Record ID: fd1f4ad87d54
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.3s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "fd1f4ad87d54",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T22:40:22.256177Z",
  "end_time": "2026-10-10T22:40:23.534744Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "Password05"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
193.46.255.86
2026-10-10 22:39:24.471226 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / admin@1

Record ID: 18fd636abb1e
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "18fd636abb1e",
  "src_ip": "193.46.255.86",
  "start_time": "2026-10-10T22:39:24.471226Z",
  "end_time": "2026-10-10T22:39:30.475066Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "admin@1"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
45.156.87.189
2026-10-10 22:38:58.023861 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: us48

Record ID: 01063899360a
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "01063899360a",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T22:38:58.023861Z",
  "end_time": "2026-10-10T22:38:59.872176Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "us48",
      "pass": "raaj123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 22:36:05.536906 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / qwerty

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 3568826c337d
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "3568826c337d",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T22:36:05.536906Z",
  "end_time": "2026-10-10T22:36:06.241789Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "qwerty"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
102.220.161.79
2026-10-10 22:34:32.143173 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: anonymous

Record ID: 69d0d12b1ab9
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "69d0d12b1ab9",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T22:34:32.143173Z",
  "end_time": "2026-10-10T22:34:34.042042Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "anonymous",
      "pass": "admin@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
178.215.146.80
2026-10-10 22:34:03.039473 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 18b18436cfd5
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "18b18436cfd5",
  "src_ip": "178.215.146.80",
  "start_time": "2026-10-10T22:34:03.039473Z",
  "end_time": "2026-10-10T22:34:03.043079Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
45.156.87.189
2026-10-10 22:33:19.240095 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: unl2

Record ID: 1ed22999a4b1
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "1ed22999a4b1",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T22:33:19.240095Z",
  "end_time": "2026-10-10T22:33:21.068506Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "unl2",
      "pass": "idempiere"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
130.12.182.122
2026-10-10 22:33:02.749757 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: crew

Record ID: 6aa3cf8471b9
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "6aa3cf8471b9",
  "src_ip": "130.12.182.122",
  "start_time": "2026-10-10T22:33:02.749757Z",
  "end_time": "2026-10-10T22:33:04.653616Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "crew",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
178.215.146.80
2026-10-10 22:31:01.096176 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6de30c46f147
Client Version: Unknown
Engagement Duration: 0.0s
{
  "id": "6de30c46f147",
  "src_ip": "178.215.146.80",
  "start_time": "2026-10-10T22:31:01.096176Z",
  "end_time": "2026-10-10T22:31:01.102073Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
38.22.169.6
2026-10-10 22:20:34.355804 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / root

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: e222850800ad
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "e222850800ad",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T22:20:34.355804Z",
  "end_time": "2026-10-10T22:20:35.028467Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "root"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
102.220.161.84
2026-10-10 22:19:45.857397 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testuser1

Record ID: b43f8baafdc4
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "b43f8baafdc4",
  "src_ip": "102.220.161.84",
  "start_time": "2026-10-10T22:19:45.857397Z",
  "end_time": "2026-10-10T22:19:47.756206Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "testuser1",
      "pass": "service"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
102.220.161.79
2026-10-10 22:19:34.227924 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: emo

Record ID: 37559137d5f1
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "37559137d5f1",
  "src_ip": "102.220.161.79",
  "start_time": "2026-10-10T22:19:34.227924Z",
  "end_time": "2026-10-10T22:19:36.133614Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "emo",
      "pass": "123321qwe"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
2.57.121.112
2026-10-10 22:15:42.602826 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: danya

Record ID: 49533729668d
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.5s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "49533729668d",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-10T22:15:42.602826Z",
  "end_time": "2026-10-10T22:15:49.122809Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "danya",
      "pass": "danya"
    },
    {
      "user": "danya",
      "pass": "danya1"
    },
    {
      "user": "danya",
      "pass": "danya123"
    },
    {
      "user": "danya",
      "pass": "danya1234"
    },
    {
      "user": "danya",
      "pass": "danya12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
2.57.121.25
2026-10-10 22:13:26.267974 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / romain

Record ID: bbf5d0e92810
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "bbf5d0e92810",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-10T22:13:26.267974Z",
  "end_time": "2026-10-10T22:13:32.274574Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "romain"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
102.220.161.84
2026-10-10 22:12:55.662138 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rabbitmq

Record ID: c7bda273aefc
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "c7bda273aefc",
  "src_ip": "102.220.161.84",
  "start_time": "2026-10-10T22:12:55.662138Z",
  "end_time": "2026-10-10T22:12:57.572269Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "rabbitmq",
      "pass": "user@123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
198.235.24.47
2026-10-10 22:11:28.648559 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6befcb50aecf
Client Version: SSH-2.0-ZGrab ZGrab SSH Survey
Engagement Duration: 3.6s
HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0
{
  "id": "6befcb50aecf",
  "src_ip": "198.235.24.47",
  "start_time": "2026-10-10T22:11:28.648559Z",
  "end_time": "2026-10-10T22:11:32.297641Z",
  "duration": "3.6",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
45.148.10.141
2026-10-10 22:07:12.196833 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ba7a19413509
Client Version: SSH-2.0-PUTTY
Engagement Duration: 0.8s
HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c
{
  "id": "ba7a19413509",
  "src_ip": "45.148.10.141",
  "start_time": "2026-10-10T22:07:12.196833Z",
  "end_time": "2026-10-10T22:07:12.964550Z",
  "duration": "0.8",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
102.220.161.84
2026-10-10 22:06:48.890727 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: moodle

Record ID: 012be5c95125
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.9s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "012be5c95125",
  "src_ip": "102.220.161.84",
  "start_time": "2026-10-10T22:06:48.890727Z",
  "end_time": "2026-10-10T22:06:50.797148Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "moodle",
      "pass": "A123456a"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 22:05:19.727277 UTC
COMMANDS RUN RECONNAISSANCE SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: oracle / admin

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ /bin/./uname -s -v -n -r -m
Record ID: 717b9405018b
Client Version: SSH-2.0-Go
Engagement Duration: 0.7s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "717b9405018b",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T22:05:19.727277Z",
  "end_time": "2026-10-10T22:05:20.392831Z",
  "duration": "0.7",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "admin"
  },
  "commands": [
    "/bin/./uname -s -v -n -r -m"
  ],
  "detailed_commands": [
    {
      "cmd": "/bin/./uname -s -v -n -r -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "COMMANDS RUN",
    "RECONNAISSANCE",
    "SUCCESSFUL LOGIN"
  ]
}
176.53.159.196
2026-10-10 21:59:42.262266 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 36f504ee6f30
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "36f504ee6f30",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-10T21:59:42.262266Z",
  "end_time": "2026-10-10T21:59:43.427774Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
45.156.87.189
2026-10-10 21:56:40.965999 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cristian

Record ID: 40311bbfffad
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "40311bbfffad",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T21:56:40.965999Z",
  "end_time": "2026-10-10T21:56:42.759994Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "cristian",
      "pass": "uftp123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
45.156.87.189
2026-10-10 21:52:18.120256 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ionguest

Record ID: 4597c9696c06
Client Version: SSH-2.0-libssh_0.12.0
Engagement Duration: 1.8s
HASSH Fingerprint: a591c4ddccc960a2da8099958270fc92
{
  "id": "4597c9696c06",
  "src_ip": "45.156.87.189",
  "start_time": "2026-10-10T21:52:18.120256Z",
  "end_time": "2026-10-10T21:52:19.951744Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.12.0",
  "hassh": "a591c4ddccc960a2da8099958270fc92",
  "attempts": [
    {
      "user": "ionguest",
      "pass": "ionguest"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
38.22.169.6
2026-10-10 21:50:16.885306 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: oracle1

Record ID: 14d6c157e434
Client Version: SSH-2.0-Go
Engagement Duration: 1.4s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "14d6c157e434",
  "src_ip": "38.22.169.6",
  "start_time": "2026-10-10T21:50:16.885306Z",
  "end_time": "2026-10-10T21:50:18.317406Z",
  "duration": "1.4",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "oracle1",
      "pass": "oracle1"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}